
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
File: uG8rXtaXoSH08p1YIDcs8UBVEgs.mft (raw, json)
Hash identifier: Z1HFj4Yoje0RBMrQW3TqodMlR09kymqgl5ANJ+mTPME=
Subject key identifier: C4:D5:29:C9:9F:15:DA:5A:5B:74:65:F4:99:F1:1F:7E:41:6B:AC:74
Authority key identifier: B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B
Certificate issuer: /CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
Manifest number: 01F6
Signing time: Fri 17 Apr 2026 02:57:48 +0000
Manifest this update: Fri 17 Apr 2026 02:57:48 +0000
Manifest next update: Fri 24 Apr 2026 02:57:48 +0000
Files and hashes: 1: uG8rXtaXoSH08p1YIDcs8UBVEgs.crl (hash: WAdyU3vTKC0Wr8tO19VSu6ivfzBMWVzuXEYW0hU1aDQ=)
2: A915A3543FEC11EE99AC0F43C4F9AE02.roa (hash: kQQtoUock6v51XesRrhDlErgmW8VAdf0TAeHQYio1TE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl
rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF0C6, serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B
Validity
Not Before: Apr 17 02:57:48 2026 GMT
Not After : Apr 24 02:57:48 2026 GMT
Subject: CN=69e1a1ac-98a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:89:ce:7a:91:ab:4c:16:48:4b:cc:be:46:
21:5d:e1:69:37:a3:49:63:8d:d7:32:ac:95:77:2e:
7a:97:f1:ee:04:32:fe:1d:e8:6a:03:75:93:bf:7e:
1e:f0:d7:52:dc:fe:10:5c:db:62:df:68:7f:7a:98:
23:1c:a9:9c:6a:d0:ae:b1:eb:c8:2a:dd:f7:d6:e5:
07:4f:f4:25:3e:01:b1:f3:36:d5:36:58:1f:99:8a:
1e:59:bb:1e:c4:b1:76:57:a6:d3:f4:06:4c:1d:9c:
8f:a6:41:2d:64:de:00:2f:00:3c:e4:43:ee:63:81:
49:fb:69:1a:80:85:43:5e:aa:21:2b:39:e7:14:4f:
91:82:ae:d5:06:c5:c7:a7:5d:3b:a0:73:47:dd:a7:
8e:24:74:b6:93:de:9f:1e:9b:46:67:85:91:6b:b6:
02:38:23:f9:57:2f:95:8c:c3:88:17:e1:32:a8:1b:
ad:8d:36:cc:d4:af:94:38:49:02:a4:89:bf:b8:b1:
8d:eb:87:8c:be:41:7b:0a:9b:5a:58:85:26:5e:27:
1a:f6:d5:b2:a5:df:f5:ff:1a:6e:62:c0:d6:a6:21:
c5:54:9b:53:47:12:0e:07:a7:64:98:d0:bc:01:4c:
b2:13:67:cf:aa:7a:4e:de:66:19:47:d6:9e:7c:32:
15:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D5:29:C9:9F:15:DA:5A:5B:74:65:F4:99:F1:1F:7E:41:6B:AC:74
X509v3 Authority Key Identifier:
keyid:B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:00:92:1f:46:66:8b:41:1c:86:1a:a7:63:71:29:29:ee:07:
7f:8f:4f:1d:8e:64:88:1f:36:f3:74:f1:e3:8a:33:5f:2a:4e:
76:37:5b:38:d5:ea:f3:6b:24:3b:ea:90:07:d1:96:ec:fb:62:
e7:df:9a:ba:27:21:64:a6:e8:0d:53:aa:2f:92:d3:be:89:a0:
22:46:87:df:f0:29:63:a7:f8:68:81:9e:38:31:d1:e2:f3:c7:
19:16:52:0e:77:71:57:6a:9d:dc:b2:80:d8:72:f9:1c:4f:67:
90:68:23:42:9f:94:a8:f1:86:f0:ec:cc:30:bd:e5:a9:72:3f:
42:1d:cd:28:ce:41:24:37:04:37:75:e1:66:21:8d:58:f8:23:
ee:d0:1e:4d:5f:5f:da:ba:6b:74:46:5e:c0:d1:82:af:69:2d:
a6:a8:da:cf:37:d7:f9:bf:44:0e:e0:9f:d3:59:7d:d9:54:d1:
c0:7b:c7:02:7d:e5:94:71:4a:8f:53:71:da:e3:e5:7a:75:b6:
cc:04:c4:71:47:32:f4:40:cd:42:64:af:85:5f:ae:2f:3c:d4:
32:dd:26:75:36:43:50:21:c7:2c:4e:21:68:05:80:aa:37:89:
f6:5e:bb:ac:3b:04:75:bb:ea:86:e4:75:15:16:fa:c4:c4:93:
33:59:74:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:15:53 2026 by rpki-client