
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.mft
File: UEMacUvIutzoUZ5LmRR-FR7fd5c.mft (raw, json)
Hash identifier: RnrzBKyTZilqt5x2QxQXor7vlM/NG48dUyY9tu7JxZk=
Subject key identifier: D6:ED:03:BE:6A:A0:E4:87:D8:11:37:3A:33:4C:90:BF:74:50:47:AE
Authority key identifier: 50:43:1A:71:4B:C8:BA:DC:E8:51:9E:4B:99:14:7E:15:1E:DF:77:97
Certificate issuer: /CN=A91DA289/serialNumber=50431A714BC8BADCE8519E4B99147E151EDF7797
Certificate serial: 0722
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UEMacUvIutzoUZ5LmRR-FR7fd5c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.mft
Manifest number: 071A
Signing time: Sun 20 Sep 2026 21:57:25 +0000
Manifest this update: Sun 20 Sep 2026 21:57:25 +0000
Manifest next update: Sun 27 Sep 2026 21:57:25 +0000
Files and hashes: 1: UEMacUvIutzoUZ5LmRR-FR7fd5c.crl (hash: QyW4cT8oMRXVu3EwnR7MKGKVo4v6FHOFvjPwJ2yZW5I=)
2: 0BE0F63C9CBB11EBA4731E19C4F9AE02.roa (hash: 7vdJyHXGC2GsKIXAZ6ng7RW8x3H+npu3uVHt+RP/wz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.crl
rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UEMacUvIutzoUZ5LmRR-FR7fd5c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1826 (0x722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA289, serialNumber=50431A714BC8BADCE8519E4B99147E151EDF7797
Validity
Not Before: Sep 20 21:57:25 2026 GMT
Not After : Sep 27 21:57:25 2026 GMT
Subject: CN=6ab056c5-6498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:46:b9:ad:28:e4:d8:8a:f2:56:5a:b1:4f:
fe:48:fc:c3:e6:35:28:bf:68:1d:16:5a:33:16:1e:
d5:57:3d:11:8c:47:0c:bf:91:e5:95:55:b4:dc:6d:
ea:5e:8a:98:4c:2c:cb:d4:05:c0:4d:03:18:b4:d4:
1f:5c:9e:ca:e6:e8:1a:61:e4:de:25:fe:6a:51:c3:
56:bc:55:6b:36:10:d3:0b:84:0e:96:fa:88:ba:a2:
ca:4e:44:33:e6:d6:0a:6f:c9:6d:c8:bd:76:ec:c5:
04:08:c5:00:2a:45:71:c2:45:86:67:ec:41:73:03:
e4:22:5a:ef:cd:24:68:4d:78:73:72:d6:f7:db:0f:
58:d4:fa:9d:09:9a:1b:64:3b:88:b6:f6:fa:1a:29:
7b:3e:62:b2:14:20:0b:74:8a:46:fd:1a:76:25:f1:
e3:d7:58:2c:7d:8d:48:e3:5e:eb:3e:43:6f:76:3d:
2c:89:69:dd:ec:d5:e1:47:c0:f6:1d:91:0e:d5:88:
57:0c:93:2f:e0:ec:28:e3:6d:44:57:cb:6e:3d:22:
d0:18:e5:e8:df:94:e8:1f:c0:43:0e:7d:46:f1:a8:
78:14:fb:cd:46:8a:80:51:c2:a2:8e:7c:4a:bf:f6:
2b:28:c4:b7:23:d8:16:5b:46:62:5e:9b:7f:24:9f:
9d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:ED:03:BE:6A:A0:E4:87:D8:11:37:3A:33:4C:90:BF:74:50:47:AE
X509v3 Authority Key Identifier:
keyid:50:43:1A:71:4B:C8:BA:DC:E8:51:9E:4B:99:14:7E:15:1E:DF:77:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UEMacUvIutzoUZ5LmRR-FR7fd5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e5:3c:88:ae:e7:1f:b9:3a:d7:f0:5d:d2:57:48:83:f8:e9:
ef:b1:3d:af:ed:f7:86:77:73:ec:95:53:ed:11:db:43:c3:83:
71:15:f1:f6:f5:0f:fc:d5:0e:2e:8f:dd:83:d0:41:4c:ab:d3:
8c:27:2f:2d:1f:0f:b2:8f:d9:26:68:44:ff:44:9c:b7:af:b8:
0f:d4:8c:d4:ac:bb:b5:0e:be:e1:ba:a0:03:26:58:25:94:ef:
cd:ac:21:ff:4f:16:6a:d4:1f:58:98:4d:0e:02:94:7d:96:30:
b6:31:ec:62:4f:79:38:80:e7:9b:78:1a:35:04:7c:35:5b:d3:
a7:af:1b:54:76:4d:4e:f8:a6:29:82:03:a9:b9:31:d1:b5:17:
1a:40:e8:26:09:1b:f5:e7:e1:79:93:16:e2:9f:be:a9:48:01:
89:c1:b9:17:75:d5:d6:02:57:9d:54:b7:bf:89:1b:3f:dc:4a:
cf:d1:63:8d:a1:ae:ae:8f:77:b5:18:6d:d5:b4:4c:ef:50:3d:
26:99:68:64:21:1d:f9:a3:af:1b:77:b9:08:cc:db:9f:2f:c9:
5c:fe:a8:f5:ba:aa:35:50:ea:da:f6:00:cd:98:02:c1:c2:15:
d5:dd:e3:ac:14:50:52:2e:b8:f3:03:47:c0:11:bc:91:20:cc:
42:b0:15:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:44:47 2026 by rpki-client