
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
File: uwO40kR--BOjepWHdmoB9zWd10A.mft (raw, json)
Hash identifier: NeC+a1ncpEe90AmQceL8KRQDXqWYQJwg2PjTAw8vyUM=
Subject key identifier: 9A:16:80:5C:9F:1D:E1:74:F6:FB:90:4D:D3:F0:0B:D4:99:1C:B1:49
Authority key identifier: BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
Certificate issuer: /CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Certificate serial: 0886
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
Manifest number: 085E
Signing time: Tue 28 Jul 2026 21:22:57 +0000
Manifest this update: Tue 28 Jul 2026 21:22:56 +0000
Manifest next update: Tue 04 Aug 2026 21:22:56 +0000
Files and hashes: 1: uwO40kR--BOjepWHdmoB9zWd10A.crl (hash: cd0wlmFVjBv7A656r6pjFbR0BTHHqvfXDh132slmQ28=)
2: 99DF3B20183A11EBB9F78E80C4F9AE02.roa (hash: IQn111u6z6qLHojmECWDC2x1tW//DdSaFa0X28b5D0o=)
3: 991F1FE8183A11EBB9F78E80C4F9AE02.roa (hash: azgOtcYeMQ+jRphVpaVCAHBgs8PE9LLzlZ+oLtFAePc=)
4: 33284BD019C311EBB9C1D063C4F9AE02.roa (hash: S+/631V5EbLVHMkrVq986tOSiufFr1O8QILyGk6Ead4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl
rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2182 (0x886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2779, serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Validity
Not Before: Jul 28 21:22:56 2026 GMT
Not After : Aug 4 21:22:56 2026 GMT
Subject: CN=6a691db0-e84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ed:a5:fa:81:11:50:9b:00:2d:1a:e7:00:85:
a9:b3:5f:3b:bb:48:97:73:49:25:bb:82:28:62:e7:
d1:de:9b:c8:14:82:2e:5f:53:c2:bf:d7:90:f0:11:
2b:20:d7:f6:ec:bc:48:ad:55:3d:52:c8:f9:02:8a:
e1:6e:d0:45:96:9d:e7:7f:04:10:09:4a:cd:8c:d5:
17:5e:bb:2d:9b:7b:21:5c:a4:65:90:c2:65:a5:a2:
97:60:6f:13:d2:e0:f9:3e:99:a3:ca:93:9e:9b:fa:
c4:17:58:93:2b:c2:59:99:8f:78:48:cb:6d:7c:3d:
09:2a:7b:d5:07:39:73:58:ed:90:1a:87:ae:8b:6d:
3f:a8:ee:84:74:76:1f:79:39:02:78:c3:92:d8:8a:
02:b0:bb:05:e5:17:91:08:7c:9e:3d:1a:f2:01:fc:
c2:da:bc:f2:77:7c:51:23:92:d6:39:06:12:fc:ec:
f6:d8:01:ef:17:31:4a:a1:19:2d:b1:8b:3d:7b:04:
59:ee:d5:96:49:e3:e0:e2:72:c3:9f:22:23:35:2b:
fc:2e:ae:14:a3:78:ae:4f:46:ad:29:67:e0:7c:79:
bf:81:46:37:a5:8c:0f:c0:ff:eb:de:c2:29:db:bf:
b3:95:e0:cd:58:40:0a:80:90:76:c0:9b:e7:46:75:
be:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:16:80:5C:9F:1D:E1:74:F6:FB:90:4D:D3:F0:0B:D4:99:1C:B1:49
X509v3 Authority Key Identifier:
keyid:BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:92:92:c7:65:ef:24:6c:64:ad:b4:bd:e0:ab:ba:75:4c:4c:
2d:02:9d:a9:e6:da:05:1d:88:af:2d:4e:67:ea:82:c3:d9:1e:
1f:6c:5f:a3:6f:5b:3f:7f:ec:74:6e:0a:a3:d4:04:4d:cb:a8:
be:a7:83:45:d2:e7:b5:9a:47:bc:2c:2a:0e:37:be:7e:84:99:
3b:e1:fb:6b:6f:48:a5:f3:09:a9:f1:3d:24:ac:14:d1:65:93:
e4:ac:01:af:1e:ef:7a:9f:5b:51:bf:76:23:4b:1d:7a:1f:5d:
c4:ca:05:8f:ca:d1:77:a8:6a:88:56:8a:96:a4:ef:bc:cc:8a:
3a:61:0d:91:f9:56:7a:8b:73:6d:f1:69:d7:7d:e2:0e:42:0f:
25:f5:bc:ba:5c:7f:1f:d9:1a:a1:70:bb:fd:be:68:6a:a4:e9:
e8:90:1c:6e:98:17:3c:e5:22:de:fc:5a:4f:ac:b0:cb:7a:e1:
5b:7e:ab:8a:20:b7:dc:88:56:cc:db:95:0f:68:18:4f:eb:c4:
61:66:43:31:49:b5:7e:41:fe:9e:57:63:25:af:43:3f:6d:4f:
2a:2c:c2:d9:2d:b9:ef:a8:9f:4c:27:7e:c7:98:5b:2c:09:9d:
d2:d1:cc:55:9f:ce:0a:2d:22:56:a8:d7:6a:57:a1:35:2a:0b:
9d:24:2b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:32:36 2026 by rpki-client