
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
File: uG8rXtaXoSH08p1YIDcs8UBVEgs.mft (raw, json)
Hash identifier: tVYuS5W/xr9JidT5qh4TLx6YBd5YzZkRcLhwmlcamOE=
Subject key identifier: 8B:B0:5B:38:0D:DC:05:D2:BD:F7:8D:DB:A3:05:69:95:5C:7A:11:41
Authority key identifier: B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B
Certificate issuer: /CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B
Certificate serial: 022F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
Manifest number: 0228
Signing time: Mon 27 Jul 2026 04:15:00 +0000
Manifest this update: Mon 27 Jul 2026 04:14:59 +0000
Manifest next update: Mon 03 Aug 2026 04:14:59 +0000
Files and hashes: 1: uG8rXtaXoSH08p1YIDcs8UBVEgs.crl (hash: pKSyP6LvRrai7xHLAKBpccc+UVbKFyU9Eyz0mxe1cYQ=)
2: A915A3543FEC11EE99AC0F43C4F9AE02.roa (hash: kQQtoUock6v51XesRrhDlErgmW8VAdf0TAeHQYio1TE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl
rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF0C6, serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B
Validity
Not Before: Jul 27 04:14:59 2026 GMT
Not After : Aug 3 04:14:59 2026 GMT
Subject: CN=6a66db43-8dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:58:cb:0c:b2:9e:16:67:0c:98:8a:f7:43:
13:f8:1a:e3:f1:cf:87:2a:ed:fb:11:a9:1a:1c:df:
61:3d:ec:88:fe:59:58:1a:39:37:f8:8a:bc:f4:28:
d4:1e:40:99:55:5a:e8:13:45:82:1c:97:a5:66:f2:
d8:68:db:45:4a:55:11:48:4c:7f:1f:2f:1b:b6:42:
0e:8d:ef:5d:5e:8f:7e:66:45:74:66:5c:9a:0f:f1:
38:58:8a:a0:00:f1:db:06:73:f1:2b:8a:cb:42:eb:
4f:be:81:13:12:dd:38:5b:60:0c:54:43:60:db:fa:
e6:51:7f:23:57:cc:fc:66:11:ba:2a:87:f2:3f:51:
0d:fb:36:b8:99:f4:b8:10:b5:c9:22:9c:e2:f7:05:
82:38:40:f6:92:f2:af:e3:86:32:7a:7a:a5:de:f7:
98:9c:1f:bb:c0:0c:7e:3e:0f:dc:24:c0:c6:5e:75:
91:46:a0:ea:67:f3:e0:b3:d9:c6:c7:f3:47:9a:90:
6b:22:02:17:7e:fa:b3:52:13:9b:70:cd:7d:65:2c:
a8:ec:ea:12:4d:02:a8:a9:ef:55:28:e9:50:42:26:
d0:7c:ae:70:fc:fa:4b:2c:b2:3b:69:d0:d4:03:8c:
1d:87:cd:69:6f:26:36:92:fa:e9:6b:de:2c:8d:a9:
af:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B0:5B:38:0D:DC:05:D2:BD:F7:8D:DB:A3:05:69:95:5C:7A:11:41
X509v3 Authority Key Identifier:
keyid:B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:2f:27:0e:3d:e9:2e:4c:ec:9c:12:20:63:00:04:4c:2f:5b:
1c:76:a1:c7:b7:e8:cf:65:0f:8e:da:44:6d:2c:d3:fd:88:d5:
28:28:1f:b4:7b:a0:e7:fb:2b:96:ef:89:90:c6:95:9a:0b:79:
55:12:04:5f:1c:56:43:6c:26:3d:f2:77:0a:b0:ba:da:81:a8:
8d:08:2e:ac:b9:6e:b9:4a:e6:f6:25:72:b6:db:38:7d:76:ea:
db:40:8e:ab:27:d9:fc:29:f5:2a:0e:ef:66:16:32:d6:2d:c5:
4a:02:e2:4b:8b:89:5e:21:90:58:86:7b:7f:60:c1:77:bf:07:
8a:a5:2a:85:a3:f7:97:c5:ed:11:66:bf:51:35:38:2a:98:3d:
8e:a5:80:45:c2:05:12:d5:b3:f1:43:26:c2:86:50:b1:11:64:
7c:ed:ed:b8:1a:a4:f7:60:f8:b2:f4:66:42:57:83:01:ea:23:
56:d5:0b:0f:52:54:9a:02:ee:59:45:b1:15:8c:b5:ee:34:9c:
32:34:48:dd:a8:4a:bd:70:46:1e:79:9b:f7:bd:41:36:84:fb:
b3:40:79:ee:59:8d:3e:33:e2:42:20:cc:81:55:64:e5:62:78:
0b:68:f8:03:50:ff:1a:7e:5f:2e:3b:c0:d6:47:f5:e1:c6:ec:
8f:c9:f9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:51:18 2026 by rpki-client