
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
File: rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft (raw, json)
Hash identifier: y05tAR/xtgkbAxFh+UPanAVDUhh/LUvMhZ4P1RpsUtE=
Subject key identifier: A9:01:1B:03:CE:7B:B4:76:61:69:C1:BB:77:DA:75:B9:7E:0C:11:75
Authority key identifier: AD:41:FB:82:7F:93:10:4B:89:FA:6F:A7:85:F2:11:50:BE:6F:97:9A
Certificate issuer: /CN=A91B5BD4/serialNumber=AD41FB827F93104B89FA6FA785F21150BE6F979A
Certificate serial: 0285
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
Manifest number: 027E
Signing time: Fri 17 Apr 2026 01:40:12 +0000
Manifest this update: Fri 17 Apr 2026 01:40:11 +0000
Manifest next update: Fri 24 Apr 2026 01:40:11 +0000
Files and hashes: 1: rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl (hash: Thw00Wd94L2OI/vFizJ1IAYtPVk9fwklUFgnXdE5O3I=)
2: C248DFA26DBB11EDB3635D28C4F9AE02.roa (hash: sOLSsdQvUAFIuwRy2JMiUb1p3y3QHnDAYC9uLmZDsqU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl
rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 645 (0x285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5BD4, serialNumber=AD41FB827F93104B89FA6FA785F21150BE6F979A
Validity
Not Before: Apr 17 01:40:11 2026 GMT
Not After : Apr 24 01:40:11 2026 GMT
Subject: CN=69e18f7b-2df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:b6:58:eb:d7:54:ff:4e:da:dd:04:a7:0a:
6f:31:fd:ca:2d:7c:c6:58:b1:85:81:a4:90:a9:38:
68:c5:f7:04:97:b1:b3:37:08:8c:b9:36:21:37:24:
fb:9e:ae:30:b0:b2:70:ca:97:0e:53:5d:97:7f:e0:
78:d0:36:fc:86:54:63:a1:ed:11:27:61:90:47:6a:
23:5c:b3:e2:3f:12:5f:7b:04:df:c0:32:6b:36:db:
8b:1c:74:a7:42:3c:5f:44:92:3f:1e:96:c0:aa:f9:
8b:a6:b4:4d:56:d2:85:3d:44:f2:7a:c9:0a:07:5f:
fc:6d:b9:06:7f:07:bf:41:2f:f6:cb:60:a9:09:ab:
c5:f2:95:8e:8e:67:e0:a7:2d:92:ca:cc:84:78:4c:
aa:17:c3:59:8c:3d:9a:54:26:fe:c6:eb:b2:7d:a5:
41:98:6b:e1:11:04:69:59:10:a1:93:43:0a:cb:bf:
47:5f:81:0c:ab:56:94:95:09:a0:c9:53:4d:b5:75:
79:25:e2:b5:0e:63:7b:83:91:61:fd:b8:d3:89:e7:
04:8f:f9:2e:50:29:e3:ac:bc:1b:19:5c:8b:9e:35:
d7:fa:f5:4e:46:7c:c2:ff:62:85:fe:a4:79:63:e0:
c1:ab:c3:a3:87:c5:7d:28:90:4f:e8:63:24:14:60:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:01:1B:03:CE:7B:B4:76:61:69:C1:BB:77:DA:75:B9:7E:0C:11:75
X509v3 Authority Key Identifier:
keyid:AD:41:FB:82:7F:93:10:4B:89:FA:6F:A7:85:F2:11:50:BE:6F:97:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:f2:a5:1a:df:cb:ac:fe:91:f7:8d:3b:fb:b5:20:85:e0:8f:
c6:9e:49:81:5a:9b:91:ab:ba:6d:f7:1a:ad:12:4d:90:bb:30:
bb:96:37:89:d3:46:b8:6e:fd:58:58:80:59:6f:61:13:b1:ec:
9e:8a:45:85:5c:e6:7b:73:a0:c8:db:1a:1a:92:a4:86:e5:fd:
c9:1a:13:c5:50:e5:6b:e6:6b:1c:5c:68:d5:80:a3:55:79:e6:
d2:9a:0e:7c:2a:a3:a2:9b:19:ed:27:df:25:e0:9d:ec:33:bb:
7c:b1:b8:a8:c6:ab:4b:72:15:32:98:e2:d5:03:3f:4e:3e:29:
8a:0e:4a:ca:a4:e8:e0:11:bf:88:eb:bf:f0:9f:11:46:9e:b1:
6c:a9:9f:1f:31:bd:1d:0e:a3:b3:6f:12:ba:9d:5b:c8:71:56:
c0:96:1b:db:ff:4a:71:4c:e3:1b:5d:2f:e0:86:e1:a7:79:ab:
95:b7:a4:92:be:33:b0:8d:fb:11:e2:63:cc:7d:5f:58:2b:f3:
08:a9:cc:01:5e:54:cc:10:22:4c:3f:be:e8:54:bc:d6:b4:f1:
eb:36:01:ab:98:67:9e:8f:32:4e:24:b7:f1:ce:a2:af:da:27:
2c:0b:df:0d:5c:f4:37:22:33:06:e6:20:d8:18:55:d6:1e:02:
e5:87:1b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:02:48 2026 by rpki-client