
$ rpki-client -vvf rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
File: _UnAZPyj6S3swYqPUElLIfwB8lY.mft (raw, json)
Hash identifier: G7RzT4N1vxZioN0RZKzvdCnbbq5ELm/Kmf6WyOcFNyA=
Subject key identifier: 5E:CE:76:76:84:0F:AC:50:AA:3D:A9:41:15:2C:D4:6A:6C:F7:D9:8F
Authority key identifier: FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56
Certificate issuer: /CN=A91934DE/serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256
Certificate serial: 0238
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
Manifest number: 0227
Signing time: Mon 02 Mar 2026 00:23:44 +0000
Manifest this update: Mon 02 Mar 2026 00:23:41 +0000
Manifest next update: Mon 09 Mar 2026 00:23:41 +0000
Files and hashes: 1: _UnAZPyj6S3swYqPUElLIfwB8lY.crl (hash: J5VQ8tcyueJjmsIPv/wntpL/ecvtFaAw2t1DI+1toVI=)
2: 358556D2D98F11EDA9A38028C4F9AE02.roa (hash: /K4XbNVu4etnNSZ7BxaN1k4jj6OscZNd232IO+CgOm0=)
3: 05F11BACDF4A11EDA4190947C4F9AE02.roa (hash: KoscC2+CKPk9KEZZ95MIfhzhcgEnyjRIFFpZQcedXxs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl
rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:23:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91934DE, serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256
Validity
Not Before: Mar 2 00:23:41 2026 GMT
Not After : Mar 9 00:23:41 2026 GMT
Subject: CN=69a4d88f-05ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:cb:f9:a6:18:06:6b:05:bd:3e:ba:5e:84:
6c:b3:60:93:aa:ff:58:dd:fc:e5:22:3d:1c:bf:43:
56:df:6d:97:52:a4:e1:48:e2:51:89:fc:ad:62:e9:
66:5c:11:54:11:f9:d7:20:f4:bd:9d:24:a1:70:71:
60:22:98:65:49:01:c8:a8:a4:d0:c7:9e:5c:5d:e3:
c5:a8:90:53:a1:b4:34:58:2c:75:d4:a5:d6:28:91:
31:69:ac:3b:70:b5:04:30:49:ee:ad:ae:ed:8c:53:
56:f9:d0:fd:7e:1c:b9:e3:0e:b9:93:a7:45:09:1e:
59:a1:02:b4:32:e4:c2:fa:f8:77:e3:76:a4:7e:5e:
ac:ba:f9:7a:53:17:b3:30:20:52:88:fe:05:5a:51:
a6:4f:3c:dc:84:47:18:89:7e:b8:12:c8:e5:b5:8b:
6d:03:fc:72:04:20:f5:07:4c:48:3d:82:47:0c:c5:
3e:82:21:bd:92:f4:1b:3b:87:77:f0:83:86:98:f0:
31:dc:fd:3e:18:6a:f8:c4:47:7b:0b:91:be:86:b1:
f2:bb:25:c8:89:e8:94:65:e0:bb:19:3c:26:e1:9f:
a3:76:42:aa:76:ba:6d:9b:13:39:2e:cb:55:8d:17:
6d:fd:61:63:d5:13:81:89:ef:56:60:b1:07:ba:80:
6a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CE:76:76:84:0F:AC:50:AA:3D:A9:41:15:2C:D4:6A:6C:F7:D9:8F
X509v3 Authority Key Identifier:
keyid:FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:59:fe:36:92:e2:fd:c3:8f:6b:6a:dc:b8:bf:16:68:38:5b:
47:76:49:ff:a4:09:b0:d3:92:bf:ff:24:0e:52:71:7e:a0:54:
2f:6a:0a:69:af:23:d3:70:88:2f:4c:15:67:13:26:89:e5:af:
41:c0:d1:73:1d:70:c7:08:e1:c4:66:c2:63:bf:d0:a1:db:ae:
c3:be:81:41:fc:08:ae:26:f8:f6:47:ab:ed:f9:c1:7c:2c:b8:
2f:b2:88:48:32:0d:49:41:59:f8:bf:4b:ab:13:37:42:29:37:
0f:43:c4:af:e1:0a:a5:89:d2:22:d6:23:65:a6:df:6c:14:4b:
4a:fa:16:bb:b1:80:a7:03:6d:86:97:6a:e8:c6:09:89:a2:8a:
ef:b3:ad:39:49:a3:b1:a9:88:46:89:f0:fa:c1:33:c7:6e:6c:
8b:20:70:db:22:e0:bf:01:4d:d3:84:6d:eb:29:3c:76:8c:70:
eb:3f:c1:ca:a7:5d:c4:76:33:2a:f6:c8:ff:c0:bc:0d:1e:9f:
47:db:f1:89:17:c5:f2:f5:d8:de:e3:25:dc:23:3e:34:ec:e9:
ec:e7:57:ea:4d:a5:5e:d5:ba:77:75:8d:c8:b1:1b:e6:77:5e:
ff:37:8f:3a:ea:76:99:e7:e0:bc:26:58:36:c2:83:ec:14:b7:
6e:bd:c9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:27 2026 by rpki-client