
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
File: uOpx0E7INugYCHPJ6dQM0uNVNwE.mft (raw, json)
Hash identifier: P+YVyoW3QpVtfSyjxy2KYGRnwKlJ3uqEav/Mdh9TwAA=
Subject key identifier: 33:30:1D:FE:BB:58:86:8F:B2:73:CB:ED:E6:3D:AF:C3:77:B9:17:F7
Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01
Certificate issuer: /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701
Certificate serial: 02C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
Manifest number: 02AA
Signing time: Sat 13 Jun 2026 01:34:36 +0000
Manifest this update: Sat 13 Jun 2026 01:34:35 +0000
Manifest next update: Sat 20 Jun 2026 01:34:35 +0000
Files and hashes: 1: uOpx0E7INugYCHPJ6dQM0uNVNwE.crl (hash: wonJimSKPLprVJYZqVEjhyTKKjjPFpVNpn86gvKzDEs=)
2: C9E35E848A8711ED98572D26C4F9AE02.roa (hash: aDMrutb8ahCLuSdqi0ZTz55krjn044b5ILQcHz+wyqU=)
3: CC74271E8A8711ED98572D26C4F9AE02.roa (hash: 9zvvJ3Vq0uNzCI0kJNxBKmlsAUPopTCv71aHb/f6J2A=)
4: 4D54B546616411F0B65D5F70C4F9AE02.roa (hash: rFjIKF8O7uGzzC+ooErS3CkVvSPrki+X7Yn45I82Flw=)
5: 82B99B1C6B9F11F09CD3A334C4F9AE02.roa (hash: PZ66UMp5duF5Xm5XD0SlInLynDFoHk/dCmXT0Ll5x3M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl
rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 712 (0x2c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCF10, serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701
Validity
Not Before: Jun 13 01:34:35 2026 GMT
Not After : Jun 20 01:34:35 2026 GMT
Subject: CN=6a2cb3ab-3543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:70:d9:51:8b:b7:e3:50:81:dc:7b:62:ad:
dd:3b:b7:4f:1b:55:c9:bc:ba:b6:4d:16:81:55:5e:
7a:99:60:a6:46:28:75:5c:68:b9:b8:97:df:e9:df:
86:94:65:81:3e:07:24:bf:e5:be:01:e1:ed:d8:52:
0d:f7:bd:7b:dd:3d:d0:86:70:fc:13:6c:a7:49:da:
a8:ec:79:b1:ce:32:b8:7d:30:49:ee:2c:89:75:9a:
e7:94:cf:72:49:d7:09:da:57:b1:41:18:11:c8:4d:
8f:7b:7c:96:5c:a7:b4:af:f9:27:dc:08:fe:f8:83:
77:0f:46:98:1a:4f:9e:4f:2f:24:8d:3b:36:97:29:
5b:95:b2:3e:67:bb:68:ac:04:05:f1:49:82:26:71:
d7:b8:79:d9:06:17:b8:ce:3c:72:10:65:0e:af:23:
18:be:6c:b6:6d:7e:6b:90:1a:1a:ae:4d:7f:15:e9:
4f:24:1f:5f:cf:d3:82:b3:3c:c6:4b:dd:79:75:2f:
3c:b8:d8:d2:9a:b3:d6:56:6f:7d:8a:a8:7c:1e:42:
4d:e9:19:96:92:e5:39:f8:84:5d:6a:a5:29:d9:39:
3f:45:d8:f6:a0:c6:72:7e:f6:41:d8:94:4f:6d:5f:
84:8b:fe:7e:9c:dd:7e:bb:3f:6b:8f:ab:3d:12:46:
b9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:30:1D:FE:BB:58:86:8F:B2:73:CB:ED:E6:3D:AF:C3:77:B9:17:F7
X509v3 Authority Key Identifier:
keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:4a:83:a3:4d:2b:e0:1c:75:79:d6:ba:3e:06:e9:4f:a6:d8:
6b:07:b6:b2:e8:76:23:5d:1d:d2:42:75:20:89:0e:ec:72:bc:
f2:d0:3e:0a:42:58:90:e1:84:df:71:f5:75:3c:96:b8:1c:39:
c2:bb:79:58:d9:7e:54:2e:b6:d6:32:6a:19:99:2e:50:a4:1b:
4a:74:e0:55:72:e7:43:a9:d3:3d:9d:6a:78:d9:37:4e:17:cd:
41:06:e1:a7:ce:d2:4e:cf:82:ae:e1:10:64:1d:e5:4f:af:7d:
86:9e:a9:0d:57:d2:01:e2:81:3f:dc:83:92:2a:42:25:f1:73:
cb:5b:4a:3e:88:7e:cc:bc:97:ff:7c:d0:9a:b4:05:6a:f0:b8:
ad:62:ec:f9:35:d2:c5:43:a9:e5:cf:ff:13:73:a7:fc:95:78:
5c:5b:98:7b:80:79:6b:96:ad:b6:97:2c:0b:17:45:90:02:d9:
07:b6:a9:20:66:dd:11:49:86:3c:72:14:d2:0f:8f:40:50:f8:
03:3a:3e:24:6b:ed:b7:f3:04:2a:e2:0f:d6:24:3f:f8:6d:ce:
de:8a:94:ff:35:e1:2f:fd:7a:23:74:57:5f:de:1f:7b:c1:16:
6d:cd:a0:13:f5:e5:61:02:7e:f4:40:2d:e0:ef:07:31:1b:7b:
f2:6f:0d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:04:24 2026 by rpki-client