
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
File: uu94943Hy_m3MScKqxBp9eNDPLs.mft (raw, json)
Hash identifier: FnzVkyPATXcEOfP11l9GtAgFWNr7P5A09ZJ/H+ObkSA=
Subject key identifier: A2:14:88:6C:B9:49:4C:13:FE:60:C3:82:A4:E5:2B:E2:33:4B:5E:A6
Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Certificate issuer: /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Certificate serial: 0131
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
Manifest number: 0128
Signing time: Sun 01 Mar 2026 06:44:30 +0000
Manifest this update: Sun 01 Mar 2026 06:44:30 +0000
Manifest next update: Sun 08 Mar 2026 06:44:30 +0000
Files and hashes: 1: uu94943Hy_m3MScKqxBp9eNDPLs.crl (hash: +3rYJCgWjVDvSjc+CJjqxpCXRACKkRNCkwP/1dNVmxE=)
2: 0FB823502CB011F0A2157E15C4F9AE02.roa (hash: SNFqVWFy/zXpL+IO4VqM1BTZFXQSMMWQWnpzgvn2Vas=)
3: 4749FE2AE9EC11F09B751112686F56BC.roa (hash: DWobNNjYUDF40GA20B1X0QtXEeNHdShUWUjKiS6DHGw=)
4: 286AB0F22CB011F084E4A915C4F9AE02.roa (hash: ZhBtT8PPZLIx6KpVofQIdCfnHMsDO/G3FnbenkGUmNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B61A7, serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Validity
Not Before: Mar 1 06:44:30 2026 GMT
Not After : Mar 8 06:44:30 2026 GMT
Subject: CN=69a3e04e-29dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:3e:4c:f9:f7:c7:0f:49:0f:40:e3:b7:32:
eb:fe:6d:f1:e2:44:42:f0:b7:ac:09:d9:3d:d7:97:
fb:f8:19:dd:42:c8:82:a5:82:44:14:5b:4e:f3:5e:
44:39:d9:f1:50:45:79:e7:63:ca:3f:56:62:cd:19:
17:b8:52:41:ea:53:ff:2e:c0:4c:a4:21:40:69:1b:
92:91:93:ea:17:87:4b:91:c3:5d:14:c2:d9:20:f7:
8b:28:9e:3c:1f:3e:4e:e9:64:5d:c0:53:65:91:6e:
2f:fd:a0:4e:09:26:36:2b:a1:2a:d9:94:cc:98:83:
34:3c:86:68:81:b6:89:b4:87:d4:f2:08:97:ef:36:
76:f6:f3:a5:02:27:fa:6f:45:9f:da:c0:2d:99:df:
c7:ca:1c:de:6b:e8:4a:25:0f:db:69:c9:f4:f6:95:
0d:58:2b:00:9b:e8:27:38:e7:ed:43:4f:ed:c6:28:
82:4c:a0:ac:91:e7:48:f5:48:39:cf:0e:4e:0e:57:
35:7d:87:d2:9e:dc:2e:bd:c0:3a:0c:27:26:41:56:
57:d4:a5:a0:58:6f:09:37:10:27:f4:bb:74:bc:57:
5d:f1:63:6e:db:32:df:a1:f9:f5:46:c7:7f:2b:43:
34:ce:01:55:b0:41:0d:48:1b:48:6c:17:f3:50:b0:
bd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:14:88:6C:B9:49:4C:13:FE:60:C3:82:A4:E5:2B:E2:33:4B:5E:A6
X509v3 Authority Key Identifier:
keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:d8:3d:19:b2:82:6a:8f:0e:14:47:dd:c3:90:26:58:17:95:
06:56:c4:ed:1b:d3:50:e5:98:5c:fc:90:42:fa:33:d6:b2:7e:
cd:7a:be:e0:94:70:4c:8b:1d:51:9b:e2:bd:9b:5d:31:6f:43:
0b:07:ee:1a:14:f4:67:83:b2:86:b4:5e:87:c4:b0:18:39:01:
15:4f:8e:3d:e6:32:f3:79:48:39:89:14:d3:c7:07:45:b8:e5:
44:16:f0:8a:64:93:81:cb:60:40:ad:9d:4a:e4:ae:11:88:3b:
3d:fc:93:70:74:98:9c:12:d8:cc:a3:ba:2c:c3:5a:35:7b:98:
ae:34:87:49:98:8f:af:09:b1:00:2d:07:e7:37:a4:3d:1d:bd:
90:33:a3:2f:4e:81:47:48:df:a2:92:2d:92:88:c1:f9:d3:c1:
fe:1c:b3:c6:69:36:04:fa:36:5b:20:3e:64:b6:73:e3:b7:6b:
a8:65:9d:0a:d4:2f:7f:72:54:4b:04:7e:43:41:aa:9a:a3:e6:
e3:11:b8:b1:01:57:f0:9e:44:e1:1f:cf:d9:4e:81:7e:22:7a:
a9:d1:8f:ee:df:4f:b3:d2:38:0c:9d:0e:57:99:bb:6f:36:8c:
28:6f:e2:1c:65:23:c3:ae:67:37:c8:18:43:a2:bd:f6:c4:20:
25:a0:82:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:17 2026 by rpki-client