
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
File: UqHEINgnwWzqoEKD3Si2QKMVY00.mft (raw, json)
Hash identifier: Dn5iwZ/pticprNr3rQCeoB6kR6UOabgS8N0fZAlSizU=
Subject key identifier: CF:9F:32:9F:C1:1E:F3:7A:82:4A:A1:CF:56:54:2E:C3:27:A4:4E:F4
Authority key identifier: 52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D
Certificate issuer: /CN=A91B13FE/serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
Manifest number: DD
Signing time: Mon 27 Jul 2026 08:55:36 +0000
Manifest this update: Mon 27 Jul 2026 08:55:35 +0000
Manifest next update: Mon 03 Aug 2026 08:55:35 +0000
Files and hashes: 1: UqHEINgnwWzqoEKD3Si2QKMVY00.crl (hash: KCNxz3Ssg9VrGV0Jjm8o05NzR4O5EMKB1Aeh56+iKro=)
2: C577E392D0F711F0BC02385AC4F9AE02.roa (hash: u1r3Je4qZRnxg/RZHpWI2PjYiwMKESZ7cb2kwwWNTUs=)
3: 3B2E80F84C4C11F198B679C5B8833773.roa (hash: ygzPBbzcPNKgKBn3Takd4OFJZsQA58vlX72w9BdEaDs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl
rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B13FE, serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D
Validity
Not Before: Jul 27 08:55:35 2026 GMT
Not After : Aug 3 08:55:35 2026 GMT
Subject: CN=6a671d08-ec58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:39:e8:8e:fa:13:49:1d:c9:0b:ee:fb:96:60:
f3:41:07:19:85:8c:7d:a2:4b:69:83:73:a1:44:39:
8b:43:4a:42:f9:f2:4c:2b:8a:31:a1:f4:e7:d1:36:
9e:8f:2b:55:95:2d:db:17:58:64:2a:f7:bd:06:43:
86:8a:75:7e:40:90:18:7a:c3:7f:06:b4:73:33:be:
6f:af:64:13:bd:9d:17:1a:d7:86:0e:71:dc:82:c9:
22:2f:ef:f7:e2:dd:be:6d:30:a8:98:2a:e5:1d:56:
b5:ec:62:ac:fa:4d:38:c6:9f:e7:d8:3e:49:55:05:
12:4c:f5:0d:be:a5:8a:14:29:d9:bf:51:f6:db:fc:
b6:8b:ad:a5:4e:c3:c7:1f:05:51:c5:41:b5:df:27:
b2:8b:db:05:6c:f1:7d:62:b4:dd:fe:4a:b3:38:7e:
08:72:95:b4:5c:17:4a:85:5d:d5:c7:b4:51:99:24:
ca:61:0c:95:17:fd:b2:c8:27:19:71:3f:26:e1:22:
c5:d8:d9:0c:6f:d7:8a:33:4a:dd:15:55:00:07:9a:
d9:cc:f8:43:b7:36:e3:97:9c:ad:26:c7:38:c4:8f:
d7:be:23:e0:46:32:6f:11:a0:c2:dd:a7:51:d5:7b:
b4:e1:21:6c:dd:1f:69:98:e2:34:6e:f5:f0:ce:24:
b9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9F:32:9F:C1:1E:F3:7A:82:4A:A1:CF:56:54:2E:C3:27:A4:4E:F4
X509v3 Authority Key Identifier:
keyid:52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:91:d0:18:f5:e2:58:c2:a7:04:40:1b:c9:ff:b5:53:89:af:
