
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
File: uwO40kR--BOjepWHdmoB9zWd10A.mft (raw, json)
Hash identifier: nPSt0xlD73Fq2ppM3yW3ydt1dIBTxrut5Qqx4iu1zHs=
Subject key identifier: 0B:46:F9:44:91:AB:74:5C:E2:A3:B1:59:5D:C9:33:FB:70:69:38:7D
Authority key identifier: BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
Certificate issuer: /CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Certificate serial: 0831
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
Manifest number: 080F
Signing time: Mon 02 Mar 2026 01:57:36 +0000
Manifest this update: Mon 02 Mar 2026 01:57:34 +0000
Manifest next update: Mon 09 Mar 2026 01:57:34 +0000
Files and hashes: 1: uwO40kR--BOjepWHdmoB9zWd10A.crl (hash: T6ZXNQkEoD42RbXHkRIEYz7E3n9br08CWAeG7M/RCv4=)
2: 991F1FE8183A11EBB9F78E80C4F9AE02.roa (hash: vUrlLBzvRZgdPiafwpoeUn6LJgEDG0OK7UZ8xYzoHN8=)
3: 33284BD019C311EBB9C1D063C4F9AE02.roa (hash: zMJf67HULdpkelANxhMxOYnFH7dtgQ+KGGCgoXkBTeo=)
4: 99DF3B20183A11EBB9F78E80C4F9AE02.roa (hash: Y87vJrEMwpTYF1MpNbBuSySnMorYmZ0bdZyt06DwDqI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl
rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:57:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2097 (0x831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2779, serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Validity
Not Before: Mar 2 01:57:34 2026 GMT
Not After : Mar 9 01:57:34 2026 GMT
Subject: CN=69a4ee90-82c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f6:0b:c6:22:c1:4d:82:7c:d7:d0:d7:2b:35:
5d:60:65:44:02:7b:f4:02:cc:f3:7c:29:67:7a:77:
51:c3:ea:ac:1a:0b:50:d8:32:43:ed:24:f7:2c:70:
43:e7:6f:78:4d:a1:41:08:dd:3a:6a:b3:05:ab:df:
92:c9:fe:ca:e3:b1:24:ed:66:8f:6f:b7:33:02:88:
a6:7f:32:b5:60:71:cc:17:3f:8b:11:c7:d3:0d:df:
b5:f7:da:a7:5c:f0:18:ea:ee:c2:86:1a:88:cf:90:
b6:f9:69:da:1d:a9:34:35:03:d0:96:1e:d3:23:18:
1a:09:a9:0d:ef:e1:c2:98:bd:6c:fb:a0:5a:65:38:
e2:0a:2d:50:da:ec:33:ad:08:e7:a4:9b:2d:52:b0:
10:c4:99:11:51:b7:23:30:73:ba:cf:dd:3f:e7:c3:
8f:d6:d0:53:77:f1:f3:15:14:8e:4f:7e:f5:00:99:
08:7a:d0:f2:c7:97:49:61:7c:f0:bc:76:1f:8b:f9:
cf:2e:76:cf:c8:da:21:59:17:a6:ba:a1:a4:51:08:
81:06:ae:69:98:84:2f:84:86:fd:05:5c:da:78:87:
0f:57:cf:52:00:25:0c:24:04:f6:0c:ea:59:a3:6f:
79:e6:c1:c1:6a:a8:b1:45:06:c1:e2:6c:6d:19:e0:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:46:F9:44:91:AB:74:5C:E2:A3:B1:59:5D:C9:33:FB:70:69:38:7D
X509v3 Authority Key Identifier:
