
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
File: uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json)
Hash identifier: t8/4E3OQ1RvCCAr2UQ6eS4tWJtwS3QCpuOOqa0qg0dM=
Subject key identifier: C7:BC:03:DA:9A:A0:FD:6A:F4:ED:D9:30:DD:C1:87:91:E1:0E:26:81
Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D
Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D
Certificate serial: 01D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
Manifest number: 01C4
Signing time: Sat 13 Jun 2026 03:54:36 +0000
Manifest this update: Sat 13 Jun 2026 03:54:36 +0000
Manifest next update: Sat 20 Jun 2026 03:54:36 +0000
Files and hashes: 1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: gpXqbWESox9i/s8K5lkcDOxkgN+MWDcH9BAITWAbN4k=)
2: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: 8to8ysOqqFD6evQaOy6tyviqmwLWEUIY429pE2R6UEM=)
3: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: 92db4sEQBXgKR1xndwR6hGmE1/F52FkQLZCxaqtLE4U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl
rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D
Validity
Not Before: Jun 13 03:54:36 2026 GMT
Not After : Jun 20 03:54:36 2026 GMT
Subject: CN=6a2cd47c-50d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:b2:f1:8b:a9:66:4d:e4:e7:93:0e:f8:77:
90:fb:20:b3:d0:03:44:0f:06:3d:c9:43:4f:49:a1:
a4:92:bb:28:f6:76:d9:90:48:e8:df:a5:ed:be:9a:
95:97:e2:9d:8c:a3:07:49:ae:46:dd:fd:c7:95:30:
2a:42:6a:41:5a:e5:17:28:b0:23:20:c9:e1:3d:7f:
c3:bc:81:3e:e7:86:4a:e3:96:a8:40:bb:44:b1:fa:
6e:c4:91:21:c4:d5:c8:cd:86:f2:53:28:2d:d6:83:
49:65:2f:47:f1:ad:08:5a:29:72:21:49:7e:f3:d1:
83:11:04:67:87:7b:85:a1:fc:e9:7d:09:3a:80:1e:
0a:0d:15:3b:62:43:9a:02:84:e0:3f:cf:0a:3c:9a:
64:d8:dd:e8:6c:1a:a0:bb:87:2c:9f:b0:59:1c:0b:
a0:97:8c:e8:7c:c0:82:a4:f6:7d:48:2e:ef:a8:57:
d1:2f:74:49:62:ee:a3:19:9b:24:c6:0e:5e:f5:bd:
25:18:7b:41:70:dc:b9:9a:fb:81:2c:d3:96:6e:bf:
87:80:79:ec:c2:e6:e9:1a:97:80:0e:d4:d9:06:98:
21:68:af:35:37:17:ee:be:5d:8c:52:8e:0f:ec:20:
bf:62:30:12:38:29:ad:d7:f0:f7:dd:0d:36:19:9d:
3e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BC:03:DA:9A:A0:FD:6A:F4:ED:D9:30:DD:C1:87:91:E1:0E:26:81
X509v3 Authority Key Identifier:
keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:98:e2:4a:53:6c:ea:3f:d6:05:99:f5:8c:ac:04:b2:b3:e8:
14:b1:ab:95:8f:ec:64:c3:4e:5e:50:7d:fa:4d:ba:37:d0:e3:
45:a1:84:de:93:78:4c:86:4a:fd:8b:f5:e2:ce:54:17:d4:47:
d2:3b:61:9c:05:e4:87:58:f9:90:08:7c:b5:59:ac:03:a6:da:
46:c8:0f:4a:cc:01:35:9a:ec:ac:21:30:26:d5:09:73:7e:2b:
c3:1d:99:be:6d:11:69:b2:ca:46:91:5b:7e:fa:01:1d:22:62:
9f:db:0e:18:63:01:89:ea:d8:47:a5:f1:ec:c1:16:28:64:73:
b1:29:d3:1e:63:ef:00:a6:5c:89:26:9d:b8:2c:ad:fa:9b:71:
0f:d2:4e:a8:71:57:46:2c:af:6b:98:8b:e1:32:ca:a8:9c:a3:
74:34:6c:ab:ef:f9:9d:3d:4b:7a:97:cc:82:b5:44:27:e7:93:
f0:9c:83:fd:2b:70:e4:31:da:17:12:16:41:8b:56:0e:42:31:
98:06:ba:a7:59:59:27:b6:4c:43:91:7d:a7:74:71:8d:d4:27:
47:e8:e7:05:e7:b2:42:cd:64:f3:a1:de:67:c0:19:4e:d3:ef:
34:7d:d6:d1:70:f0:28:c4:2b:8c:c6:b5:f8:b5:2f:89:26:b0:
e1:cd:0f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:34:27 2026 by rpki-client