
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft
File: uLVa9atmqP-naRykPaKmtJuiRUA.mft (raw, json)
Hash identifier: SHDyY7zEqzCMJBMqt3Q4Yw2iNQuG52uA3X4y/BfNNI8=
Subject key identifier: 28:76:4C:EB:25:84:AE:6D:F3:CC:5E:83:F6:11:E6:F7:F4:DE:4F:A2
Authority key identifier: B8:B5:5A:F5:AB:66:A8:FF:A7:69:1C:A4:3D:A2:A6:B4:9B:A2:45:40
Certificate issuer: /CN=A91C5778/serialNumber=B8B55AF5AB66A8FFA7691CA43DA2A6B49BA24540
Certificate serial: 0CF8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft
Manifest number: 0CEE
Signing time: Sat 26 Sep 2026 18:30:43 +0000
Manifest this update: Sat 26 Sep 2026 18:30:43 +0000
Manifest next update: Sat 03 Oct 2026 18:30:43 +0000
Files and hashes: 1: uLVa9atmqP-naRykPaKmtJuiRUA.crl (hash: D04p2XN4TLSpRXP/COmph/w914oBUGeKHeTvnzwnqWI=)
2: B3E5DF2A14ED11EAACAB5E5DC4F9AE02.roa (hash: 3OqTGjIgsHVDPUYnbHar2FaPmlN2uunJHFoJ3j2NcEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.crl
rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3320 (0xcf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5778, serialNumber=B8B55AF5AB66A8FFA7691CA43DA2A6B49BA24540
Validity
Not Before: Sep 26 18:30:43 2026 GMT
Not After : Oct 3 18:30:43 2026 GMT
Subject: CN=6ab80f53-df09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:e1:91:60:72:86:7a:21:bb:a4:b4:67:d3:
71:8b:a2:35:08:e6:e6:4a:1a:3d:cc:2a:94:09:a0:
0c:4c:36:41:87:6f:c2:40:96:9f:af:43:6a:e4:7b:
92:2e:d2:6a:5c:0b:0d:5d:60:d4:f8:c0:6f:c5:4f:
8d:f7:3b:94:fd:2e:d9:ce:58:39:d6:ac:48:7f:e1:
d0:ee:51:42:4c:f7:63:71:19:25:bc:90:24:2a:4f:
18:53:b5:8a:b1:e1:0f:e6:50:9c:4e:21:86:40:c8:
81:c8:ac:9d:e2:03:a6:0f:30:88:95:ff:22:01:95:
37:f7:e1:6e:64:c2:7d:24:95:cf:4a:e7:f4:4e:c6:
59:de:81:f1:d0:f3:91:60:3e:80:44:d9:a8:bd:3a:
d2:32:b3:6c:20:01:12:6d:95:96:9f:37:d4:c7:82:
ad:99:fd:b4:05:56:ec:21:3a:c1:c5:9c:40:ea:45:
32:b7:78:ea:8e:78:1e:84:19:34:38:53:c3:21:b7:
c7:4b:31:df:a9:c1:cf:d3:36:c1:fd:88:0a:fa:08:
b1:2e:af:a3:70:3c:f3:9b:fb:91:1b:c1:7b:0b:cf:
c9:b3:42:61:1e:d3:ec:dc:26:e4:33:24:f0:24:59:
0e:16:80:23:7c:23:c5:9d:67:0c:96:1f:01:c1:d8:
d0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:76:4C:EB:25:84:AE:6D:F3:CC:5E:83:F6:11:E6:F7:F4:DE:4F:A2
X509v3 Authority Key Identifier:
keyid:B8:B5:5A:F5:AB:66:A8:FF:A7:69:1C:A4:3D:A2:A6:B4:9B:A2:45:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:1f:7b:33:a7:ce:40:02:dd:1f:ac:f0:d5:cb:d0:b0:a2:40:
98:a4:d0:0c:ee:3e:3b:34:75:3e:44:4f:48:4d:41:27:e7:69:
4c:c2:92:99:87:25:b5:79:99:e4:05:ed:31:d6:ff:0c:41:f4:
eb:1a:82:c5:a1:9e:19:f7:35:91:b8:71:5f:9e:c5:84:25:f9:
a4:2c:26:a5:9f:f4:ff:98:5f:42:73:7f:15:a9:6b:3b:34:74:
3f:fb:3d:c8:3a:29:e0:02:be:b9:a9:a8:4b:58:e1:79:ed:06:
c4:9e:9b:5b:9a:2f:5f:1b:e8:16:22:84:a9:39:2a:b3:d8:dc:
46:6c:4e:d8:95:5c:3d:24:26:f1:63:31:1f:f1:1c:9a:1d:cc:
ef:6e:ea:2d:6a:d7:bd:4e:23:60:d4:42:09:ca:4b:2f:7e:49:
0b:ad:7e:b6:35:7e:d5:10:9e:9a:73:0a:03:e0:a8:b8:1c:c7:
a5:61:14:6c:57:17:92:52:89:6f:87:4f:8b:12:35:e4:3c:4c:
dc:11:af:c2:97:aa:9c:9d:d1:2f:82:45:3a:28:7d:90:6e:85:
a7:02:5e:d8:20:df:d0:b3:c3:67:e6:d5:41:8d:72:c2:43:4d:
0b:08:2e:b7:a1:c7:30:9d:2c:94:52:69:f0:0b:23:46:60:7b:
8a:83:52:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 04:27:30 2026 by rpki-client