
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
File: uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft (raw, json)
Hash identifier: nLdSOHy/B0xNpg+qGQWW5NjRiKqXUDyiulicHbkBZxk=
Subject key identifier: CF:F1:C3:F1:6A:C4:AE:B9:6E:36:17:31:A4:EE:9B:97:E9:E7:4C:34
Authority key identifier: B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB
Certificate issuer: /CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB
Certificate serial: 080E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
Manifest number: 101D
Signing time: Thu 16 Apr 2026 21:01:09 +0000
Manifest this update: Thu 16 Apr 2026 21:01:09 +0000
Manifest next update: Thu 23 Apr 2026 21:01:09 +0000
Files and hashes: 1: uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl (hash: TYiL83NPj0eMCCXiEP0x3/GZeAUoQtPbSfUD0qjgyCY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl
rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2062 (0x80e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5C49, serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB
Validity
Not Before: Apr 16 21:01:09 2026 GMT
Not After : Apr 23 21:01:09 2026 GMT
Subject: CN=69e14e15-275f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:be:ba:19:09:9a:9a:9e:1a:78:38:b1:8f:
62:9e:ae:f1:21:e7:a0:8b:f9:e4:66:ef:32:be:0c:
53:41:97:cf:da:24:0b:78:7b:ca:fc:1e:2b:74:59:
eb:1a:29:78:69:b8:8e:31:62:dd:85:28:52:a3:b8:
cd:1c:a4:df:26:18:7a:ad:c7:48:4f:52:6b:1a:51:
d2:dd:46:60:e1:7a:6e:b2:39:db:48:f1:25:60:b2:
c5:8c:ef:45:29:89:35:a1:8a:c6:94:33:df:74:26:
f9:c0:3e:3d:be:24:15:78:49:8f:94:fd:0d:4e:e1:
ba:ca:00:d6:ed:6f:5c:ab:7b:29:e0:63:3d:9d:dc:
0f:fc:cc:7d:f9:5a:91:81:ca:c4:58:36:14:1e:e8:
96:0e:46:30:66:9d:f9:61:f5:cf:b3:c5:63:35:01:
43:2d:f0:ba:0b:0f:5f:ad:f3:bb:b2:bc:88:8e:4d:
0f:b3:76:b1:3f:4c:e3:b3:3d:32:80:03:c6:6e:12:
a7:47:33:f4:35:ab:59:29:e6:db:30:46:3d:ec:15:
d1:08:4d:33:be:8b:20:2c:43:5d:05:e5:8b:ad:9d:
4e:c0:c3:ca:ef:3b:68:f4:f7:e9:9c:05:f0:02:ce:
d3:c8:d0:18:d4:fe:ab:c0:b1:d7:c0:32:e7:ac:05:
e5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F1:C3:F1:6A:C4:AE:B9:6E:36:17:31:A4:EE:9B:97:E9:E7:4C:34
X509v3 Authority Key Identifier:
keyid:B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:96:f7:2a:89:b9:77:aa:cd:0b:87:c9:6f:66:4c:bb:6e:42:
00:5a:48:4b:8a:b6:1f:2c:56:f5:56:cf:b7:a4:ee:a2:4b:b6:
9a:25:66:e1:9e:dc:29:9f:30:ad:c7:1a:1c:ad:2c:74:0a:61:
07:87:e6:65:85:72:a0:d5:8c:36:10:04:fd:0b:ab:9d:b1:63:
33:8f:73:d4:03:5b:25:09:c0:68:02:ce:c3:06:fb:aa:39:3d:
8e:f5:57:d8:24:5d:58:02:a6:e6:d0:ac:e6:d0:94:04:46:8b:
95:aa:50:25:1c:36:8f:b6:ab:c2:76:79:c0:01:d7:f4:9e:9c:
e8:c5:e5:d4:75:b5:45:81:89:07:12:c1:5a:e9:a0:b5:97:33:
07:06:6e:37:21:da:e0:59:2a:1d:f8:2b:06:d1:d6:af:f1:76:
2a:92:ca:8f:a3:60:c4:6d:7b:4e:4e:2c:65:bb:5a:ae:df:fd:
19:d8:45:07:9e:b4:85:d0:d5:9c:ad:b8:55:c6:f6:24:b3:be:
9b:2b:eb:c2:5c:47:24:bc:22:a5:04:9d:9b:2b:f5:a2:6a:3c:
c7:f6:93:c6:19:67:ec:54:55:29:20:f7:0b:e0:20:3f:e5:d1:
ba:01:af:8e:63:98:94:ec:2a:a8:10:62:52:f0:5e:d2:b8:08:
e5:66:d0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:29 2026 by rpki-client