
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
File: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft (raw, json)
Hash identifier: 9s9FEsYiN0Lf83SiOD6mXqoJvWM+zQkKdTnKg/SM/7o=
Subject key identifier: C6:73:67:49:19:83:4B:FD:D4:24:91:3B:78:A9:E9:A4:27:C1:4F:33
Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2
Certificate issuer: /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
Certificate serial: 01B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
Manifest number: 01A2
Signing time: Sat 13 Jun 2026 04:14:28 +0000
Manifest this update: Sat 13 Jun 2026 04:14:27 +0000
Manifest next update: Sat 20 Jun 2026 04:14:27 +0000
Files and hashes: 1: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl (hash: JLSvfDwJDMCYjy03grpLWW8mKz9VjEBg4G9n28KkV5A=)
2: 99244E94FE0211EEB1F40344C4F9AE02.roa (hash: AhKlMEv2PuM9Bfvy73cb9Wj3F7xu3e3qXO027TlJaIs=)
3: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (hash: mVKVwUNodXC2dILmuSgM+YaGamOWVYaoYaJr0bNv0L4=)
4: 03BA6992ED7711EE9998FC11C4F9AE02.roa (hash: 4ltPjkJAsX+6JN5WYsYcJkqkB/QGduq8OB4qSY5kFTc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl
rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437 (0x1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE959, serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
Validity
Not Before: Jun 13 04:14:27 2026 GMT
Not After : Jun 20 04:14:27 2026 GMT
Subject: CN=6a2cd924-2ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:f0:08:e7:49:7f:ea:ab:30:71:81:4b:12:
59:bf:cb:bb:33:58:6c:93:06:55:a4:6b:3f:7c:b4:
06:8b:b9:44:fc:bf:ce:8d:80:36:7d:9f:9f:17:a6:
13:e8:ac:75:ba:23:2d:21:2e:82:36:be:77:3c:9b:
31:38:eb:90:e9:d2:19:2e:8c:42:a9:71:b0:7a:c1:
93:e3:97:a9:50:d3:5d:0b:dc:02:66:a7:fd:80:8f:
9a:02:9c:e7:48:b3:b9:c9:77:e2:38:c2:fd:e1:55:
3c:5e:60:01:1d:9d:5f:17:6b:bf:5b:bb:53:36:18:
0c:12:24:3c:f5:d5:70:e1:3b:8c:bc:ef:a0:6a:2c:
8e:6e:93:e3:46:ec:45:28:94:35:28:ef:2c:fd:64:
a0:a0:c1:01:34:7c:26:d4:fc:07:07:9f:59:4c:54:
5b:e6:b9:57:5a:b9:bc:04:c4:d3:22:14:14:1e:b5:
2e:ce:54:b1:e2:e2:ae:2e:19:28:6c:88:38:48:24:
e9:5c:6b:40:99:f1:4b:89:6b:4d:fd:32:33:42:55:
93:4b:b9:33:e3:ee:a1:73:fa:33:b9:49:e1:18:d8:
54:3f:52:37:85:86:e2:7c:95:36:a9:d4:f1:ac:ae:
43:eb:22:d8:57:2c:18:fc:1c:f1:0d:0d:f2:b0:32:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:73:67:49:19:83:4B:FD:D4:24:91:3B:78:A9:E9:A4:27:C1:4F:33
X509v3 Authority Key Identifier:
keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4e:f4:74:7f:cd:32:dc:dc:8d:df:34:33:e4:67:6a:b8:d1:
da:fd:53:dc:22:35:ff:8b:51:f7:db:d9:b7:8b:9d:4a:14:f1:
9c:9e:0b:57:cf:78:f5:16:0f:7b:69:3c:10:8f:cd:47:ff:a3:
f8:93:f1:c0:87:62:44:11:e7:83:d8:71:a0:77:41:08:a8:0f:
49:51:a1:22:4b:f7:e7:dd:62:ad:b1:2e:2c:f6:d7:89:cf:0c:
9e:af:fc:ef:41:39:0f:15:62:21:5d:ab:43:2d:ce:8c:66:27:
55:6b:8e:93:bb:1b:8e:0f:1f:25:ea:da:5a:9f:cd:e5:ce:80:
88:aa:ec:4c:87:bf:e3:51:74:58:1e:89:5a:dc:d9:2a:b9:c6:
5f:eb:a1:3b:41:c1:32:e4:f8:ca:1f:14:f5:62:97:78:f1:c3:
d1:ed:ed:5c:0a:66:41:ed:a0:3e:0c:b7:69:0c:fb:d7:c2:1c:
b7:f7:1d:76:55:b9:e1:6b:c1:e2:58:0d:ab:40:17:8b:fa:1a:
71:e9:0a:44:60:6d:ab:07:39:a7:f3:9b:c7:ce:10:23:e4:85:
0d:87:a0:bc:48:fb:ba:3a:e0:c9:83:77:d7:d5:3a:cb:e6:80:
8a:6d:85:c7:6f:44:dd:ac:7c:df:0b:48:c8:59:13:c8:fd:45:
17:bc:21:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:37:35 2026 by rpki-client