
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
File: UlhBQeXpBP16_D4Noo2QCKGvkhI.mft (raw, json)
Hash identifier: LICLmVOVf8MTcVDUvEf7ILqrT/cxwVgIFXcexvr3mzg=
Subject key identifier: 7D:E8:BA:AB:BD:97:7A:17:02:25:90:DE:8A:F1:D7:EF:81:59:0B:A0
Authority key identifier: 52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12
Certificate issuer: /CN=A91C2CCD/serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212
Certificate serial: 0204
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
Manifest number: 0200
Signing time: Fri 17 Apr 2026 02:49:19 +0000
Manifest this update: Fri 17 Apr 2026 02:49:18 +0000
Manifest next update: Fri 24 Apr 2026 02:49:18 +0000
Files and hashes: 1: UlhBQeXpBP16_D4Noo2QCKGvkhI.crl (hash: x4z2eKydZRH1FZlBzMjh/bnwJjqZFqt0Gp7YeM96L6E=)
2: 41D133CC2B5911EE85AD762BC4F9AE02.roa (hash: eST/7ru+iHKnEdTD5pnHYt5uKaA+HMo9KeUcqRaQFgU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl
rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CCD, serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212
Validity
Not Before: Apr 17 02:49:18 2026 GMT
Not After : Apr 24 02:49:18 2026 GMT
Subject: CN=69e19fae-3d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ff:09:19:28:48:0f:66:65:c1:71:79:e9:a7:
da:6d:fa:b2:c3:0d:89:68:ef:41:ff:61:b4:b7:4e:
96:37:0a:cb:e8:67:0a:5e:3c:b3:00:e8:04:f0:98:
48:e1:bc:72:21:87:f4:a0:b8:87:da:f1:bc:3b:fb:
be:b9:97:8d:a0:db:ed:24:e4:7d:f8:ce:66:ea:50:
79:88:5c:c0:35:ae:73:fb:28:2e:31:10:11:eb:01:
21:13:76:a7:af:b5:95:4e:fd:7b:48:b4:de:d6:4d:
89:f0:c5:c2:31:9e:61:af:1f:e4:15:88:53:94:c6:
09:7b:27:e6:46:eb:10:5d:5c:d9:15:ca:48:3c:28:
6f:0c:cc:9b:2e:de:0e:15:27:b2:48:a1:f6:cc:64:
bd:9b:a8:da:b9:1a:fa:d8:ab:e2:9b:21:16:d4:96:
43:8e:69:28:4c:00:7e:e3:ac:31:d9:72:b3:44:9a:
9b:ba:e7:49:30:73:fa:f4:1b:d4:9f:70:8e:ab:4e:
67:ea:2b:2a:85:04:0c:86:b9:d6:b2:3a:7c:4e:1a:
33:35:99:08:8c:b8:5f:d6:87:0c:10:01:e4:43:bf:
ea:5b:fa:f5:94:3a:d5:d0:cc:65:d9:12:70:43:a4:
5e:23:66:ed:bb:de:29:16:11:09:96:99:ae:f4:3e:
7d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E8:BA:AB:BD:97:7A:17:02:25:90:DE:8A:F1:D7:EF:81:59:0B:A0
X509v3 Authority Key Identifier:
keyid:52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:32:b2:ea:96:7f:72:e2:4e:3c:78:77:8e:54:51:d3:29:d9:
26:51:08:f2:b7:6d:a2:e1:30:21:74:6a:33:87:af:4d:db:08:
98:25:bc:3e:5d:43:46:89:13:0e:58:7c:9a:cf:b8:31:eb:dd:
ac:42:0a:f5:37:94:eb:6d:90:39:24:7d:d1:a3:df:a2:3f:d2:
24:f8:b3:dc:15:58:ee:4a:50:97:c9:bc:81:5e:fc:12:8f:75:
be:98:e7:d9:cf:de:e0:de:37:c4:6a:5d:cb:54:e0:d1:fa:2b:
54:e4:0b:e3:60:79:de:9a:35:2c:d1:d4:6c:cc:01:10:1e:c3:
70:a2:60:f3:d9:7d:a4:2e:8e:8a:1d:01:61:02:3c:77:32:1e:
4f:46:c7:e8:08:08:18:41:69:71:73:71:6f:cb:b1:77:db:91:
b7:fb:4c:a0:fb:10:5e:83:0e:33:2a:7a:d4:b6:91:91:ef:a1:
d0:83:20:8e:16:7e:a9:51:98:89:6f:f9:42:ba:2f:dd:a3:a4:
8f:54:6d:a4:d2:f1:bc:b0:c2:9e:23:3f:f2:e9:8b:a9:fc:44:
a4:03:30:c2:37:6f:84:72:de:d6:e1:dd:ac:76:0a:2e:71:f7:
50:e8:c0:55:21:3a:8e:52:ba:ec:09:34:5e:59:70:b2:f2:df:
76:2a:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:15 2026 by rpki-client