
$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
File: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft (raw, json)
Hash identifier: iG4Lq+a/faE8aC4C/jbLFSoYKux30zeWVjK1r73h+g8=
Subject key identifier: 1C:3C:CD:34:55:5C:54:01:AD:7D:2F:57:6A:55:0F:B6:93:72:83:3C
Authority key identifier: 52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24
Certificate issuer: /CN=A91774FB/serialNumber=5296BC801402C73909F591E19095F22465414324
Certificate serial: 013D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
Manifest number: 013B
Signing time: Sun 01 Mar 2026 06:22:28 +0000
Manifest this update: Sun 01 Mar 2026 06:22:27 +0000
Manifest next update: Sun 08 Mar 2026 06:22:27 +0000
Files and hashes: 1: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl (hash: fXKzInNwiqmq6upZdNPigE92VSu5Egd2uWEzGdrzw90=)
2: 24142938343C11EFA0165876C4F9AE02.roa (hash: n7AIK79a5+aPFKSTz88y32yhIzyT87IgTPflOpV9KLI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl
rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91774FB, serialNumber=5296BC801402C73909F591E19095F22465414324
Validity
Not Before: Mar 1 06:22:27 2026 GMT
Not After : Mar 8 06:22:27 2026 GMT
Subject: CN=69a3db24-e5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:a0:92:a1:b6:17:a1:b5:3d:18:af:be:2a:
ec:fd:2c:c3:fc:55:9b:cc:6a:af:17:ec:a6:ac:3e:
1e:7d:ea:57:61:4c:b3:93:1c:8e:11:80:1e:ee:79:
df:47:14:16:d4:84:a3:7c:07:dc:1f:16:56:f4:35:
a4:7a:f5:71:a4:9c:5b:f3:41:de:98:b7:9c:35:d3:
5d:b1:89:0b:6e:9a:27:ce:a5:16:4f:e5:7d:ad:3c:
80:92:e8:ff:c2:7f:35:43:ba:d0:87:5e:b5:9c:f9:
75:39:2d:17:ee:42:a0:45:de:98:b2:3c:14:8e:db:
13:b0:b7:c3:45:7c:1c:01:fc:a7:ce:84:07:5c:eb:
1b:34:bf:5f:65:a7:55:e7:79:fe:0c:8a:14:4e:5d:
72:d7:f0:08:7d:aa:d1:d9:63:b4:50:e7:f2:f8:b2:
20:c4:02:77:58:6c:d6:e7:33:72:fc:ce:89:6b:d5:
bd:c8:88:a8:89:65:eb:e4:62:87:43:48:67:5d:ab:
7a:cd:bc:1d:97:99:76:b9:9b:47:ea:21:55:59:d7:
e7:9c:0f:60:06:6a:f4:a6:40:9e:e1:a6:f2:d2:5f:
fa:d7:2e:b1:6d:f8:32:fc:56:44:2f:bd:70:6a:26:
97:5a:7a:68:cf:20:73:c3:84:ed:f0:86:8c:81:d2:
74:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3C:CD:34:55:5C:54:01:AD:7D:2F:57:6A:55:0F:B6:93:72:83:3C
X509v3 Authority Key Identifier:
keyid:52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8d:47:71:06:4c:2f:cc:10:78:65:37:ca:53:59:bf:9e:36:
c1:2b:a1:f2:f5:67:62:b2:eb:21:b1:58:1b:89:f2:01:60:34:
be:dd:de:44:df:ac:bb:6a:de:c9:10:e1:49:3d:89:5f:65:63:
15:ee:d9:98:e9:1d:4f:b7:20:17:7c:63:f4:9f:0e:22:80:d0:
60:7f:66:eb:f6:90:48:71:1f:bd:50:77:4e:0d:11:b0:2b:28:
85:82:df:75:5f:f0:cd:4d:c6:7a:5c:eb:e7:65:1c:d5:e7:05:
16:4b:0b:e1:d0:04:62:a2:f1:2f:91:c6:b9:6c:62:87:c9:c7:
37:7f:e2:39:58:1e:e6:2d:23:66:72:b8:67:df:6e:93:e3:b8:
20:c6:19:2e:18:65:6e:97:63:b4:80:db:23:5e:58:fb:d6:28:
5a:37:bb:ee:d0:8b:d5:b7:b3:cd:46:07:19:e3:90:53:87:eb:
fd:59:72:99:8f:67:a7:16:83:80:5b:68:84:ab:5d:d1:9d:10:
64:d5:4e:5e:f8:43:b3:38:cc:e8:12:00:f3:a7:74:6c:07:00:
f4:39:72:82:4f:cc:a4:f7:1c:7f:79:c3:11:87:fd:60:1f:51:
d0:80:e6:19:73:8d:a1:fc:9a:90:8d:23:ad:ed:e7:4d:67:99:
bb:67:f5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:18:41 2026 by rpki-client