
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
File: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft (raw, json)
Hash identifier: /qomnggk0f/6E6ehnpJ3wA6LcCibDijAYHijQbbLxN4=
Subject key identifier: C1:E9:1C:75:03:B1:22:10:31:9F:90:59:6F:F2:F1:9B:3C:6F:3F:C8
Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2
Certificate issuer: /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
Certificate serial: 01EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
Manifest number: 01D7
Signing time: Fri 25 Sep 2026 03:43:32 +0000
Manifest this update: Fri 25 Sep 2026 03:43:31 +0000
Manifest next update: Fri 02 Oct 2026 03:43:31 +0000
Files and hashes: 1: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl (hash: FO5Mu9ed6EvjKdIST9nO4iMUvLk/oUF5r4CGu884F3Q=)
2: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (hash: mVKVwUNodXC2dILmuSgM+YaGamOWVYaoYaJr0bNv0L4=)
3: 03BA6992ED7711EE9998FC11C4F9AE02.roa (hash: 4ltPjkJAsX+6JN5WYsYcJkqkB/QGduq8OB4qSY5kFTc=)
4: 99244E94FE0211EEB1F40344C4F9AE02.roa (hash: AhKlMEv2PuM9Bfvy73cb9Wj3F7xu3e3qXO027TlJaIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl
rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490 (0x1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE959, serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
Validity
Not Before: Sep 25 03:43:31 2026 GMT
Not After : Oct 2 03:43:31 2026 GMT
Subject: CN=6ab5ede3-6cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:df:9d:90:b8:d2:82:23:0e:36:7c:e1:5c:
76:34:ca:4e:17:36:b9:f2:71:39:0c:a9:7c:78:a5:
9b:7b:2b:f4:71:f1:9d:2a:3b:20:3c:b6:05:81:49:
77:a4:12:88:24:ae:f9:bf:17:7d:8b:ec:d3:56:85:
9c:db:73:3a:29:9e:51:d9:79:c0:f2:28:74:a6:e0:
d3:69:2f:e5:e9:25:0e:21:e6:4c:e9:eb:e7:25:ef:
39:35:1a:43:48:51:b9:ff:5e:73:3a:6b:c1:c5:7c:
72:84:ac:da:5a:bd:8d:ee:43:8e:8e:99:b8:65:d3:
57:f8:5a:1a:cd:95:80:fe:2c:01:ed:d0:20:30:77:
2e:34:3d:96:f5:ae:67:d6:14:9d:2c:ba:cc:5b:37:
51:51:19:ef:f4:11:78:68:19:2d:d2:4e:45:aa:51:
34:f4:a1:2e:28:56:db:cb:61:88:d8:81:58:a9:39:
d0:c2:9f:b6:e2:f4:8e:b6:7d:f3:11:be:13:10:d2:
a7:2e:88:8e:c1:6b:01:20:4c:3d:43:86:97:74:99:
d6:3f:a8:b3:04:65:02:80:06:80:00:be:10:5d:22:
cc:42:c0:9b:a5:2f:2d:4e:b2:1f:77:a6:a7:ab:c6:
6d:5c:cf:cf:6e:34:53:98:cc:d9:43:a3:d0:9b:ac:
5a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E9:1C:75:03:B1:22:10:31:9F:90:59:6F:F2:F1:9B:3C:6F:3F:C8
X509v3 Authority Key Identifier:
keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:b9:9c:f7:68:68:62:a2:bc:fd:68:e4:0b:ab:d0:aa:fa:d8:
02:77:0f:56:45:2c:af:fc:66:ba:c1:a6:ff:89:69:68:30:7a:
67:80:8e:d1:ef:46:da:59:85:6a:6b:0d:e9:c9:51:1c:d8:f8:
7f:7f:cb:9d:cc:7d:5a:d2:ea:5f:81:f9:82:01:5c:61:7a:d4:
07:d6:25:9f:12:76:7f:be:a6:70:44:37:3d:4b:f7:e3:1e:9f:
9c:c7:67:3f:23:6d:d9:5b:b1:bb:f3:9d:5d:2c:47:8c:10:0f:
8f:bf:fa:85:ea:b9:7f:74:b5:01:4a:6f:9b:1a:51:82:54:cd:
34:5a:c7:72:d6:9a:cf:64:1d:ba:a4:ac:8b:6a:53:8a:f7:ff:
7c:69:51:ce:c4:ed:73:5a:a4:ea:79:1d:73:7d:17:35:b0:0d:
07:6f:89:da:2a:3b:9d:ee:6c:f8:20:03:f8:07:59:72:2c:d3:
89:3b:2a:7f:db:4f:8a:8e:b0:ad:e3:36:66:28:b7:63:15:eb:
6e:a8:84:ef:47:3e:71:53:87:3a:5a:b1:22:f2:d9:fc:f7:7f:
1f:23:74:07:76:99:2a:40:dc:99:32:ca:51:6c:a9:ba:27:16:
a9:fa:94:c7:7b:76:49:46:6d:8a:0b:98:ee:b7:26:2c:b0:07:
4b:b6:9a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:34:29 2026 by rpki-client