
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft
File: UkWN1qz9QNreWs3IL01ZLaUp58c.mft (raw, json)
Hash identifier: dcE3APwDCiefEC5tE9rC0EXhS8F2KN+aFvyGFfYpIXE=
Subject key identifier: 61:F1:3D:A6:50:6F:6E:CE:29:A2:43:FD:92:F0:95:32:DD:D0:AE:AE
Authority key identifier: 52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7
Certificate issuer: /CN=A91DDDA7/serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7
Certificate serial: 099A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft
Manifest number: 099A
Signing time: Sat 28 Feb 2026 20:15:21 +0000
Manifest this update: Sat 28 Feb 2026 20:15:21 +0000
Manifest next update: Sat 07 Mar 2026 20:15:21 +0000
Files and hashes: 1: UkWN1qz9QNreWs3IL01ZLaUp58c.crl (hash: ktwoFSLtZkSXyH2Oyuo75DtgwoiFCYXp08cT3lUuys8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl
rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2458 (0x99a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDDA7, serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7
Validity
Not Before: Feb 28 20:15:21 2026 GMT
Not After : Mar 7 20:15:21 2026 GMT
Subject: CN=69a34cd9-3319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:31:74:ed:d1:ac:0b:ea:3e:bc:ef:35:59:
eb:91:08:36:29:aa:f8:b6:2e:6d:9a:61:f5:46:2c:
5d:e6:31:3f:ab:d7:42:35:3f:1d:ee:76:e2:76:ac:
2f:b3:cf:5c:05:c4:a8:e9:cd:24:33:a0:07:d0:46:
f9:46:23:98:53:98:46:cb:45:0d:df:dd:ff:19:c5:
ab:e1:39:7c:10:bd:03:ba:2b:eb:e7:39:29:37:97:
2e:05:b9:a5:fa:25:86:5d:f4:22:34:0f:9d:14:2d:
a6:49:63:5c:8f:72:fa:fb:58:4f:32:47:eb:10:28:
8f:1c:81:c0:f2:a9:29:1b:da:18:92:ea:a5:6b:82:
30:66:66:5d:2a:73:c6:2a:e5:ba:cb:cd:85:47:40:
51:12:0a:1e:13:5b:33:23:e8:85:01:e8:a1:b3:e1:
05:60:ce:28:eb:7a:50:29:46:92:0d:54:e8:bb:45:
13:41:81:03:5a:de:d1:83:a9:02:7a:7d:c6:7e:8b:
f1:ce:71:29:20:bd:7e:8d:1d:d8:04:21:18:55:b0:
c1:cc:b5:4b:be:25:31:35:f0:c9:dd:ba:04:f1:61:
91:9b:1d:c2:ed:4d:0a:84:ca:f1:d3:9c:12:5d:e6:
70:f6:10:e3:18:02:f4:0c:8e:97:d6:f9:4e:bb:78:
ba:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F1:3D:A6:50:6F:6E:CE:29:A2:43:FD:92:F0:95:32:DD:D0:AE:AE
X509v3 Authority Key Identifier:
keyid:52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:f0:90:09:ce:69:da:e9:0a:f4:b1:f8:f5:9d:e3:27:c3:70:
e5:79:09:d4:70:9b:d3:ed:10:68:5e:28:53:f6:3a:7a:96:cb:
1e:0c:b8:c3:8d:ea:bb:01:05:d9:66:2f:8b:dc:a2:ea:da:d2:
b5:25:61:12:0e:45:a9:59:8b:60:af:dd:5b:68:e4:c3:ad:68:
79:b4:6d:be:c9:23:03:09:de:e6:75:ef:3a:d5:41:d6:2e:f4:
3b:99:7d:e8:79:89:9d:35:6e:ee:0e:ab:82:11:92:ae:60:3d:
c1:15:84:59:bc:1a:ad:3c:0c:8b:dd:5f:54:b4:83:40:a2:72:
6f:a1:d0:99:66:de:fc:00:eb:90:7e:43:14:42:7b:6a:9b:b5:
e6:4e:b0:d1:5f:fa:c9:06:49:6d:64:26:01:49:c7:12:45:7e:
ba:1c:ab:bc:df:07:d7:65:54:77:25:69:df:11:c8:37:e1:74:
cf:8e:ed:7a:73:e0:ed:41:d2:c7:9a:77:65:d0:2d:d6:c7:ba:
20:6a:80:e1:97:bd:ff:e3:51:a5:a5:85:de:bd:d3:e0:6c:d8:
f1:9d:2c:23:b4:44:f8:a4:1f:19:e0:74:05:b8:9f:59:2e:d1:
3a:6a:15:a6:50:99:67:14:a8:b3:91:63:17:9e:01:ad:d1:fc:
13:c0:97:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REREQTcxMTAvBgNVBAUTKDUyNDU4REQ2QUNGRDQwREFERTVBQ0RDODJGNEQ1OTJE
QTUyOUU3QzcwHhcNMjYwMjI4MjAxNTIxWhcNMjYwMzA3MjAxNTIxWjAYMRYwFAYD
VQQDDA02OWEzNGNkOS0zMzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvNwxdO3RrAvqPrzvNVnrkQg2Kar4ti5tmmH1Rixd5jE/q9dCNT8d7nbidqwv
s89cBcSo6c0kM6AH0Eb5RiOYU5hGy0UN393/GcWr4Tl8EL0Duivr5zkpN5cuBbml
+iWGXfQiNA+dFC2mSWNcj3L6+1hPMkfrECiPHIHA8qkpG9oYkuqla4IwZmZdKnPG
KuW6y82FR0BREgoeE1szI+iFAeihs+EFYM4o63pQKUaSDVTou0UTQYEDWt7Rg6kC
en3GfovxznEpIL1+jR3YBCEYVbDBzLVLviUxNfDJ3boE8WGRmx3C7U0KhMrx05wS
XeZw9hDjGAL0DI6X1vlOu3i6xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGHxPaZQ
b27OKaJD/ZLwlTLd0K6uMB8GA1UdIwQYMBaAFFJFjdas/UDa3lrNyC9NWS2lKefH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERBNy8xQ0JGRTY0NEE1
MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFOcmVXczNJTDAxWkxhVXA1
OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VrV04xcXo5UU5yZVdzM0lMMDFaTGFVcDU4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RERBNy8xQ0JGRTY0NEE1MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFO
cmVXczNJTDAxWkxhVXA1OGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwfCQCc5p2ukK9LH49Z3jJ8Nw5XkJ1HCb0+0QaF4oU/Y6epbLHgy4w43quwEF
2WYvi9yi6trStSVhEg5FqVmLYK/dW2jkw61oebRtvskjAwne5nXvOtVB1i70O5l9
6HmJnTVu7g6rghGSrmA9wRWEWbwarTwMi91fVLSDQKJyb6HQmWbe/ADrkH5DFEJ7
apu15k6w0V/6yQZJbWQmAUnHEkV+uhyrvN8H12VUdyVp3xHIN+F0z47tenPg7UHS
x5p3ZdAt1se6IGqA4Ze9/+NRpaWF3r3T4GzY8Z0sI7RE+KQfGeB0BbifWS7ROmoV
plCZZxSos5FjF54BrdH8E8CXsQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:14 2026 by rpki-client