
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft
File: uo1v5dgowFOZs-GqZY_AWIYf3OA.mft (raw, json)
Hash identifier: viN5X4Eb4brvItutz0nqaSJH833qAvqFYLmAH6IwUA8=
Subject key identifier: DC:BF:13:78:39:C8:97:D9:27:19:2A:1F:BE:69:1B:B2:4A:C1:7B:FE
Authority key identifier: BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0
Certificate issuer: /CN=A91AAF02/serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0
Certificate serial: 0FBF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft
Manifest number: 0FB3
Signing time: Sat 28 Feb 2026 17:38:04 +0000
Manifest this update: Sat 28 Feb 2026 17:38:03 +0000
Manifest next update: Sat 07 Mar 2026 17:38:03 +0000
Files and hashes: 1: uo1v5dgowFOZs-GqZY_AWIYf3OA.crl (hash: ZTkR7jAXsN77x7nDGj3u0H4k2iNHAQGqp9MiU4Ya4Yg=)
2: 7EA856A6C3F511EEB2610F2FC4F9AE02.roa (hash: BLJkluhKw88yyy85QriscmwIr8Z03FPtQoZtvtnCfp8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl
rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:38:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4031 (0xfbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAF02, serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0
Validity
Not Before: Feb 28 17:38:03 2026 GMT
Not After : Mar 7 17:38:03 2026 GMT
Subject: CN=69a327fc-f2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:26:0b:49:de:b0:bb:64:c0:d3:91:1b:71:
f2:f9:20:5a:03:e2:ac:15:8c:7c:22:e6:46:31:e2:
35:46:47:41:e8:56:61:ba:2b:70:3e:1b:98:91:96:
68:71:c4:67:a1:d8:79:ff:00:27:3c:d3:fa:f1:28:
d9:b1:de:88:ce:58:46:ec:ca:a9:a7:91:ba:24:ab:
36:da:f3:6e:e4:e2:71:8b:17:17:a6:c9:a2:55:68:
ef:d2:12:ee:a9:d9:e1:40:c0:7a:6a:7a:a1:ca:3b:
75:a0:cc:52:0c:89:f1:87:1b:e5:23:3f:21:c8:81:
b0:50:ad:d1:80:4f:b3:86:01:ea:6a:c0:e0:de:4d:
2b:2d:87:93:be:32:5b:f3:46:2a:80:9a:75:74:d4:
56:99:16:8e:61:63:fc:50:85:d0:fd:51:11:33:bf:
29:c4:11:a1:28:11:14:65:6b:e1:59:e4:3d:d4:68:
5d:d3:3b:74:64:52:94:c0:3b:78:f3:cd:38:ba:ff:
03:c1:b4:8c:9d:51:68:61:ee:8b:a9:81:0a:9d:4d:
05:bb:86:0c:00:6a:0b:4d:89:9b:97:e7:66:a3:32:
ef:77:a4:2c:01:13:03:8c:18:db:a7:35:bc:c9:02:
00:a2:34:3b:b6:7b:f3:ec:dd:86:36:f4:de:f2:95:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BF:13:78:39:C8:97:D9:27:19:2A:1F:BE:69:1B:B2:4A:C1:7B:FE
X509v3 Authority Key Identifier:
keyid:BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:97:d6:cf:08:8f:e9:b9:2e:6f:3d:da:bc:4a:97:c7:e1:19:
53:75:8f:9a:d7:41:e5:88:a0:b8:00:eb:6c:8b:97:d2:6d:25:
92:bd:9a:e4:23:7e:15:62:c7:ce:ae:c7:51:42:ea:67:e4:01:
24:36:fe:bd:cd:26:73:3c:1d:39:c4:b6:1f:76:43:ed:4d:6e:
b4:ee:c7:c5:f5:e2:2c:c9:ee:a9:58:56:73:fa:c0:29:5b:92:
76:50:21:46:a8:82:34:b5:f6:09:80:df:7c:d0:53:6c:e2:ea:
0b:7a:b0:c0:3a:f4:10:64:8e:4a:19:0b:b1:42:d1:0f:f0:3f:
96:25:2c:dd:04:91:68:11:35:4e:42:b2:29:e8:ad:6b:c7:a5:
0d:ec:0d:77:62:df:eb:26:60:1a:c5:40:48:e0:6e:71:83:53:
24:62:26:94:48:10:40:ff:b0:0d:9c:49:1a:fe:40:80:c8:53:
35:c1:4d:1b:a5:2a:df:b5:34:bb:99:19:cc:0c:92:e8:bb:bf:
a6:0f:80:32:74:94:e1:be:b5:d9:41:5d:de:73:84:ed:5b:36:
25:0e:51:a9:3e:4f:0b:6f:93:24:0b:6a:53:0b:ed:2e:79:57:
00:f9:b0:64:50:a6:4c:d4:d8:c5:bd:84:1d:76:ed:a5:7e:79:
75:a1:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:11 2026 by rpki-client