
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
File: _uphQ5owmLhcyxg7WkGqEq9Fyh4.mft (raw, json)
Hash identifier: eSM6z/1ojxGfI28EulUqOsdc+9+Cd3KnDbgw2QT6uQg=
Subject key identifier: A4:BC:2F:78:37:E4:91:F2:59:90:F2:F0:76:9C:69:CE:4E:39:2A:29
Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
Certificate issuer: /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Certificate serial: 08D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
Manifest number: 08BC
Signing time: Sun 20 Sep 2026 20:30:53 +0000
Manifest this update: Sun 20 Sep 2026 20:30:53 +0000
Manifest next update: Sun 27 Sep 2026 20:30:53 +0000
Files and hashes: 1: _uphQ5owmLhcyxg7WkGqEq9Fyh4.crl (hash: hurZnBDmKQHFMDZyp3+Itpl0T2L6RkSGN9APumyWscc=)
2: 35119410AABD11F19DCB45E03F11F970.roa (hash: Dx1Kre4yEejFywkMAJ7xeIorQ9DFA2KCwqB+PMcj6VI=)
3: 3FA536CA38EE11F1A0707106A9833773.roa (hash: mUiOI8EcFxg0okwr3CRT18uhCpuSgMbB1bMOukLtLrw=)
4: 9AAB8A10AABD11F18324D71C4011F970.roa (hash: 621XDjRjlNVr3wTxt/hPLQYaWUf2fqtMIKqD0yG6id0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2261 (0x8d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A19C8, serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Validity
Not Before: Sep 20 20:30:53 2026 GMT
Not After : Sep 27 20:30:53 2026 GMT
Subject: CN=6ab0427d-925c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ad:29:8e:2b:97:d3:3c:40:ac:b1:d7:13:6f:
27:ea:5a:a1:ee:8e:27:40:48:7f:cf:cb:4e:8a:61:
d3:ba:a4:91:bb:e7:5c:90:05:82:95:19:cf:65:b8:
af:8a:d6:d5:b3:12:83:1f:a2:d6:f1:76:4c:62:31:
04:89:6f:82:c1:0f:6c:f0:73:c3:c4:ff:ba:72:3b:
c4:8d:46:31:b6:9d:83:19:73:1d:eb:9f:10:3d:6b:
f5:79:f6:eb:df:a1:62:18:29:9c:23:9d:aa:c9:92:
82:07:21:85:e4:88:04:11:85:5c:5e:aa:54:9a:dd:
d3:09:b9:ce:c2:7c:46:a8:81:ef:b4:37:dd:d3:47:
a5:18:6b:a1:bd:c7:e0:2f:06:0e:bd:27:e2:d6:66:
5d:fc:83:f2:a1:94:e9:a9:4d:29:13:9f:2e:98:e0:
af:77:3b:46:09:6a:ba:7a:3b:13:98:d9:7c:f3:bc:
dc:19:63:b6:ef:bc:e2:8a:ac:e5:50:55:67:c4:63:
19:70:0d:dd:2e:37:f2:1e:bf:c6:95:01:e2:33:88:
27:06:6f:27:0c:fd:14:d6:45:ae:32:8d:4a:8d:61:
76:31:9d:c5:48:aa:61:a7:4c:31:b4:e5:fe:47:ca:
3b:61:0c:e6:b2:22:6d:c5:12:ec:c2:78:2a:3f:32:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BC:2F:78:37:E4:91:F2:59:90:F2:F0:76:9C:69:CE:4E:39:2A:29
X509v3 Authority Key Identifier:
keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:3f:02:cf:87:bf:aa:4e:89:1a:e3:00:43:2a:22:b5:31:27:
93:d1:18:af:33:8c:2f:a5:ce:af:ff:1b:a8:75:28:43:39:ab:
86:35:5c:a3:c9:97:64:45:2f:46:51:1e:25:d0:89:bc:74:75:
ce:72:4e:87:56:13:70:9f:0d:c9:95:2f:13:16:76:48:40:f6:
73:e5:ef:42:db:2d:6d:3a:0f:03:a2:dc:ae:55:34:89:e0:8f:
e5:ab:d8:a2:1a:36:f5:66:d2:b4:5d:58:58:27:b5:27:e4:62:
ae:13:0f:2c:ed:aa:04:33:49:53:e2:b6:0a:39:88:c8:92:c3:
57:56:29:45:dd:f8:82:9c:8e:57:33:a1:d0:dd:b3:39:0b:e3:
6c:9d:85:58:f0:80:e4:ef:90:a2:88:64:9b:5e:b8:99:fb:f8:
7f:3d:9d:aa:f0:0f:70:e2:b9:3d:2f:97:a9:04:60:d4:e8:2b:
58:58:6c:0b:13:4c:f7:76:97:ce:6d:cb:0a:22:55:d1:32:15:
d8:e0:9d:b4:e1:2e:58:c3:d3:eb:72:85:b8:6e:00:79:e9:80:
23:63:da:6d:3d:7d:e0:57:62:19:53:49:93:b0:52:b0:ce:1c:
ce:f9:93:8b:5b:b6:ef:c2:99:4b:97:79:9e:ee:18:19:74:e8:
13:f2:8a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:39:52 2026 by rpki-client