
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
File: uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json)
Hash identifier: ayX441Y6N7EFRp33igt72kkBXI5PALZCo59egkh/9L8=
Subject key identifier: 71:0D:B9:27:63:DD:8D:12:04:28:C2:90:CC:8F:BE:05:8C:32:13:2E
Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D
Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D
Certificate serial: 01D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
Manifest number: 01C6
Signing time: Wed 17 Jun 2026 04:00:42 +0000
Manifest this update: Wed 17 Jun 2026 04:00:41 +0000
Manifest next update: Wed 24 Jun 2026 04:00:41 +0000
Files and hashes: 1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: krLOgNHiA6X5g69vaV9EZa+Mg5Y1Ucky9YCGE2Dvr2w=)
2: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: 8to8ysOqqFD6evQaOy6tyviqmwLWEUIY429pE2R6UEM=)
3: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: 92db4sEQBXgKR1xndwR6hGmE1/F52FkQLZCxaqtLE4U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl
rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D
Validity
Not Before: Jun 17 04:00:41 2026 GMT
Not After : Jun 24 04:00:41 2026 GMT
Subject: CN=6a321bea-e46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:72:49:4a:11:5c:f4:67:f9:58:a6:c4:aa:
28:23:e0:48:0d:36:e5:3b:e8:e6:1c:6b:bd:83:13:
22:d5:df:76:3c:39:61:ca:5e:69:0d:97:98:9e:ba:
15:15:e5:41:2c:3f:b7:f5:df:d8:fa:a4:61:1b:3b:
67:99:11:86:1a:0c:f0:4c:8d:04:e6:b9:05:67:69:
46:17:92:bb:7f:28:2e:3e:6a:e7:67:e2:f1:75:22:
79:38:28:3e:de:4c:e7:94:32:f9:0b:e4:26:cb:0c:
ff:00:9b:5a:49:21:21:78:2a:44:eb:22:0f:b4:61:
21:4d:b5:ca:b1:9a:d7:01:80:b9:7a:ac:f6:44:93:
5d:63:f9:a5:49:12:8b:67:a7:8e:9b:73:0d:24:76:
21:c7:ff:d8:81:ac:e0:95:70:38:6f:4f:4b:6d:ff:
28:3f:5c:75:a9:35:74:ef:f5:03:e9:3b:d3:d2:f8:
d1:69:03:d5:3a:79:4d:8e:0c:bc:f1:9d:9e:88:45:
c0:eb:d6:bc:ac:33:ff:14:05:54:57:4a:fe:9c:49:
e8:1e:4c:7e:69:3c:d3:d6:05:93:26:41:29:82:99:
aa:03:2e:1e:6d:2e:e8:9c:a7:44:ee:da:5d:f1:37:
e8:9a:96:da:e1:2f:4e:68:bb:09:c2:f0:e5:81:6f:
2b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0D:B9:27:63:DD:8D:12:04:28:C2:90:CC:8F:BE:05:8C:32:13:2E
X509v3 Authority Key Identifier:
keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:38:ae:3e:2e:23:94:d1:a7:94:b4:e2:cd:9f:4f:97:17:18:
73:f0:11:a5:6b:3e:7d:ec:fe:07:93:58:fc:8b:c8:f0:a2:8d:
ff:9e:18:a6:6f:d8:df:90:ac:ae:17:a0:24:8d:be:70:d6:7a:
19:ea:5a:6a:13:68:46:05:9e:9b:b2:78:82:88:f6:bc:a5:fd:
ec:ee:73:98:40:c2:80:50:82:a1:e6:fc:e9:58:3b:51:a5:11:
a1:c6:f3:a8:92:4d:90:34:d1:50:c9:3b:f9:34:01:7e:4d:dd:
4a:0a:62:8f:47:d1:37:d4:28:83:b8:79:c6:5d:7c:ff:1d:62:
b4:ad:62:f7:d3:4e:36:92:c2:3d:39:e9:44:30:ae:fd:58:79:
ac:95:5f:42:73:46:bc:19:40:b2:60:3d:c2:26:09:2c:a8:9f:
19:98:20:dd:81:06:d3:06:e1:7d:ed:e1:62:06:c7:bb:87:32:
87:52:f6:6e:3c:de:76:98:e3:c4:8c:7d:7d:4e:14:04:34:2f:
47:ea:ac:d6:c0:17:7b:79:9a:c6:b6:91:53:4c:2a:95:a9:e2:
34:eb:d9:ff:c7:0e:98:b8:e5:c1:71:f2:b3:45:dc:33:89:9a:
60:b4:83:4c:f4:ab:27:c5:e4:4c:ce:ad:17:e9:b2:2c:77:dd:
1f:f6:8c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:51:50 2026 by rpki-client