
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
File: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json)
Hash identifier: DZ4TPcadFxf3d7wjslEj2BWZUduj2F5V9GQDYVUxsDg=
Subject key identifier: 94:A1:19:2E:FE:14:C1:2F:DE:44:20:7C:C0:8F:86:18:78:94:FA:09
Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Certificate serial: 046C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
Manifest number: 044E
Signing time: Fri 25 Sep 2026 00:02:36 +0000
Manifest this update: Fri 25 Sep 2026 00:02:36 +0000
Manifest next update: Fri 02 Oct 2026 00:02:36 +0000
Files and hashes: 1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: wRSBMZpb1zyDoEaRQDFCfpDgYr708ZbYGbmV6A16VvY=)
2: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: qX8tOJbBF02ErsmjyRjd2vo7Vt289wtwBfMF3iMN9FA=)
3: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: ZoRg8H9EdcG1KZ48qLjcZYnWfQFTwAAseWDLCkJqZiQ=)
4: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: KniUex6Br3kVd8ZFa5IvlRLLvtXYDCxf0DDbHMrohjA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1132 (0x46c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Validity
Not Before: Sep 25 00:02:36 2026 GMT
Not After : Oct 2 00:02:36 2026 GMT
Subject: CN=6ab5ba1c-92da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:34:5d:e6:27:35:65:a6:3f:6b:70:87:97:
81:52:01:b9:31:f5:43:c4:60:d8:31:02:28:f9:04:
5f:fd:1e:33:64:2a:fc:cf:ae:2d:44:84:f6:56:96:
65:34:0c:04:dd:c4:60:27:9a:cb:83:c1:b2:12:de:
c9:72:56:25:dd:c0:4a:f6:b6:90:60:dd:b7:09:ed:
3e:34:14:7d:23:8b:98:f3:a9:b7:62:c5:46:e6:6c:
65:7d:65:3a:0e:38:92:04:72:61:7c:e3:23:fc:ef:
13:c6:a7:79:8b:d6:70:f0:7c:7e:59:cc:f0:ba:7c:
8a:e2:a0:63:0a:7d:7e:61:8d:02:24:f0:3b:56:ce:
b6:be:15:4d:86:de:73:7e:22:17:86:fc:78:39:89:
81:1e:12:55:bc:b9:49:b0:5f:3b:ab:44:b6:6b:76:
c2:07:b7:2e:52:92:ba:f8:8e:b6:da:08:6a:78:37:
51:2a:f7:9c:e0:f9:48:5b:76:3c:b1:0f:52:d0:31:
f9:e7:6a:5d:9b:9d:e6:1e:1e:35:f8:60:e6:89:bc:
70:d9:7a:e7:fe:83:e3:6e:75:68:75:6e:47:03:a4:
54:db:53:63:44:bb:f6:0c:59:df:c0:6c:98:37:ff:
4a:e1:70:58:20:61:21:60:48:d0:e1:92:1c:a3:5e:
61:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A1:19:2E:FE:14:C1:2F:DE:44:20:7C:C0:8F:86:18:78:94:FA:09
X509v3 Authority Key Identifier:
keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:05:c4:dd:8a:65:b8:d4:7a:5b:66:e7:0b:4d:07:dd:bb:a9:
b1:4d:99:8d:0d:5a:93:ec:e8:de:31:92:d2:be:e3:4a:9e:13:
05:3d:35:3a:9e:53:ee:db:d3:bc:db:12:dd:43:45:eb:30:75:
4f:a5:bb:fd:aa:1f:dc:94:5c:a9:8b:59:9a:3c:63:44:64:29:
1c:a2:3a:47:96:bf:4f:69:49:61:5e:dc:ea:64:25:a0:11:3e:
b1:d3:8f:01:05:4b:75:62:0a:47:78:5b:02:16:98:ea:dd:3f:
41:c3:c1:5c:8b:17:9d:bd:23:8f:3f:2e:d2:a5:7f:b8:f2:a8:
27:0d:c3:22:ed:5c:03:db:60:9f:8b:20:41:08:ab:2c:af:e8:
04:d6:2e:27:41:91:5d:27:35:ab:72:84:56:9e:ad:a5:0a:86:
e0:b7:d4:0a:e3:f3:74:d7:95:6f:40:08:44:de:d6:ff:da:a8:
47:47:1b:19:72:e0:bc:3f:e5:f3:2d:b8:42:96:13:b6:e2:64:
4f:6e:a8:6a:e2:94:a7:af:e4:12:9c:a0:bd:e2:b9:98:96:73:
f9:17:d7:52:6c:23:37:d8:10:0d:fe:a2:59:d9:ee:c2:0c:26:
29:4a:23:b8:01:e5:31:df:c7:8c:ae:4f:a8:3e:a3:d0:a7:d4:
04:d6:99:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:59:03 2026 by rpki-client