6d:b1:67:a9:d0:6e:c9:28:2a:b7:b9:9e:c8:4c:fe:44:ae:57:
8d:36:a9:d5:90:44:71:8e:04:fc:38:1d:0a:99:f3:5b:a6:f5:
20:57:20:15:31:37:3e:6f:01:18:e8:a9:7a:38:29:e9:28:92:
60:2e:97:e0:ee:72:fc:61:0f:fa:35:4b:77:02:3b:e1:df:e1:
8e:b1:95:91:00:99:b4:da:24:66:6c:ba:3e:91:1f:61:64:62:
05:47:09:d7:db:21:ba:c9:4a:ff:56:bb:e4:0f:57:4d:27:52:
00:71:66:6a:ca:9b:77:96:f1:67:73:44:22:61:1a:84:86:bd:
df:b3:97:78:64:f3:04:a8:63:ab:07:1f:fb:2e:fe:ee:81:26:
fe:28:88:62:88:e3:58:c4:d0:22:4b:2a:d8:50:50:83:9d:a6:
0d:8d:40:88:92:88:d7:42:94:f0:7a:12:76:ce:0d:7d:b7:59:
05:e6:09:f0:6d:a0:d8:c8:4d:be:bf:74:72:83:f8:d3:2b:86:
61:93:15:3f:41:8e:9a:d1:1b:99:90:42:e7:eb:fa:3f:5b:3e:
92:0e:d4:46:27:95:c4:a5:71:2e:98:3f:61:6e:ab:38:07:81:
fe:d8:0a:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjEzRkUxMTAvBgNVBAUTKDUyQTFDNDIwRDgyN0MxNkNFQUEwNDI4M0REMjhCNjQw
QTMxNTYzNEQwHhcNMjYwNzI3MDg1NTM1WhcNMjYwODAzMDg1NTM1WjAYMRYwFAYD
VQQDEw02YTY3MWQwOC1lYzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7DnojvoTSR3JC+77lmDzQQcZhYx9oktpg3OhRDmLQ0pC+fJMK4oxofTn0Tae
jytVlS3bF1hkKve9BkOGinV+QJAYesN/BrRzM75vr2QTvZ0XGteGDnHcgskiL+/3
4t2+bTComCrlHVa17GKs+k04xp/n2D5JVQUSTPUNvqWKFCnZv1H22/y2i62lTsPH
HwVRxUG13yeyi9sFbPF9YrTd/kqzOH4IcpW0XBdKhV3Vx7RRmSTKYQyVF/2yyCcZ
cT8m4SLF2NkMb9eKM0rdFVUAB5rZzPhDtzbjl5ytJsc4xI/XviPgRjJvEaDC3adR
1Xu04SFs3R9pmOI0bvXwziS5wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM+fMp/B
HvN6gkqhz1ZULsMnpE70MB8GA1UdIwQYMBaAFFKhxCDYJ8Fs6qBCg90otkCjFWNN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTNGRS84RDhFMjJDMjU2
NDMxMUYwQjE2MjdBMTVDNEY5QUUwMi9VcUhFSU5nbndXenFvRUtEM1NpMlFLTVZZ
MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VxSEVJTmdud1d6cW9FS0QzU2kyUUtNVlkwMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MTNGRS84RDhFMjJDMjU2NDMxMUYwQjE2MjdBMTVDNEY5QUUwMi9VcUhFSU5nbndX
enFvRUtEM1NpMlFLTVZZMDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJpHQGPXiWMKnBEAbyf+1U4mvbbFnqdBuySgqt7meyEz+RK5XjTap1ZBEcY4E
/DgdCpnzW6b1IFcgFTE3Pm8BGOipejgp6SiSYC6X4O5y/GEP+jVLdwI74d/hjrGV
kQCZtNokZmy6PpEfYWRiBUcJ19shuslK/1a75A9XTSdSAHFmasqbd5bxZ3NEImEa
hIa937OXeGTzBKhjqwcf+y7+7oEm/iiIYojjWMTQIksq2FBQg52mDY1AiJKI10KU
8HoSds4NfbdZBeYJ8G2g2MhNvr90coP40yuGYZMVP0GOmtEbmZBC5+v6P1s+kg7U
RieVxKVxLpg/YW6rOAeB/tgK+w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:19:33 2026 by rpki-client