
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
File: UZO9WZSe-bfaEnIPfUbufEvKMOw.mft (raw, json)
Hash identifier: YduP6aT7ZCwof0LC6PvgfvJsARgmT5bHGZYwAp/Xz7I=
Subject key identifier: 18:28:FC:E4:BE:8B:CB:89:7E:8B:D7:C1:DC:D3:4C:1F:D4:19:C1:81
Authority key identifier: 51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC
Certificate issuer: /CN=A91A1D8C/serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
Manifest number: C7
Signing time: Thu 05 Nov 2026 08:05:57 +0000
Manifest this update: Thu 05 Nov 2026 08:05:56 +0000
Manifest next update: Thu 12 Nov 2026 08:05:56 +0000
Files and hashes: 1: UZO9WZSe-bfaEnIPfUbufEvKMOw.crl (hash: AzOYdsDerS3gjVw+htyvNx3Fve6OK/5gV44bc9QIOHo=)
2: 1fJ5kLcMho8nRu5wQFMEcL2Plsk.asa (hash: Rw+9dGM3XJ3dM++zalky1puGyEHA4e1+Ah4Ib94jgxU=)
3: B3F4F0B63A4611F1AC42A0C8A2833773.roa (hash: fpFxwMet0vB9WnBsjTfP9SxuIo93jDE4zKg8N/HyDK0=)
4: DF3F877ED01D11F09BB99C37C4F9AE02.roa (hash: MjpUGxFVne7zJz+pWuXSIalHXmjcz+0TUQ4S4Pxy6UM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl
rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 08:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1D8C, serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
Validity
Not Before: Nov 5 08:05:56 2026 GMT
Not After : Nov 12 08:05:56 2026 GMT
Subject: CN=6aec38e4-b96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e3:69:3f:f6:99:da:cd:50:62:9a:1f:28:91:
c0:b6:b6:df:64:6e:8d:5f:83:37:85:e0:d0:f9:f4:
1e:ab:51:c5:ed:21:be:a5:90:fb:3f:a2:00:d0:d4:
c5:15:26:23:84:6d:f7:1d:ce:3e:26:1a:20:99:fb:
8b:13:fd:fd:5c:aa:8f:e7:d0:af:b5:12:05:d3:c9:
75:ba:dc:78:00:18:18:b9:00:a4:8a:e3:23:07:73:
3e:9e:63:a1:53:82:a5:97:d1:5c:b0:55:cb:a3:25:
27:11:3c:b9:28:b8:88:80:5e:74:ee:63:66:df:b5:
9a:38:52:ce:35:90:14:38:5d:29:84:8c:ca:94:db:
65:b9:e1:61:dc:d9:d0:4d:0c:01:7f:fd:27:ae:e5:
1c:43:61:9b:7f:46:31:f1:2b:7d:bf:5b:d9:96:c7:
fb:d7:b7:37:b6:30:76:0f:26:22:14:bc:64:af:2f:
6e:e6:24:ac:a8:31:01:d8:99:6a:bb:71:b1:4e:17:
21:5f:ed:86:e0:ec:68:56:eb:57:7a:db:bc:16:64:
a9:a3:29:2f:61:1f:e6:eb:c1:6a:0f:e7:2f:ac:f2:
09:26:60:d8:d3:a7:80:cb:2a:93:e3:0b:63:17:fb:
90:8c:62:83:8a:d9:bf:13:cc:d8:1f:c2:79:ea:10:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:28:FC:E4:BE:8B:CB:89:7E:8B:D7:C1:DC:D3:4C:1F:D4:19:C1:81
X509v3 Authority Key Identifier:
keyid:51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:56:fb:cd:4e:42:99:99:3c:46:d9:9e:72:8c:f3:3f:57:bb:
e1:c1:bd:08:09:bd:e2:9c:7e:c2:1f:5f:aa:ac:79:f6:d8:5f:
f2:d4:2f:d3:ed:b1:96:80:85:50:77:33:2b:5b:97:b6:53:9f:
38:f3:c0:fa:4f:27:ec:5b:da:55:02:a6:bb:d3:a8:62:f0:e7:
e5:40:66:11:46:34:6d:2e:8b:c6:9a:2d:74:d1:71:8b:22:12:
13:d5:73:4e:1d:f8:d4:ce:40:fc:04:39:cf:6a:30:ff:e3:3d:
a9:b0:7e:1c:14:aa:71:4f:17:4e:2d:84:46:55:ef:64:ef:65:
41:80:cd:60:62:d0:bf:2a:77:ec:34:d0:81:44:36:b1:17:b4:
a8:26:18:88:e9:ca:60:1a:b9:3b:60:8d:5e:f6:e7:19:54:5a:
33:ba:5f:5d:25:ce:f7:de:e8:83:20:10:f8:f0:3a:0c:bc:fc:
be:cd:d9:59:ea:06:d6:4a:8b:71:29:c7:0f:6c:b9:46:54:f3:
d8:00:4c:33:9b:a8:5e:7b:36:ac:d0:56:84:73:60:b8:20:e8:
79:c8:57:c1:ff:36:51:50:52:8d:d5:5c:b0:63:d7:9c:58:82:
ec:33:bd:d4:f2:8a:92:f9:e8:10:d3:6c:ff:a3:ed:67:0c:8c:
39:02:fe:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:11:13 2026 by rpki-client