
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
File: ul-4WRv8DEUKTkTW_D47x76GVBY.mft (raw, json)
Hash identifier: KjnnrqFn8p87pE1QTaUBYepRmh1rgXurwAhj3XarMhw=
Subject key identifier: 3E:8C:F6:F3:A8:18:44:C0:CB:43:AF:1E:F8:3A:80:10:34:83:E1:AF
Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16
Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
Certificate serial: 01B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
Manifest number: 01A7
Signing time: Mon 27 Jul 2026 05:53:25 +0000
Manifest this update: Mon 27 Jul 2026 05:53:24 +0000
Manifest next update: Mon 03 Aug 2026 05:53:24 +0000
Files and hashes: 1: ul-4WRv8DEUKTkTW_D47x76GVBY.crl (hash: NtoQZsi5degy2tH/oO4e3NofVTwNNqezE8VCstO/D2Q=)
2: E30E4FF605E511EF868E0F6DC4F9AE02.roa (hash: MmWFM1dURxQD1o2oF69cp1HxMUdsdeEfUuFqXRdwgSw=)
3: E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (hash: QctUwaISCCsjTsg8d6+OCTF1bXP6fQ+c0E+PJuOqkfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl
rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
Validity
Not Before: Jul 27 05:53:24 2026 GMT
Not After : Aug 3 05:53:24 2026 GMT
Subject: CN=6a66f255-53a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:c1:e4:f3:59:3d:93:4c:14:51:83:df:12:
d0:c0:14:ce:18:7c:c0:04:51:6d:48:7e:70:42:8d:
7b:b8:92:03:b4:ff:73:12:58:34:df:42:59:e1:32:
1e:9f:b5:df:67:e4:af:c9:b8:c8:40:8f:c3:12:58:
8e:1f:96:6f:b6:74:11:78:b0:8c:09:db:4f:f9:6e:
94:6d:42:93:0f:0b:5e:84:ac:52:7c:d7:4b:8d:7d:
a5:81:1f:d0:01:d4:ca:6f:6b:78:71:89:55:54:bd:
ec:e4:72:38:32:61:86:c0:f5:25:8e:6c:30:79:38:
e4:41:72:61:7d:bd:4a:27:b3:6b:0b:34:dd:e0:99:
fa:65:61:32:7d:db:34:5e:84:f7:ee:4c:11:61:a4:
1d:b0:63:92:d4:1b:70:e6:4e:bb:02:4b:0e:1c:d2:
9c:69:13:8d:ab:fd:e6:fe:88:cc:ae:11:ef:c3:5c:
b9:21:fe:3a:cf:c0:b6:54:84:99:69:1b:3a:f4:bb:
40:46:f4:2d:19:be:3f:0e:67:97:c5:55:81:ea:69:
af:54:a9:00:5b:63:c5:7b:e3:ab:43:b5:d9:7e:53:
8f:e5:88:56:d9:99:15:34:b7:28:eb:cb:87:5d:39:
13:9d:98:36:c9:ea:03:c8:8c:56:a5:9d:2d:9a:ad:
67:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8C:F6:F3:A8:18:44:C0:CB:43:AF:1E:F8:3A:80:10:34:83:E1:AF
X509v3 Authority Key Identifier:
keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:c2:62:8d:75:1f:34:48:c6:02:6e:e0:57:4b:2a:66:aa:7b:
d8:b9:35:6d:76:84:aa:5c:2d:02:0a:fa:1a:1b:1e:06:82:bd:
a2:e0:13:63:89:76:60:2b:24:2d:49:03:f0:ac:2c:74:98:66:
8d:84:c5:c8:be:63:ae:71:44:d5:4e:4a:e1:0c:6e:c9:6f:35:
7c:95:ee:e7:98:e9:7c:89:a1:b3:2c:88:2d:dc:fe:99:72:35:
27:78:65:65:a8:30:7f:41:a9:ed:c1:cc:b0:74:10:70:97:38:
73:ed:50:df:80:90:34:68:de:9b:13:f7:0a:15:f1:75:b2:bc:
5a:76:95:f3:d1:93:55:22:a9:e1:c2:03:ca:08:ca:67:c3:e7:
19:0c:4f:af:1d:10:b8:ee:48:df:50:82:a2:ee:4d:3d:bb:d7:
e9:64:f0:65:fc:cd:cf:25:cf:67:f8:cd:47:a3:65:df:7a:57:
07:4a:a2:7c:2a:52:2d:ca:eb:d4:fe:0f:b5:9f:d4:4b:2d:cc:
c6:f7:ab:78:18:b9:32:c2:bb:df:f1:c9:85:57:ee:d9:50:48:
39:05:6a:af:c1:89:cd:f1:a2:61:b3:99:fb:6a:d3:5b:40:5b:
7a:0e:65:56:51:83:b3:fb:89:bb:48:e5:4f:1f:74:e3:21:fd:
3d:bf:06:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:19:30 2026 by rpki-client