
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
File: _uphQ5owmLhcyxg7WkGqEq9Fyh4.mft (raw, json)
Hash identifier: ozH/ydKfLywYLi/d9rDUoUpnRQBIFDZiuypBHpsKw30=
Subject key identifier: 02:D6:C8:6A:98:B6:7B:47:39:51:7B:E6:EB:CF:E2:66:BC:D0:46:A4
Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
Certificate issuer: /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Certificate serial: 08AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
Manifest number: 089A
Signing time: Sun 26 Jul 2026 21:17:20 +0000
Manifest this update: Sun 26 Jul 2026 21:17:20 +0000
Manifest next update: Sun 02 Aug 2026 21:17:20 +0000
Files and hashes: 1: _uphQ5owmLhcyxg7WkGqEq9Fyh4.crl (hash: yTf+6KYTwzUY0Z7cKzsoxvhjEzlrNmcWK/P36hYntkE=)
2: 3FA536CA38EE11F1A0707106A9833773.roa (hash: mUiOI8EcFxg0okwr3CRT18uhCpuSgMbB1bMOukLtLrw=)
3: 2B219CDC1FE811EF96F54D5AC4F9AE02.roa (hash: pKtga/er1/h2JIAsQEMOIlundhuuAOO6gPVgXaRRQH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2223 (0x8af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A19C8, serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Validity
Not Before: Jul 26 21:17:20 2026 GMT
Not After : Aug 2 21:17:20 2026 GMT
Subject: CN=6a667960-c6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b3:3a:c9:b4:d9:3e:ed:89:10:b2:16:5e:4e:
58:2f:43:ea:e3:d0:14:7f:1b:38:1f:a3:d7:5f:3a:
d5:14:42:76:43:eb:96:49:0c:95:00:f1:ca:c9:48:
90:df:43:39:a4:4c:37:ea:37:db:76:22:7e:83:8f:
25:ba:2c:cb:fa:56:9f:4c:d2:29:fe:4d:e9:d1:17:
8b:c2:29:bd:43:42:45:57:9b:33:0c:f7:6f:42:4e:
da:84:bc:d5:12:0e:39:79:b1:ad:ca:3f:39:c8:0e:
3a:e5:66:16:8e:3b:72:de:87:65:02:1c:fd:36:3d:
10:d8:b9:5a:2e:ae:f2:74:eb:a4:60:45:d3:da:4b:
28:fa:40:39:7f:17:9c:53:14:08:7b:72:57:ed:7a:
f6:37:88:e3:cb:ca:ec:ec:76:25:45:ab:58:75:f7:
ae:51:65:a2:e4:ce:3e:8c:79:ef:9d:6c:85:c2:7f:
b4:41:d0:39:a2:14:0f:3e:af:1c:ad:fb:55:48:76:
32:3a:c9:2f:ca:3b:96:d9:9d:ec:84:d9:52:03:d7:
9c:82:95:0e:35:cf:f2:67:12:8c:cb:f8:22:7a:a0:
d0:0b:2d:fd:f2:be:5f:f3:b4:15:50:e3:a0:23:78:
18:98:aa:8a:6a:c8:31:6a:ac:1f:1d:8f:cd:f5:16:
39:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D6:C8:6A:98:B6:7B:47:39:51:7B:E6:EB:CF:E2:66:BC:D0:46:A4
X509v3 Authority Key Identifier:
keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:53:bf:4c:6e:1d:c3:5d:2f:96:df:10:56:79:e2:01:68:b6:
26:a1:e1:5d:b3:6c:c3:cf:dc:3f:77:40:26:bf:1a:13:2c:44:
62:7c:d0:76:ed:ba:03:95:80:f7:27:d2:27:39:83:c3:59:a7:
2a:d8:0a:21:57:df:d8:b1:99:ba:ab:15:df:b0:13:2d:26:30:
47:dd:59:2d:36:2b:e0:4f:6e:2b:eb:55:c9:d5:de:21:40:75:
78:d1:f1:cf:b8:03:5c:17:7b:ca:b2:f0:c4:b8:2b:37:bd:f7:
3e:31:7c:ea:33:5c:85:55:02:d5:a9:a9:f2:4a:28:84:ef:73:
70:78:be:46:99:3f:34:02:ef:35:97:46:2d:b6:fb:d4:be:29:
4d:46:ea:e9:73:e5:f8:2f:10:29:a9:21:04:36:16:a3:b1:d9:
ca:4e:ac:0e:07:89:16:d7:9f:26:09:65:39:51:9c:50:e8:18:
d4:4d:21:35:e0:56:02:45:da:c3:e6:8f:57:c1:24:a2:aa:01:
04:dd:d7:4c:04:7d:23:ff:3c:d9:ea:b1:e6:2c:ad:59:e9:3d:
a8:79:d9:71:69:b2:f7:4e:57:29:e4:ab:ab:f7:10:c0:1d:8e:
41:9d:5a:75:26:89:a5:35:39:9e:c5:f0:d5:b2:38:74:73:f2:
70:79:de:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:00 2026 by rpki-client