
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
File: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json)
Hash identifier: nqxnOnZR8bOm0kw0nyv3a8zKA3XJQ3F2PfdkJ9Y0yxI=
Subject key identifier: F7:F8:6C:D2:11:8E:05:E0:86:53:71:D7:BB:49:2F:9C:94:3E:DF:58
Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Certificate serial: 044D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
Manifest number: 042F
Signing time: Mon 27 Jul 2026 01:22:24 +0000
Manifest this update: Mon 27 Jul 2026 01:22:23 +0000
Manifest next update: Mon 03 Aug 2026 01:22:23 +0000
Files and hashes: 1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: mypsGLsW833eyQKn0CwQSLqiEOs4OhX6fHxlWJYnSpI=)
2: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: KniUex6Br3kVd8ZFa5IvlRLLvtXYDCxf0DDbHMrohjA=)
3: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: qX8tOJbBF02ErsmjyRjd2vo7Vt289wtwBfMF3iMN9FA=)
4: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: ZoRg8H9EdcG1KZ48qLjcZYnWfQFTwAAseWDLCkJqZiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1101 (0x44d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Validity
Not Before: Jul 27 01:22:23 2026 GMT
Not After : Aug 3 01:22:23 2026 GMT
Subject: CN=6a66b2d0-2ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:c0:1c:10:a2:6a:f9:1a:ed:db:ac:d0:dd:
8a:45:be:6b:fd:6a:34:b5:f1:cf:b0:59:50:91:03:
dd:41:d7:04:f6:58:24:35:18:c9:0d:e7:77:1e:1a:
ba:47:14:5f:03:93:65:47:d4:ca:9d:74:3e:01:f0:
b6:63:d9:14:59:62:55:b4:23:9d:1e:43:52:6e:e4:
38:da:16:7d:6e:76:5e:79:91:a6:6f:53:3b:74:e3:
34:1a:65:ad:6a:2d:ae:99:2d:4e:fd:fa:95:67:3c:
e5:f0:9a:23:36:b6:c4:33:58:22:3b:a7:e4:29:34:
51:e8:0d:ad:3d:bc:b4:ea:8d:c9:61:ff:1f:53:27:
84:5b:92:8e:08:6a:f9:03:2e:23:8a:39:8d:01:9d:
74:05:92:ea:2c:b9:81:8a:4a:f1:e2:6c:ce:fe:4f:
12:26:bd:9b:d2:34:c6:ef:72:e4:86:9c:d8:fe:e9:
1f:17:ce:67:9b:17:10:99:68:0f:0c:b5:55:2a:f8:
2f:63:2c:a4:1e:4a:ad:e7:96:e0:cf:c2:ee:7f:cf:
20:23:dd:62:f8:68:eb:22:bc:ed:72:7f:bc:00:c1:
f1:57:bc:5d:26:58:3e:7d:df:41:5d:90:03:1b:18:
42:b7:1a:13:57:c3:13:e1:c8:f1:12:00:38:45:4a:
50:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F8:6C:D2:11:8E:05:E0:86:53:71:D7:BB:49:2F:9C:94:3E:DF:58
X509v3 Authority Key Identifier:
keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:cc:2c:ac:2a:34:1b:8f:7f:45:a8:ac:00:29:b4:fe:1b:b7:
4a:bf:b8:b9:0f:f3:1f:f6:34:8f:c1:25:43:18:ba:dd:81:22:
28:56:e6:44:22:b2:a9:6d:0b:13:c4:49:08:d9:54:b6:ed:3b:
73:10:9d:be:fd:e8:ce:91:d1:97:a1:27:4b:2a:c4:75:84:56:
1c:f7:0d:f0:ee:4e:c5:42:90:01:ae:0c:c0:70:c4:e8:fa:d8:
9a:8e:ca:f5:a8:35:01:f8:5e:30:5d:50:41:b2:94:fa:68:75:
dd:26:72:37:db:c3:30:90:2a:63:fb:f1:d9:8e:ee:71:d9:8c:
d3:a2:27:1a:0f:40:02:9e:3c:6a:51:8a:db:29:2e:4e:49:06:
15:a6:e6:64:0d:5d:45:d3:7b:cb:ac:8d:20:96:84:eb:65:f0:
ba:b7:dd:9e:64:51:04:2b:77:45:a4:7a:f5:9d:8b:15:1c:a0:
28:18:fe:f4:b0:ab:b8:ff:4a:22:a1:88:3f:f6:38:e6:25:9c:
fa:4a:b4:2a:94:80:d6:b0:bd:d3:be:c8:82:7c:99:00:2d:32:
98:14:d3:74:bd:79:2c:c9:1e:5a:07:73:73:cd:46:d2:9a:06:
2f:a4:e3:c6:30:d5:2d:3b:35:89:9b:c6:5f:cc:89:7d:ad:e3:
59:f0:1e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:11:12 2026 by rpki-client