
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
File: rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft (raw, json)
Hash identifier: zqRthrzZbKjn8HuicvkjAcTJxxxb78BxFA1DuVB24TY=
Subject key identifier: 7D:C5:E8:AC:21:C8:6A:B5:02:1F:F0:72:D1:0C:29:77:9D:7A:40:42
Authority key identifier: AD:41:FB:82:7F:93:10:4B:89:FA:6F:A7:85:F2:11:50:BE:6F:97:9A
Certificate issuer: /CN=A91B5BD4/serialNumber=AD41FB827F93104B89FA6FA785F21150BE6F979A
Certificate serial: 026A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
Manifest number: 0264
Signing time: Mon 02 Mar 2026 01:42:36 +0000
Manifest this update: Mon 02 Mar 2026 01:42:35 +0000
Manifest next update: Mon 09 Mar 2026 01:42:35 +0000
Files and hashes: 1: rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl (hash: Y1XppMsF5QLHtZmwij+7vbxLI/Rt0VHJNH1hdtglRng=)
2: C248DFA26DBB11EDB3635D28C4F9AE02.roa (hash: 2yyLpkc8MelbTeHRI5QTattRd9+fidXyksO5g4umYEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl
rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 618 (0x26a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5BD4, serialNumber=AD41FB827F93104B89FA6FA785F21150BE6F979A
Validity
Not Before: Mar 2 01:42:35 2026 GMT
Not After : Mar 9 01:42:35 2026 GMT
Subject: CN=69a4eb0c-70e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:96:ef:c1:44:3d:61:44:fe:bd:b8:42:24:c8:
73:2b:02:a3:17:d2:b2:d3:37:4b:7b:0a:e5:e9:96:
ed:33:62:5b:d2:05:24:08:ed:6e:2e:85:bc:f7:82:
a2:a6:06:67:42:4d:df:7f:dd:46:11:56:ec:00:1d:
c6:37:6d:e0:bc:4f:24:e2:59:38:52:05:03:8b:fc:
04:17:9e:34:2c:61:38:46:d1:d6:bf:dc:d9:dd:fd:
6f:32:b7:ae:2f:4b:7e:cc:9c:6e:fa:6c:44:a5:d7:
e1:7c:7e:23:44:ab:1e:27:4c:46:2f:29:a1:6f:25:
90:e8:0b:37:ec:5d:1e:40:e0:30:8c:ea:12:dc:a7:
26:98:2c:1b:a9:f0:81:37:fa:ce:f3:ee:bd:36:55:
ec:6b:c3:d6:d8:ea:f5:b6:5e:08:d1:9b:3e:71:f7:
73:7f:85:cb:e7:5b:4e:9b:49:7e:60:74:4e:86:a9:
2f:47:6b:06:3f:32:15:15:f8:fb:f6:17:8c:73:0b:
8a:a7:d1:18:1e:d3:24:55:92:47:46:3a:f0:03:55:
e1:99:c9:46:c1:fd:52:0e:7f:95:be:e6:b5:4c:96:
c0:a5:8b:fa:e3:35:d9:72:94:00:66:4e:ed:1a:c8:
e7:68:40:a3:fc:d9:ec:05:46:ff:4f:20:8c:fd:7c:
aa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C5:E8:AC:21:C8:6A:B5:02:1F:F0:72:D1:0C:29:77:9D:7A:40:42
X509v3 Authority Key Identifier:
keyid:AD:41:FB:82:7F:93:10:4B:89:FA:6F:A7:85:F2:11:50:BE:6F:97:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:c3:1e:c2:95:99:06:62:d8:1d:fd:ad:1f:cf:df:3d:a2:5d:
c5:e9:95:ed:d9:e2:7f:e7:11:33:4c:83:7f:64:12:62:a9:e9:
3e:da:3f:f2:91:08:03:04:62:c6:14:e5:cc:c2:22:c3:84:3a:
d5:29:c3:46:07:5c:ff:22:24:10:bd:56:89:b2:41:67:59:4f:
22:33:4b:3e:6b:48:c9:be:db:cb:8b:9a:93:2f:53:20:36:aa:
d1:a9:14:e2:4f:16:70:6c:5c:68:be:31:ab:fb:86:29:f7:5b:
d2:75:aa:70:7d:fb:9e:07:99:14:8e:5d:8a:05:79:64:d3:18:
16:2c:7e:70:84:84:c4:35:ae:b9:92:a4:bf:94:ea:87:b8:94:
cf:87:9c:52:91:af:78:0b:89:01:aa:1d:8f:c9:83:fb:e2:fe:
b8:3e:be:14:fd:14:f0:66:9a:fe:02:a6:d4:c3:0d:f1:02:18:
73:c3:e4:bd:44:03:39:ae:0b:db:db:b7:b7:f3:b3:ff:de:a4:
33:2f:0e:b3:20:fc:3f:1e:f1:1b:c2:64:94:33:27:ec:ed:93:
e0:cb:d1:3e:21:61:8d:11:4d:f0:86:7a:56:02:97:fc:ea:d4:
49:70:9c:d1:04:5d:a8:25:f6:c0:68:49:52:50:4f:7d:87:96:
f9:71:3f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:17:08 2026 by rpki-client