
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
File: UlhBQeXpBP16_D4Noo2QCKGvkhI.mft (raw, json)
Hash identifier: plTR+tCGKfophSFGt9Ga7jFQw34LCyut1NPlTjhrPUk=
Subject key identifier: 1D:D0:57:E0:B2:3E:B2:21:4F:1F:6C:B4:9F:DE:2A:45:CA:FA:1B:45
Authority key identifier: 52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12
Certificate issuer: /CN=A91C2CCD/serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212
Certificate serial: 026F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
Manifest number: 0269
Signing time: Thu 05 Nov 2026 02:48:41 +0000
Manifest this update: Thu 05 Nov 2026 02:48:40 +0000
Manifest next update: Thu 12 Nov 2026 02:48:40 +0000
Files and hashes: 1: UlhBQeXpBP16_D4Noo2QCKGvkhI.crl (hash: 7vw2tu3+7MJLxns1oddztIyuDZj4Op8ZYIThtrJ6sT0=)
2: 41D133CC2B5911EE85AD762BC4F9AE02.roa (hash: js8xICC+uo4E5pknpNk0KkzoVevnkz6o6MdDYMenHmc=)
3: YQD1sMPSEOIvp6ejZTR_ZqI5gi0.asa (hash: FgNS4rG/VrXvutFh5DEQ0VgrBP013/BwvJ/5sm0ioH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl
rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 02:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CCD, serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212
Validity
Not Before: Nov 5 02:48:40 2026 GMT
Not After : Nov 12 02:48:40 2026 GMT
Subject: CN=6aebee88-a7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:1c:f9:96:0d:5c:df:59:1b:24:46:62:8a:
4d:8e:61:e8:6a:48:96:1e:4f:fc:94:b7:bd:7a:d1:
c5:36:5d:c4:5c:96:e5:86:92:27:a4:61:4a:1b:fe:
9f:db:37:49:86:93:f8:68:80:17:c8:a4:b0:76:99:
f9:f3:45:f5:b2:10:08:11:bf:fa:c7:d9:36:a4:0d:
4d:4f:d4:b8:28:c2:6c:5c:6e:83:ac:d7:9e:40:df:
00:de:65:99:03:bd:8b:2a:89:99:7e:b8:15:e3:81:
50:b0:ed:91:18:2a:02:e9:85:13:0e:71:4e:e8:12:
9f:39:79:c8:d3:6e:fd:c5:2c:bb:d3:ae:45:27:51:
12:79:48:3f:57:1c:56:62:b6:d0:52:56:c8:b6:3e:
9a:22:18:1b:a1:61:4f:07:a7:6d:ea:e6:59:3b:9c:
2b:ad:9e:b8:09:de:5a:94:1d:93:e6:35:f8:ff:e4:
7f:a3:be:f5:04:a2:80:4f:2a:82:ec:7e:2c:ac:cc:
19:4c:4a:74:fd:41:a2:3c:ab:27:ef:5e:02:14:f7:
ce:0e:67:5f:84:8d:ba:19:fd:20:a9:de:ac:d4:ab:
61:f6:82:a6:6c:2b:46:bd:9e:ad:bb:10:c4:cf:17:
09:4d:6c:d8:45:e2:2b:b7:5f:1c:57:56:d7:6b:78:
f9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D0:57:E0:B2:3E:B2:21:4F:1F:6C:B4:9F:DE:2A:45:CA:FA:1B:45
X509v3 Authority Key Identifier:
keyid:52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:23:a6:36:bf:b3:c4:31:34:f0:00:0d:16:13:b8:d0:38:dc:
c2:3a:50:ed:70:a7:0a:c6:11:51:4d:f6:6f:77:01:f1:ea:ad:
5b:58:ad:08:c6:56:e5:e8:cd:e1:29:46:fc:d3:80:cc:84:09:
cb:2a:2d:ed:b6:3b:d6:f3:1c:87:07:b3:b7:9c:26:ab:34:92:
9b:55:70:4f:a2:81:33:8b:47:7c:5e:23:a1:15:66:e6:1d:45:
ed:0e:d0:66:0c:03:1d:bd:50:91:fd:43:e3:4b:cb:dd:51:f3:
3d:7a:c7:0e:ad:73:a2:b1:27:7e:1f:84:d8:9e:ce:f9:d1:f7:
3f:2d:32:3c:1c:df:ec:a5:d2:d4:73:7c:4e:a2:c1:29:6f:ac:
0a:2e:e2:0a:fd:18:62:05:73:a3:05:01:94:20:f0:97:42:fb:
45:78:4b:6a:77:b1:15:48:ed:74:8e:93:67:49:0c:db:99:57:
7d:d3:45:43:db:f1:0b:2d:fa:16:42:60:9b:96:61:cb:5f:42:
17:21:34:48:9b:98:eb:7b:cf:01:f8:a7:19:61:ff:91:32:47:
cc:89:15:ea:1e:c2:1a:2a:b0:6a:18:4c:00:46:7a:35:ab:11:
8a:ac:15:53:ba:a5:f9:51:f1:a5:44:f2:34:6e:7c:66:f0:20:
8b:a9:e2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:09:24 2026 by rpki-client