
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
File: UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft (raw, json)
Hash identifier: UArWXYhkmB7rFjviIy9eiiFgCv3lKgrsXl7MDBnCHHY=
Subject key identifier: 6C:72:D8:98:FB:9B:78:7A:F1:06:3E:97:89:86:49:85:44:CF:73:39
Authority key identifier: 52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13
Certificate issuer: /CN=A91DD1CC/serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
Manifest number: 86
Signing time: Mon 02 Mar 2026 13:56:36 +0000
Manifest this update: Mon 02 Mar 2026 13:56:36 +0000
Manifest next update: Mon 09 Mar 2026 13:56:36 +0000
Files and hashes: 1: UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl (hash: EolEkZVC9D9JZPfR5Vq88Zvy1yDQS7UKDZbrjBFabFs=)
2: 0745DA884A3C11F0AFF98454C4F9AE02.roa (hash: UHvDQg4EoApzyLpFSzC8aB9dr9pOB/LRHrT90NsCO5Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl
rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:56:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD1CC, serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
Validity
Not Before: Mar 2 13:56:36 2026 GMT
Not After : Mar 9 13:56:36 2026 GMT
Subject: CN=69a59714-6145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:40:21:63:71:f1:83:a3:a6:70:36:27:9e:
12:28:e1:b6:15:c1:a0:91:0a:bb:5f:e8:11:7e:16:
cb:62:69:f4:ab:9b:b5:22:dc:67:f6:13:c1:89:59:
6c:e3:d2:9e:92:46:36:cd:92:fe:ce:1d:36:87:36:
81:48:ae:6b:09:2b:18:4c:e2:3c:68:fd:3f:f6:41:
10:6e:8d:fb:c7:bf:29:1b:02:ea:14:94:9a:02:9a:
eb:2a:3d:2e:b0:2c:9d:36:af:0f:53:ea:87:19:67:
53:f2:46:3c:2c:1b:1a:a0:89:87:9b:09:51:4b:1f:
86:c7:ea:65:07:41:5f:fe:2f:68:1c:77:de:17:d0:
0b:19:4c:df:54:2d:e0:42:18:af:68:c7:23:a6:82:
b1:ad:e7:88:37:19:98:1b:fa:51:17:9f:58:32:00:
ef:c4:9c:c9:c5:a8:f0:d8:33:e4:9d:02:03:25:05:
ba:2f:6e:a1:11:00:36:71:b1:7a:e0:28:16:24:98:
15:28:5a:c3:9f:f8:24:15:65:1e:e0:57:0d:d6:94:
81:c0:af:e2:3b:0a:89:e8:53:4d:71:ed:0c:57:bc:
cb:f4:0f:39:eb:6c:10:04:2d:57:72:53:34:bd:0c:
ba:ff:70:e2:f6:8a:03:ea:d6:f1:bc:55:23:27:f1:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:72:D8:98:FB:9B:78:7A:F1:06:3E:97:89:86:49:85:44:CF:73:39
X509v3 Authority Key Identifier:
keyid:52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:b5:77:c6:67:7f:57:b7:8d:8d:fe:10:e3:14:7b:00:72:c1:
ee:ff:e0:e7:a9:65:64:4a:aa:c7:42:b4:84:7d:8d:05:d1:a0:
64:b0:41:e5:6e:79:05:a2:8c:ea:6a:ec:a5:29:30:e5:de:55:
34:6f:23:1f:2c:16:08:97:0b:ce:5e:e7:e4:6b:5d:20:8c:bc:
5e:9f:d7:56:5f:cd:7d:c3:b4:b4:09:d0:5f:2f:bf:06:ec:6c:
cb:da:e7:26:8d:aa:e4:25:8a:cb:b1:b1:1a:d3:fe:f8:b7:12:
90:2b:b9:2a:c1:ae:8d:33:8d:5d:3e:23:b8:5f:7b:48:27:38:
a1:9c:f2:69:85:78:e4:23:62:69:6a:fa:64:2c:66:fc:de:7d:
f6:ae:03:30:44:c7:06:9d:a6:94:69:09:f9:1c:45:f0:ca:57:
f8:1c:21:81:69:ad:82:80:3e:30:d0:40:22:5b:e0:2c:d5:c3:
2b:9c:a8:b0:aa:3a:1e:45:a3:42:1f:0a:b9:be:98:25:ef:08:
41:9c:ea:5c:c8:5a:5b:4c:93:c3:f0:01:90:94:78:00:ac:22:
a7:d5:da:75:6a:4a:94:ac:97:52:3b:cc:15:f3:63:03:be:57:
1c:58:82:59:74:58:d6:05:42:f4:cd:77:c9:fc:78:c0:03:0f:
e6:b1:b8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:40:45 2026 by rpki-client