
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
File: Uf5h3GUzbaj92bxJe_pfniMuDMY.mft (raw, json)
Hash identifier: WZBKcclHiHyqtyaFyYnpi1CxqealT0bHYMUZLcd2ztM=
Subject key identifier: 24:B3:11:03:AD:41:2F:92:0D:E2:57:11:9A:E2:8C:29:43:FB:A8:B3
Authority key identifier: 51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6
Certificate issuer: /CN=A91A4CC3/serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
Manifest number: 84
Signing time: Mon 27 Jul 2026 09:55:38 +0000
Manifest this update: Mon 27 Jul 2026 09:55:38 +0000
Manifest next update: Mon 03 Aug 2026 09:55:38 +0000
Files and hashes: 1: Uf5h3GUzbaj92bxJe_pfniMuDMY.crl (hash: KBOA8FowYFwwiwUNQxH4TsOXnb45W+luMCshFCEZZBo=)
2: BFBA7E0ECC1C11F081ABD12EC4F9AE02.roa (hash: hCMmvjgg1m2ptErKuXEGlk3734h9tjSYvhrOfHka3Xo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl
rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4CC3, serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6
Validity
Not Before: Jul 27 09:55:38 2026 GMT
Not After : Aug 3 09:55:38 2026 GMT
Subject: CN=6a672b1a-8a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:59:0f:c9:83:ee:0c:44:37:85:05:ad:d8:
48:c4:30:3e:52:61:69:a8:4d:64:90:a7:46:83:1c:
03:5f:ea:02:22:de:9d:35:3d:8f:84:cb:a0:18:83:
47:ef:50:71:3e:e9:2b:92:58:68:7f:cd:77:92:d2:
b5:50:24:b5:6d:cf:8f:94:7c:86:6d:6b:77:eb:e4:
42:13:00:c4:92:cb:c3:ef:1f:8e:f5:20:ac:3d:78:
32:54:07:86:7e:c1:1c:2d:da:8f:e8:85:74:8d:b3:
0b:58:95:97:c7:e7:0d:78:5d:32:2b:5e:d7:d2:27:
9f:ca:8f:cc:bc:82:1f:ac:63:d4:5c:60:37:3d:8a:
01:38:7e:60:ca:15:df:40:be:ed:fe:69:65:34:56:
70:24:a9:08:e6:0c:df:36:32:d2:de:5e:4a:ae:e9:
b0:c4:48:eb:ac:a6:3a:b0:12:81:5e:84:88:ed:94:
64:29:fd:23:95:95:69:6a:8b:62:71:16:10:5e:bf:
e4:b0:07:7d:37:c7:86:9e:cc:97:60:fc:0e:c4:09:
e1:bc:21:33:60:82:cf:7b:ec:6d:de:b5:c6:24:61:
8e:f9:76:9d:88:92:61:d9:82:27:7b:c7:c7:21:41:
79:42:eb:aa:49:bf:fd:8b:3b:02:b3:41:49:e2:64:
b9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B3:11:03:AD:41:2F:92:0D:E2:57:11:9A:E2:8C:29:43:FB:A8:B3
X509v3 Authority Key Identifier:
keyid:51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1a:10:2e:ce:1b:78:a5:bf:5b:25:12:5d:30:88:2a:b8:79:
5f:12:41:37:f1:bf:60:5f:00:66:cb:7e:21:e9:f2:b2:47:06:
74:9f:dc:ca:0e:1d:76:4b:dd:b3:6d:7e:3f:a2:34:15:60:12:
85:6a:2f:df:f0:7b:ae:fb:2a:6f:a5:38:88:5b:f6:51:f8:d1:
28:02:f7:e7:52:32:01:d2:c7:5f:ea:1f:23:6f:af:c9:74:a6:
6b:f1:55:f9:61:d7:17:64:76:30:48:21:e9:47:5b:84:b0:f4:
52:c6:8b:cd:b8:ad:9d:3f:8b:da:65:08:51:74:af:5b:74:81:
b8:43:42:24:27:99:56:fb:71:8d:f0:48:dc:b1:b3:96:5a:24:
b3:9b:e4:b6:d2:a4:03:85:cd:84:8e:19:58:83:dc:bc:56:3c:
78:f7:a0:7a:c4:dc:4c:2f:89:17:ec:bb:ca:88:5b:43:37:ad:
f4:9d:e1:39:e9:d6:dc:96:29:ee:fb:ef:8b:8c:40:4f:8a:36:
44:9a:45:81:ac:f7:2b:ec:dd:41:ae:f7:50:0f:2f:8a:50:8b:
f4:42:06:d1:c6:49:32:ae:66:c5:59:2f:45:b2:bb:a6:b8:f4:
1a:89:f2:1f:c2:ad:39:e8:6b:bf:e1:9d:09:05:a9:b6:88:7d:
1f:ea:a8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:13 2026 by rpki-client