
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
File: 0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json)
Hash identifier: ZZfJwcd3l6JKLWxY0qBRy78lF9iLtVizMJhDQkAAMN8=
Subject key identifier: 53:7B:8F:FB:63:57:BC:32:3F:F2:4F:94:D9:2C:46:F0:A8:0D:D2:48
Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA
Certificate issuer: /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
Certificate serial: 0B77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
Manifest number: 0B6E
Signing time: Thu 16 Apr 2026 19:04:43 +0000
Manifest this update: Thu 16 Apr 2026 19:04:42 +0000
Manifest next update: Thu 23 Apr 2026 19:04:42 +0000
Files and hashes: 1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: cINgSfKOW3jFadH14v35+iR9VLmSItXoeY3bWLATmqA=)
2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: Gix1doZT6HdqB6Rndr92+DwWhim28hlszYTEvtmj1Xc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl
rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2935 (0xb77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
Validity
Not Before: Apr 16 19:04:42 2026 GMT
Not After : Apr 23 19:04:42 2026 GMT
Subject: CN=69e132cb-465b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c9:16:64:2c:20:44:12:39:b4:60:e9:29:79:
31:be:6d:5c:e0:7d:69:e1:57:11:70:1e:2f:a5:ce:
d4:b4:36:25:fe:38:5b:7d:11:be:a0:48:e5:ab:6e:
23:41:17:4c:94:55:0b:ea:45:fa:a4:73:44:63:94:
ea:85:80:2e:50:d4:71:23:c9:1c:9e:83:ad:62:59:
74:54:28:8a:6d:94:1c:c8:09:96:a0:ad:ac:c9:0e:
be:18:9b:41:0b:3c:23:a0:f4:33:40:14:24:a4:d0:
95:96:63:7b:78:d7:ef:86:6c:e9:11:9c:b7:5d:b5:
42:f3:3f:86:28:10:0a:93:84:12:16:2a:3e:07:ad:
7e:c8:81:41:c9:80:c2:d1:72:b9:5f:50:ff:44:7a:
88:a6:ea:d8:4d:55:62:4c:c1:0a:af:15:58:1a:19:
4a:d9:9c:05:72:fa:c1:93:c8:a7:ad:f1:02:02:84:
9b:d7:0c:9a:30:61:6c:53:a7:c3:62:80:0a:51:aa:
08:42:81:b0:6f:1d:f3:45:14:bf:de:2d:50:cb:22:
7d:85:d4:93:c8:1d:77:ac:28:b2:ef:1d:4b:e3:43:
16:46:3e:00:fc:60:1d:86:d0:32:07:d3:33:57:68:
74:ae:57:1b:0e:5d:15:77:26:e5:66:b9:77:2c:8a:
67:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7B:8F:FB:63:57:BC:32:3F:F2:4F:94:D9:2C:46:F0:A8:0D:D2:48
X509v3 Authority Key Identifier:
keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:df:f4:2e:33:26:01:18:d4:15:51:dc:ad:6a:88:44:ab:36:
bd:c7:eb:88:bb:81:a5:d8:4b:7f:e5:1a:87:53:dd:81:fe:4f:
be:6c:a7:3f:0c:78:91:44:19:f3:33:2b:12:7a:4b:7c:68:e7:
52:30:40:da:a5:0b:35:b9:23:25:9e:7c:4f:ff:07:c0:80:43:
75:18:40:4a:a5:85:22:62:47:99:09:87:70:59:30:ce:4a:d1:
ad:dc:20:b5:f3:02:3b:57:52:aa:76:4d:35:46:00:0a:f2:7c:
3d:ae:fd:81:fa:3b:fd:ba:61:84:b0:03:37:68:05:2d:bc:f0:
73:16:46:75:e8:d8:9c:61:cd:da:2f:13:05:36:f5:f0:63:4e:
33:4e:1d:4a:fa:61:3a:17:8b:d8:50:23:60:79:cf:e5:10:eb:
91:77:45:c6:78:74:8f:12:0a:1e:72:d3:e7:0a:e2:3d:0d:bd:
18:e2:58:e6:04:c8:1f:ba:f0:d2:3d:34:b0:26:05:ba:f0:16:
4b:3e:9e:17:72:7f:da:af:bc:20:e6:d6:27:e5:47:e4:cc:46:
43:17:1e:a8:5b:1b:30:2b:06:5b:49:b7:db:fc:4b:71:a4:09:
cb:65:0f:e6:42:95:7a:1b:43:74:90:54:80:be:f6:cb:42:24:
49:46:f7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:10:41 2026 by rpki-client