
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft
File: -uIUFNET23jVT-q6G2BvhUokC9E.mft (raw, json)
Hash identifier: SXAvfpR6Dho3qwIsw5/239vxNBfg7aHbIAX4NwXmu+k=
Subject key identifier: A0:C7:99:1B:F1:F1:20:58:CC:0D:19:BD:81:0A:55:4F:2D:8E:ED:F7
Authority key identifier: FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1
Certificate issuer: /CN=A91BDA2A/serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1
Certificate serial: 0261
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft
Manifest number: 025A
Signing time: Mon 27 Jul 2026 03:42:44 +0000
Manifest this update: Mon 27 Jul 2026 03:42:43 +0000
Manifest next update: Mon 03 Aug 2026 03:42:43 +0000
Files and hashes: 1: -uIUFNET23jVT-q6G2BvhUokC9E.crl (hash: pFbT5LFoWUl+AaGlGLR1Pt0Uby2CSI5hQ2YeHRU1jsA=)
2: 05C6C85CF3C211ED8B9B1450C4F9AE02.roa (hash: 6o/niFLDihK1K3/v4rYofrazOKed9CHeturqiQTfxB4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl
rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDA2A, serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1
Validity
Not Before: Jul 27 03:42:43 2026 GMT
Not After : Aug 3 03:42:43 2026 GMT
Subject: CN=6a66d3b4-1ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3f:9a:61:be:09:30:f0:24:e2:99:42:25:1e:
0e:76:90:83:6b:08:54:f2:2d:e6:07:bd:20:70:84:
c3:30:d6:30:46:2a:ae:c3:7d:a1:10:31:06:14:48:
44:a7:09:a5:cc:df:22:62:6f:97:bb:27:33:c1:42:
11:eb:3b:6f:61:ca:a3:1a:60:90:78:c7:9a:64:03:
80:e4:2f:ae:d0:66:77:e6:5b:40:86:cd:8e:16:6f:
48:6a:a4:fc:96:7d:51:f9:e3:03:b5:18:5c:f9:ed:
9d:34:e5:d3:99:1e:6b:eb:59:1b:07:fe:27:b7:21:
db:46:80:1c:02:ac:c2:90:9d:16:40:f6:70:c1:9f:
4f:72:5e:99:25:59:2a:36:72:0c:4e:2c:53:e3:e6:
2d:65:cf:e4:61:a3:88:7c:17:3c:be:90:99:62:0f:
7a:ec:fb:68:c6:67:47:94:ad:9a:18:cc:29:ad:ae:
71:18:ae:18:36:59:b1:48:f7:9b:64:07:16:16:11:
b6:1d:6a:f7:97:98:44:64:62:af:d0:da:f2:a3:1d:
29:c0:27:8d:7e:58:a8:69:87:8d:27:ef:12:92:6d:
f2:eb:c1:21:ab:d5:bf:33:47:7b:84:38:97:d6:b6:
95:82:3a:e3:f4:52:31:e2:df:b0:58:7f:79:11:87:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C7:99:1B:F1:F1:20:58:CC:0D:19:BD:81:0A:55:4F:2D:8E:ED:F7
X509v3 Authority Key Identifier:
keyid:FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:82:d2:f6:33:f8:c6:bf:00:79:5a:db:8e:c1:5b:18:37:78:
3a:f4:13:0d:0a:d7:3a:9a:d9:43:ff:6f:c6:3e:d5:09:c9:95:
26:0b:68:9b:33:35:ba:f6:63:27:a3:a7:fe:7f:f4:ff:6f:f2:
a2:8c:fb:69:4b:a0:f8:20:ef:a2:35:22:6b:6c:98:e9:7b:ca:
7e:fd:bb:67:e2:56:1a:a5:48:cf:a2:b0:cd:43:fe:2e:cf:53:
41:dc:be:b8:c5:6c:82:e8:a5:49:69:43:0b:67:f8:f2:ce:92:
c2:93:ae:dc:73:6a:18:bc:b5:52:c7:f3:1c:f5:fe:1d:10:4a:
0a:63:73:9d:ab:11:08:90:c4:cb:e9:46:7c:fa:87:26:86:e4:
52:0e:47:2e:cf:06:d2:78:b0:0b:5a:d6:1e:85:e9:b7:3f:6e:
fa:67:bc:7c:8a:6d:7c:a5:d7:37:29:de:69:1c:6c:7e:09:49:
f2:0f:87:7c:b5:98:e1:c8:28:42:e8:3b:59:70:fa:97:74:2b:
b6:ae:06:4e:af:ef:4a:a2:c2:e3:97:5c:16:74:a8:c4:cf:86:
10:25:ac:05:1d:ad:15:20:5a:ba:62:14:28:b5:56:a0:21:83:
f9:51:11:59:ad:95:7d:40:18:e0:df:d8:4c:67:8e:f2:21:30:
2f:08:cb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:20:06 2026 by rpki-client