
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft
File: UqAK42gJYToMmRW4LS7dewR_BBY.mft (raw, json)
Hash identifier: FMXZKUvHr5XTmv+F8h5v6ojsZiW/TaRWkmGAULUMGT4=
Subject key identifier: 1D:25:8D:89:55:A4:18:0E:AD:FF:82:AD:2A:CD:79:F4:4D:B3:8C:8C
Authority key identifier: 52:A0:0A:E3:68:09:61:3A:0C:99:15:B8:2D:2E:DD:7B:04:7F:04:16
Certificate issuer: /CN=A91CC4A7/serialNumber=52A00AE36809613A0C9915B82D2EDD7B047F0416
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft
Manifest number: 47
Signing time: Sun 01 Mar 2026 09:44:30 +0000
Manifest this update: Sun 01 Mar 2026 09:44:30 +0000
Manifest next update: Sun 08 Mar 2026 09:44:30 +0000
Files and hashes: 1: UqAK42gJYToMmRW4LS7dewR_BBY.crl (hash: mmyLcbSIrQFVYH04+QsZaERluq7AcjmD6g8M6QK1yvU=)
2: 94CEBFFEAB4511F09AA0C458C4F9AE02.roa (hash: VnxPQSSZH/jrUJ6zmg9TBmjFmVAPpsz93eEIgIGKblg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.crl
rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC4A7, serialNumber=52A00AE36809613A0C9915B82D2EDD7B047F0416
Validity
Not Before: Mar 1 09:44:30 2026 GMT
Not After : Mar 8 09:44:30 2026 GMT
Subject: CN=69a40a7e-73da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f6:31:b1:82:5d:11:db:53:9d:13:3a:cb:bc:
e0:c7:37:f9:4e:31:65:7b:70:0d:b8:b4:ec:f1:39:
4f:00:7b:d7:8d:44:78:66:70:35:0c:f8:dc:14:5a:
53:1c:4b:86:0f:45:ca:76:3d:56:11:a5:91:98:cf:
7f:27:c2:79:d4:c9:d4:e7:15:3a:14:c5:91:56:fa:
79:ef:ed:8a:db:18:e2:86:f0:2e:27:64:4b:26:04:
32:bb:82:ff:ba:5e:fd:85:af:6d:70:26:bf:50:03:
a5:e1:33:09:bc:4e:85:fb:d9:d6:04:e7:81:04:bc:
e6:1c:d9:43:58:a0:94:99:64:c1:4e:b1:00:6f:37:
8a:4a:c2:31:bd:f3:95:e9:d5:9b:7c:b3:c3:f4:37:
52:a3:2f:55:47:78:7a:2b:db:88:da:18:3e:40:99:
d1:b4:df:b3:9c:4b:d5:4c:c4:8c:5a:d2:b9:b0:68:
50:17:d0:3c:2c:f6:b5:58:a7:5d:98:d2:9e:18:f5:
0a:56:ff:66:ab:e1:4f:b4:a6:a3:4b:ee:2d:42:94:
8b:21:bd:bd:64:ad:cc:17:14:5a:d6:a9:f2:89:a8:
6d:c7:de:7b:ab:cc:76:42:f4:ec:47:9f:76:11:69:
91:c4:a5:44:2b:c9:08:92:a5:73:92:6f:2b:5c:2d:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:25:8D:89:55:A4:18:0E:AD:FF:82:AD:2A:CD:79:F4:4D:B3:8C:8C
X509v3 Authority Key Identifier:
keyid:52:A0:0A:E3:68:09:61:3A:0C:99:15:B8:2D:2E:DD:7B:04:7F:04:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:13:f2:26:6f:34:22:e1:b4:14:74:7d:e2:c4:75:03:cb:07:
4f:12:f9:bb:a2:ff:7e:a8:75:dd:d1:66:70:ae:7e:d6:c8:5c:
00:c7:74:cb:4d:73:02:f4:fd:95:fb:7a:e1:3c:3f:21:ea:a2:
3b:8f:30:2c:9b:e2:5f:a5:28:0a:ff:b1:64:37:a0:a0:06:b1:
86:16:48:ff:8f:95:7b:87:0b:d2:16:a2:94:ed:24:8d:19:dd:
20:1a:4f:75:c2:f3:e6:27:a3:f2:63:c4:21:75:c8:ff:d7:68:
48:b1:9c:4c:df:83:48:ee:91:95:ef:7b:fa:20:e5:85:de:19:
a7:e0:da:9b:a2:e2:79:f4:64:24:f6:e4:c8:f6:61:02:7c:8d:
87:5d:60:30:8e:1c:51:da:aa:9d:e7:f5:93:73:b2:62:b0:d9:
a5:d0:ad:ef:87:64:cd:f1:9d:34:e5:50:7d:e3:2e:85:ca:6f:
8e:ee:31:70:d7:5e:4b:47:d0:2c:85:6f:48:e3:50:3c:a9:ba:
a8:87:ed:89:ee:46:3a:12:70:66:a7:06:a0:a3:cf:50:9e:16:
f6:89:e4:03:45:de:b9:de:12:eb:8f:3f:3a:b3:d8:f9:d3:04:
8d:81:17:16:d9:50:bf:10:ad:c3:61:70:ca:fc:2d:45:82:b6:
59:47:d0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:32:13 2026 by rpki-client