
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
File: uwO40kR--BOjepWHdmoB9zWd10A.mft (raw, json)
Hash identifier: F7TXNek3dnTFelfjls9/e+8QX5n7dee29zGXT5HdO9Q=
Subject key identifier: 1E:60:BB:BA:B1:55:C3:00:06:CF:DA:DE:1C:82:E6:F8:ED:D5:86:F8
Authority key identifier: BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
Certificate issuer: /CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Certificate serial: 0852
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
Manifest number: 082A
Signing time: Thu 16 Apr 2026 20:59:18 +0000
Manifest this update: Thu 16 Apr 2026 20:59:18 +0000
Manifest next update: Thu 23 Apr 2026 20:59:18 +0000
Files and hashes: 1: uwO40kR--BOjepWHdmoB9zWd10A.crl (hash: PdQtH+4AP9y5qLCL0stbXYWY0zmuHASR4Koux3srgNg=)
2: 33284BD019C311EBB9C1D063C4F9AE02.roa (hash: S+/631V5EbLVHMkrVq986tOSiufFr1O8QILyGk6Ead4=)
3: 991F1FE8183A11EBB9F78E80C4F9AE02.roa (hash: azgOtcYeMQ+jRphVpaVCAHBgs8PE9LLzlZ+oLtFAePc=)
4: 99DF3B20183A11EBB9F78E80C4F9AE02.roa (hash: IQn111u6z6qLHojmECWDC2x1tW//DdSaFa0X28b5D0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl
rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2130 (0x852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2779, serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Validity
Not Before: Apr 16 20:59:18 2026 GMT
Not After : Apr 23 20:59:18 2026 GMT
Subject: CN=69e14da6-a038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:b2:c2:b5:71:ae:50:b8:aa:8f:1f:68:d3:
44:44:35:8f:e9:43:30:d3:77:50:53:63:30:eb:7d:
b3:aa:69:b6:ca:c8:25:1f:bb:39:94:f1:13:43:32:
a3:d2:21:e1:6f:8a:81:1c:1d:f5:0f:ee:99:bb:3d:
93:c3:cc:d9:4b:ce:31:de:25:29:98:82:f2:0c:b4:
d1:34:dc:15:99:a5:dc:d9:cb:69:3b:51:28:40:0b:
04:83:fc:e8:0c:19:b9:1c:56:79:8d:e9:5c:8e:1d:
4d:f8:6a:b3:39:08:81:ae:4c:62:80:a2:4c:3e:5f:
55:40:91:77:ae:c0:85:f6:42:19:2b:4d:b5:c4:a5:
4e:75:f3:a7:33:1a:9d:e4:7b:9e:cd:51:c9:03:74:
7b:05:12:9d:32:a6:2b:96:7b:28:2e:47:d4:32:67:
a5:c4:5f:a2:38:c7:1c:b4:22:f0:26:26:04:65:44:
67:15:29:06:93:ad:82:97:e4:fc:61:b2:72:c9:98:
d5:ad:a8:08:5e:e3:9b:84:cc:e1:be:32:85:ea:ef:
c5:9e:22:cd:ac:37:db:88:b6:e4:c8:2a:9e:07:92:
8d:1e:67:0e:64:f7:95:d2:a4:79:14:2a:eb:5c:fd:
e5:2f:d4:4e:2e:a8:1e:fb:15:05:4f:f4:e9:d3:18:
02:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:60:BB:BA:B1:55:C3:00:06:CF:DA:DE:1C:82:E6:F8:ED:D5:86:F8
X509v3 Authority Key Identifier:
keyid:BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:9d:86:28:69:79:b2:26:6e:26:8a:3e:66:f9:c5:b5:5a:14:
d5:8b:c8:d4:ed:99:d7:95:77:78:79:a5:d9:32:76:67:cd:01:
ee:77:f1:32:72:6a:b1:ab:fd:5d:4b:07:3f:fa:15:31:c9:f5:
10:1a:09:c0:16:5c:85:6a:68:6a:4b:ba:b9:84:d1:22:fc:e5:
e4:e2:e1:72:ff:f5:0b:b4:40:d8:c3:21:07:45:b4:de:d2:33:
9c:34:a7:5d:73:af:2d:1d:34:0c:63:dc:63:94:49:b9:16:d6:
6b:83:8a:2a:cc:fa:52:a9:d0:f8:e4:a2:de:04:fb:15:e3:36:
e9:ca:fa:41:4b:78:74:b9:73:fa:49:ab:98:df:a0:b4:ec:31:
ab:20:70:12:0d:f8:b4:17:63:36:58:d2:06:5a:61:11:d5:d0:
c4:01:c8:f5:3d:1a:65:87:50:ce:43:e7:01:6a:1b:c9:95:71:
0e:24:74:95:b9:3a:1f:09:cc:fb:ef:6b:82:f3:5b:6b:3c:0c:
6f:51:ba:91:ac:52:d5:4e:03:af:b1:58:3c:b4:76:b7:e6:8c:
aa:63:79:ee:bd:1f:76:b5:53:c5:17:43:25:9d:0c:8b:95:53:
7b:75:c0:76:95:7d:7c:e7:d5:20:6e:be:54:11:63:eb:8b:da:
4c:c6:d8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:13:12 2026 by rpki-client