
$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
File: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft (raw, json)
Hash identifier: M+b+g0QlzQ3qSedGMzAjDAZp0xoVSzr//hVWX0eA7dA=
Subject key identifier: 6F:3D:A1:48:4D:B5:D8:B1:9F:A4:8D:18:24:93:BF:35:F2:AB:20:2F
Authority key identifier: 52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24
Certificate issuer: /CN=A91774FB/serialNumber=5296BC801402C73909F591E19095F22465414324
Certificate serial: 015A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
Manifest number: 0155
Signing time: Fri 17 Apr 2026 04:45:28 +0000
Manifest this update: Fri 17 Apr 2026 04:45:28 +0000
Manifest next update: Fri 24 Apr 2026 04:45:28 +0000
Files and hashes: 1: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl (hash: eI5iamosfpB1nEyWadhrHRrD4iD8KzQzHw2J77Q1i/w=)
2: 24142938343C11EFA0165876C4F9AE02.roa (hash: cZdtKnw4eHifsUm3U5oL2ZEURjpZCo9PDtjWNEmuKMc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl
rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91774FB, serialNumber=5296BC801402C73909F591E19095F22465414324
Validity
Not Before: Apr 17 04:45:28 2026 GMT
Not After : Apr 24 04:45:28 2026 GMT
Subject: CN=69e1bae8-8b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:3e:28:11:28:2c:d8:5e:24:b5:95:58:3c:
21:37:9a:d9:4d:f3:82:a8:92:cc:6f:ad:dd:55:2a:
ed:71:c3:a1:53:09:9f:58:a8:25:8d:13:cb:60:56:
26:5b:aa:49:02:f0:56:47:bd:20:bd:ce:d6:e8:31:
ea:5f:68:f5:82:55:6f:c7:f5:72:43:f4:0f:5c:b7:
df:05:a3:cd:24:e2:32:77:5d:56:ed:9b:c3:48:dd:
5d:d0:b7:97:96:a4:74:06:93:78:4d:ad:ce:78:0d:
7c:e5:bd:eb:e5:7e:71:61:54:07:f9:42:76:76:a3:
88:26:e6:14:9a:46:f5:0b:3d:68:23:3c:2b:24:fc:
10:52:a3:6e:26:21:31:0f:fd:65:8e:c8:b2:21:fb:
e0:4d:cd:34:10:74:86:64:ab:18:66:24:ba:2b:25:
f8:73:c2:8d:80:7c:b1:80:8e:3e:ae:72:88:47:40:
9b:96:8f:b1:ba:97:23:b3:da:5a:95:aa:14:ed:3f:
1b:b9:92:74:a1:96:39:66:3c:1f:4c:03:fc:d9:1a:
9a:a4:77:da:02:1a:d7:dd:9d:c5:2a:10:54:4b:82:
b9:48:12:a8:a1:ef:28:cb:82:16:1a:c4:e7:f5:33:
59:0e:91:a3:c0:b0:9b:0f:15:52:a6:19:f0:ed:62:
b4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3D:A1:48:4D:B5:D8:B1:9F:A4:8D:18:24:93:BF:35:F2:AB:20:2F
X509v3 Authority Key Identifier:
keyid:52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:30:9d:4c:60:39:b3:5d:e1:21:80:ff:6c:2c:7d:6b:48:48:
69:7a:86:dd:80:6c:36:19:9f:1e:a3:70:85:2b:cb:57:a6:a7:
c0:f2:ba:24:ad:96:18:0a:17:b8:39:d4:2c:73:7a:20:5a:d6:
cd:ce:99:62:be:05:b6:d6:95:d6:60:d0:a5:d5:69:c7:92:6a:
5c:dd:a3:7f:68:39:90:b8:61:95:ee:e3:7a:a2:d1:16:14:9f:
1a:ec:e3:3d:3c:27:9a:10:b9:09:9c:8c:ac:fc:45:14:94:17:
0e:74:dc:39:a8:18:fc:51:f0:0d:1c:35:d6:9f:98:29:b6:98:
87:30:97:3a:48:ac:89:00:18:ac:8a:b9:bc:ab:cd:bd:6c:0e:
9c:02:d3:4d:ee:e6:09:ec:b8:bd:a6:b5:fd:ce:3c:83:94:38:
f3:98:63:95:99:2f:a6:10:80:99:d3:c5:c4:84:f2:be:57:9c:
fa:f9:72:b6:00:38:ce:a3:60:0d:0f:3d:73:40:5a:c9:29:b6:
7c:23:1d:af:5a:44:13:af:b5:69:1d:e9:4b:fd:cc:c9:5e:06:
e1:fe:1b:cc:c8:71:43:89:88:d0:6d:cc:ba:72:d3:12:27:fc:
e6:08:78:17:7e:ce:c5:90:38:d0:54:4f:c7:b1:8f:1b:8b:16:
3c:eb:30:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:35:38 2026 by rpki-client