
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
File: 0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json)
Hash identifier: SNQpRIxlNaNvz3T3T6VsOu8UELxw0ZCnwEiPN2RL6p8=
Subject key identifier: 97:2A:95:28:E0:3D:27:5F:9F:84:72:68:65:5F:4B:F1:1E:D4:4E:92
Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA
Certificate issuer: /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
Certificate serial: 0BD5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
Manifest number: 0BCB
Signing time: Mon 12 Oct 2026 19:08:25 +0000
Manifest this update: Mon 12 Oct 2026 19:08:24 +0000
Manifest next update: Mon 19 Oct 2026 19:08:24 +0000
Files and hashes: 1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: /Vs1Hr/2HJ9Ry/pPw0922eqtMTO/Md6RR0NCG9m5aZ4=)
2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: Cslgx6TP1vwc2kxEUex+I7Q7tERor+Z4yAGOK7JvT0w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl
rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 16:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3029 (0xbd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
Validity
Not Before: Oct 12 19:08:24 2026 GMT
Not After : Oct 19 19:08:24 2026 GMT
Subject: CN=6acd3029-f552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9a:9a:d7:35:ad:76:99:6a:bc:d9:0f:84:cd:
99:81:74:6f:39:ca:46:89:7f:a8:12:59:87:37:cb:
3d:d6:e3:cf:0d:ab:68:c5:53:50:1c:6f:1f:db:00:
2a:75:b3:b2:26:52:73:00:f5:90:fd:c5:eb:6c:64:
68:5d:31:4e:07:7a:e0:7b:30:2a:04:13:f2:c1:24:
98:82:e5:26:0f:0f:a1:7f:8d:e6:84:6c:5f:0d:c0:
75:ac:e9:a2:71:9c:b7:c1:ae:05:ba:5d:ad:3c:89:
41:7e:a7:cc:5d:b0:cd:8b:96:56:5e:20:f6:8b:3d:
03:8e:90:a2:57:0e:5d:23:0c:67:7a:3f:c7:d6:42:
d8:40:e6:dc:28:5e:73:ef:8d:99:6f:23:42:49:59:
23:5c:42:a8:a1:10:e5:01:7c:e1:41:e4:eb:42:58:
0c:af:2f:2e:53:7b:43:64:1c:7a:4a:39:cf:81:b4:
e3:fc:d4:70:32:a2:fd:03:88:d4:7c:8e:bc:5a:5c:
d5:2d:45:ff:f4:e4:73:54:77:f4:96:c7:07:7c:56:
a8:8e:b5:f4:42:63:9e:b0:06:d9:47:ed:3f:36:1c:
49:68:6b:5b:a3:02:55:c4:f9:1f:5e:8a:ff:b6:e9:
ee:ff:32:22:8a:52:02:6d:c0:78:69:da:60:e9:33:
9d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2A:95:28:E0:3D:27:5F:9F:84:72:68:65:5F:4B:F1:1E:D4:4E:92
X509v3 Authority Key Identifier:
keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:34:2e:c5:e4:f7:18:d4:60:b9:eb:69:00:43:c4:63:88:ba:
36:f5:a0:63:12:5e:98:cc:aa:bc:5b:cc:b9:ca:3c:0e:71:73:
90:75:8e:ff:47:51:44:06:3b:9c:6f:f2:0f:e8:c2:6d:bb:97:
f0:2d:01:9a:72:4e:d2:18:b3:bb:8a:41:bd:f7:c4:c0:a9:39:
28:25:3a:eb:e7:10:48:be:f3:b3:08:c1:cd:4e:66:33:3d:1a:
86:89:49:d6:c6:9f:5e:2e:ac:07:e4:0c:12:1b:69:4d:14:69:
b0:bd:f6:cc:95:97:39:0b:06:31:f3:68:78:d5:86:db:4d:09:
99:6b:bb:34:95:d4:f0:91:47:9c:53:76:c3:14:8b:2a:a9:99:
6d:7d:fe:b5:d0:00:bb:31:c7:a5:d9:e9:2c:4c:e4:d7:65:ce:
b6:88:4e:14:b0:c7:d6:f5:39:1e:25:92:62:1d:47:6e:b9:ae:
00:cf:33:4d:c6:0d:4a:c7:19:06:a5:c8:d6:e2:69:3b:eb:43:
97:b9:16:93:5d:18:3d:88:02:b0:2d:2b:ab:73:20:fc:3d:c5:
73:39:cc:15:9e:34:20:42:84:71:b8:65:ad:0c:23:59:2f:c5:
32:a1:f3:c8:48:8b:98:9c:c6:82:02:91:1d:05:44:22:66:5e:
41:f7:4a:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDg3Q0YxMTAvBgNVBAUTKEQyRUMwNzkwQkM0RUJEMzQwN0M5NTA3NEU2QjU2QjQw
MDAzODEyREEwHhcNMjYxMDEyMTkwODI0WhcNMjYxMDE5MTkwODI0WjAYMRYwFAYD
VQQDEw02YWNkMzAyOS1mNTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7pqa1zWtdplqvNkPhM2ZgXRvOcpGiX+oElmHN8s91uPPDatoxVNQHG8f2wAq
dbOyJlJzAPWQ/cXrbGRoXTFOB3rgezAqBBPywSSYguUmDw+hf43mhGxfDcB1rOmi
cZy3wa4Ful2tPIlBfqfMXbDNi5ZWXiD2iz0DjpCiVw5dIwxnej/H1kLYQObcKF5z
742ZbyNCSVkjXEKooRDlAXzhQeTrQlgMry8uU3tDZBx6SjnPgbTj/NRwMqL9A4jU
fI68WlzVLUX/9ORzVHf0lscHfFaojrX0QmOesAbZR+0/NhxJaGtbowJVxPkfXor/
tunu/zIiilICbcB4adpg6TOdPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJcqlSjg
PSdfn4RyaGVfS/Ee1E6SMB8GA1UdIwQYMBaAFNLsB5C8Tr00B8lQdOa1a0AAOBLa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODdDRi9FNjg1QjEyQTRF
RDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZUUUh5VkIwNXJWclFBQTRF
dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzB1d0hrTHhPdlRRSHlWQjA1clZyUUFBNEV0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODdDRi9FNjg1QjEyQTRFRDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZU
UUh5VkIwNXJWclFBQTRFdG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMTQuxeT3GNRguetpAEPEY4i6NvWgYxJemMyqvFvMuco8DnFzkHWO/0dRRAY7
nG/yD+jCbbuX8C0BmnJO0hizu4pBvffEwKk5KCU66+cQSL7zswjBzU5mMz0aholJ
1safXi6sB+QMEhtpTRRpsL32zJWXOQsGMfNoeNWG200JmWu7NJXU8JFHnFN2wxSL
KqmZbX3+tdAAuzHHpdnpLEzk12XOtohOFLDH1vU5HiWSYh1HbrmuAM8zTcYNSscZ
BqXI1uJpO+tDl7kWk10YPYgCsC0rq3Mg/D3FcznMFZ40IEKEcbhlrQwjWS/FMqHz
yEiLmJzGggKRHQVEImZeQfdKJQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 04:27:55 2026 by rpki-client