keyid:BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:a3:4e:6e:31:9c:55:a5:18:29:a1:c2:8b:33:fd:bc:46:3f:
92:30:7e:ca:2c:bb:4f:16:12:06:ad:03:b1:04:af:a5:b7:49:
fc:6e:bd:30:ed:bd:a7:99:88:7f:5c:47:a9:e3:7b:18:45:ac:
50:f4:be:3e:5b:69:65:58:3b:21:3e:43:07:2c:6e:57:cf:b7:
af:dc:d2:f2:7a:10:ba:1f:0c:bb:69:90:b7:1d:f9:7a:8f:49:
ff:69:df:26:2e:f5:fd:93:0d:7c:a2:31:ce:d6:e5:03:0d:66:
f2:8f:0e:97:6d:1e:64:ed:26:fd:f7:1a:6d:cc:da:b6:0e:e8:
99:42:5b:1d:e0:9b:a3:ab:97:27:01:90:f2:7b:2c:10:46:1a:
db:64:41:c4:34:77:13:f4:fd:5d:bb:a8:f7:47:7a:79:8a:41:
cd:05:11:15:eb:c1:fb:d7:e6:86:28:a8:a8:67:2c:b0:d9:ed:
44:ed:be:d4:fd:fa:3b:27:fd:09:e8:24:71:e7:79:4c:4e:ec:
64:89:e8:b9:f1:5b:60:47:8b:a9:b9:63:ca:04:ce:46:85:55:
15:33:71:87:61:81:5f:52:75:69:3a:ac:f3:68:0f:c4:d6:ec:
ae:ee:03:30:1b:05:e2:ca:5f:e7:84:e1:6c:04:8c:57:78:20:
44:cf:96:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI3NzkxMTAvBgNVBAUTKEJCMDNCOEQyNDQ3RUY4MTNBMzdBOTU4Nzc2NkEwMUY3
MzU5REQ3NDAwHhcNMjYwMzAyMDE1NzM0WhcNMjYwMzA5MDE1NzM0WjAYMRYwFAYD
VQQDEw02OWE0ZWU5MC04MmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7fYLxiLBTYJ819DXKzVdYGVEAnv0AszzfClnendRw+qsGgtQ2DJD7ST3LHBD
5294TaFBCN06arMFq9+Syf7K47Ek7WaPb7czAoimfzK1YHHMFz+LEcfTDd+199qn
XPAY6u7ChhqIz5C2+WnaHak0NQPQlh7TIxgaCakN7+HCmL1s+6BaZTjiCi1Q2uwz
rQjnpJstUrAQxJkRUbcjMHO6z90/58OP1tBTd/HzFRSOT371AJkIetDyx5dJYXzw
vHYfi/nPLnbPyNohWRemuqGkUQiBBq5pmIQvhIb9BVzaeIcPV89SACUMJAT2DOpZ
o2955sHBaqixRQbB4mxtGeBPpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAtG+USR
q3Rc4qOxWV3JM/twaTh9MB8GA1UdIwQYMBaAFLsDuNJEfvgTo3qVh3ZqAfc1nddA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjc3OS84OTAyNDk5NDE4
MzcxMUVCODA2NEIwN0FDNEY5QUUwMi91d080MGtSLS1CT2plcFdIZG1vQjl6V2Qx
MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V3TzQwa1ItLUJPamVwV0hkbW9COXpXZDEwQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Mjc3OS84OTAyNDk5NDE4MzcxMUVCODA2NEIwN0FDNEY5QUUwMi91d080MGtSLS1C
T2plcFdIZG1vQjl6V2QxMEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuqNObjGcVaUYKaHCizP9vEY/kjB+yiy7TxYSBq0DsQSvpbdJ/G69MO29p5mI
f1xHqeN7GEWsUPS+PltpZVg7IT5DByxuV8+3r9zS8noQuh8Mu2mQtx35eo9J/2nf
Ji71/ZMNfKIxztblAw1m8o8Ol20eZO0m/fcabczatg7omUJbHeCbo6uXJwGQ8nss
EEYa22RBxDR3E/T9Xbuo90d6eYpBzQURFevB+9fmhiioqGcssNntRO2+1P36Oyf9
Cegkced5TE7sZInoufFbYEeLqbljygTORoVVFTNxh2GBX1J1aTqs82gPxNbsru4D
MBsF4spf54ThbASMV3ggRM+WHw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:46 2026 by rpki-client