
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft
File: u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft (raw, json)
Hash identifier: e8PaH/PCQDmmYFblsBsAsevNK2frqv3qqa1pmydHE2k=
Subject key identifier: A0:7E:6D:CC:7D:F2:7D:3E:04:A8:95:17:DA:EF:BA:0D:74:38:4B:D2
Authority key identifier: BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0
Certificate issuer: /CN=A91CEE85/serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft
Manifest number: 0136
Signing time: Mon 02 Mar 2026 02:05:18 +0000
Manifest this update: Mon 02 Mar 2026 02:05:17 +0000
Manifest next update: Mon 09 Mar 2026 02:05:17 +0000
Files and hashes: 1: u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl (hash: rH0Ph2grWjHiuGoGZsOqar6ap7RlpB4Yg9Uq3Zqilqo=)
2: 4D189DD4728311EFA9CECE43C4F9AE02.roa (hash: kAqPZtki24rgmBDLYUdp+jfh5na7uf15IRdmD6VOLXc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl
rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:05:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEE85, serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0
Validity
Not Before: Mar 2 02:05:17 2026 GMT
Not After : Mar 9 02:05:17 2026 GMT
Subject: CN=69a4f05e-9729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:1b:8c:c5:c2:a6:7a:3d:cf:3b:7e:bb:52:
67:2f:18:9e:6d:1b:cc:0b:e8:55:1a:ea:ee:29:35:
11:63:fe:60:fa:1d:ea:29:36:72:a2:ab:4b:fc:ec:
07:0b:12:fe:53:32:25:0b:e0:69:9e:05:21:c3:34:
25:b7:16:a6:0c:01:81:54:06:b4:5e:9a:31:c3:3c:
0c:07:7a:be:15:30:04:4b:62:c2:39:9f:51:4a:f0:
10:07:ea:65:09:11:3c:65:23:6e:92:f1:3f:42:33:
17:d8:77:71:a8:2a:86:c0:e8:77:b5:9d:64:1c:6a:
b3:25:72:e1:88:21:9a:a2:14:9b:4e:5c:18:fe:21:
d7:c1:9e:e4:8a:c5:6b:cf:51:fb:78:dc:37:e1:a5:
c2:be:27:b5:0a:c0:86:2f:6b:4f:f5:c9:52:16:3c:
13:94:f5:28:03:b8:b4:8e:15:6f:de:81:49:67:14:
80:11:65:97:05:4a:33:9b:31:65:6a:cb:d1:cf:76:
51:54:84:35:fc:bc:ee:42:f7:56:11:8c:42:97:0f:
9f:7e:56:f2:48:c9:4f:4a:d6:b7:d1:b0:32:20:c2:
70:5f:9e:62:2e:be:45:37:22:71:f1:46:cc:3a:0b:
56:d9:fa:2d:f1:86:f6:a8:a4:5b:ca:44:aa:05:0d:
d7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7E:6D:CC:7D:F2:7D:3E:04:A8:95:17:DA:EF:BA:0D:74:38:4B:D2
X509v3 Authority Key Identifier:
keyid:BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ca:e9:bc:ee:fe:6d:32:bb:dd:70:17:cd:40:03:c1:47:e7:
ba:ec:6b:92:ce:c1:8f:04:4e:1b:f5:19:81:42:ca:7a:60:78:
4f:6f:3a:a1:53:e8:7a:d1:56:28:e5:2b:8e:e1:0e:bb:61:0d:
6a:d7:54:26:43:53:cc:64:a2:d3:c2:e7:c4:94:5c:fb:a2:3f:
df:c7:7e:ba:d9:d2:73:df:c5:4d:75:6a:11:34:cc:ec:c7:e6:
c0:89:af:b8:0a:52:ad:81:bd:fa:4d:bf:c3:b7:0d:4e:de:da:
09:97:d2:0c:9f:dc:24:32:15:34:46:3c:43:f8:ec:27:e8:b5:
db:68:d6:79:9c:7e:50:a2:3e:4f:6a:9a:19:86:52:82:05:83:
8f:3c:65:60:86:e2:f2:b4:33:8f:dc:c4:99:29:dc:4e:d4:40:
c2:b4:96:c6:66:56:c2:35:eb:fb:e5:e7:6c:e2:1f:52:7b:e9:
ec:45:96:2b:90:78:ac:77:9e:e8:ff:92:69:d9:dd:c1:72:8a:
12:03:c5:2f:c3:24:f5:6f:c3:d8:9c:f5:b0:4d:6d:5a:02:d3:
e6:47:da:c4:01:18:30:cf:a3:5a:b0:10:35:2d:6a:eb:d3:86:
3c:8b:4b:0d:14:18:2d:0e:ff:05:39:fb:bd:58:7b:23:b6:49:
6f:e6:67:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:31:46 2026 by rpki-client