
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
File: UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft (raw, json)
Hash identifier: MsCza+0RLPV0dwIsGdJUg0B4eRfWkCnJZ/Z8JxqaxHc=
Subject key identifier: 86:C0:96:96:2B:0E:88:48:7F:35:82:A4:01:92:11:0B:F8:A3:63:A1
Authority key identifier: 50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74
Certificate issuer: /CN=A91AF2D9/serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
Manifest number: 0137
Signing time: Fri 17 Apr 2026 05:11:15 +0000
Manifest this update: Fri 17 Apr 2026 05:11:15 +0000
Manifest next update: Fri 24 Apr 2026 05:11:15 +0000
Files and hashes: 1: UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl (hash: rZGGKbz6wMcySsu0TEohdrcY2s6znXEHpyFUxDd7le4=)
2: D48472829E9011EF84D96F7DC4F9AE02.roa (hash: aqdbrD7OJ2blLWFWLyQljkln+OcPA1d2ry5HZh2PUb8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl
rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF2D9, serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74
Validity
Not Before: Apr 17 05:11:15 2026 GMT
Not After : Apr 24 05:11:15 2026 GMT
Subject: CN=69e1c0f3-1475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:f0:f8:be:89:a2:c5:9c:27:97:1a:0b:31:
e0:76:6f:30:21:d7:35:14:08:d0:47:bd:a4:9a:6e:
94:76:dc:2d:95:7d:bd:a1:aa:dc:06:d3:e7:a0:5c:
29:4f:06:a9:b8:21:b0:59:c6:7e:84:be:f0:c6:dd:
63:4e:38:ef:44:9a:de:87:1d:79:49:61:60:3e:21:
a5:a4:e6:be:01:5e:d1:a0:46:cc:36:10:a8:5c:f4:
33:5d:71:cf:65:e1:de:e3:c1:07:f7:92:71:9a:a5:
65:7c:6e:06:9d:76:e6:9c:05:9c:7c:ab:a2:c4:ed:
4b:a2:36:48:85:eb:04:2c:03:88:9e:94:28:6d:5e:
70:fb:95:3c:f2:2c:0b:1f:d3:39:85:6c:e3:02:b6:
9a:11:2c:98:a6:f2:9d:b5:e8:df:cf:7a:4f:4e:25:
27:87:7a:58:16:cf:9d:d0:2d:cd:de:cf:b9:77:1e:
8f:b0:12:de:86:0a:65:20:b9:d2:ff:b3:03:62:7f:
7c:a3:72:9f:dd:34:49:ae:e7:db:25:2f:f5:0f:e5:
f3:33:0c:74:eb:d8:6e:f2:ab:da:70:ac:fb:df:57:
67:1c:56:06:56:68:9c:35:34:20:72:cb:6f:bc:e6:
5d:fb:0d:11:55:7d:25:bd:03:03:00:cf:97:3e:30:
44:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C0:96:96:2B:0E:88:48:7F:35:82:A4:01:92:11:0B:F8:A3:63:A1
X509v3 Authority Key Identifier:
keyid:50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:f9:d9:34:de:2e:61:d4:f0:34:50:b2:1b:26:93:8b:05:e4:
f0:80:21:55:11:f6:4d:6c:b4:44:bc:3d:d5:a9:9f:b9:58:ea:
27:14:e0:ed:55:61:a2:57:45:e7:f9:54:3f:93:21:3b:2a:82:
49:3d:ee:26:25:f5:5e:d0:c0:d3:d2:d5:d0:7e:50:88:06:04:
9b:d5:e9:bd:84:27:67:32:70:3e:5d:39:d6:e2:9d:ac:64:5f:
27:a7:57:28:7a:99:cf:8f:8b:22:d6:26:d9:60:aa:51:d8:d3:
78:93:7d:c7:24:b7:c9:e0:48:31:26:c3:39:ee:d4:bd:14:30:
64:a8:39:cf:3b:d8:28:45:eb:9e:3c:04:0c:59:51:46:47:60:
a1:52:2e:f9:11:dc:9d:bb:35:0d:a6:17:1b:d0:fb:e0:6a:00:
80:50:ca:8b:1d:d5:95:df:61:cd:d5:77:6d:9e:d9:ce:0f:46:
75:58:34:21:7e:64:6c:7e:7e:88:b0:45:f2:fb:2f:99:55:7f:
45:9b:5e:28:ff:ad:ac:01:77:81:f5:cd:16:2f:c4:4d:b7:de:
88:8e:da:25:46:1b:9c:53:12:c0:8d:c4:f2:03:6f:16:35:b3:
02:3f:32:24:09:9a:7a:e6:df:df:d5:48:45:56:83:12:d7:c4:
2a:4e:c9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:30:22 2026 by rpki-client