
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
File: uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft (raw, json)
Hash identifier: qRzYe2fmpsq+AVcmQkEZImJ/6xMWaxUR185EFOLD3TU=
Subject key identifier: 65:98:A9:D9:25:C5:CC:A6:5C:14:DC:10:5D:AF:6A:A8:65:16:F4:2E
Authority key identifier: B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB
Certificate issuer: /CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB
Certificate serial: 07F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
Manifest number: 0FEA
Signing time: Sat 28 Feb 2026 21:34:45 +0000
Manifest this update: Sat 28 Feb 2026 21:34:45 +0000
Manifest next update: Sat 07 Mar 2026 21:34:45 +0000
Files and hashes: 1: uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl (hash: qtdu+9GgRRSxL16tQIYFR8MDhUB67DoOk76AJiEoumw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl
rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:34:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2037 (0x7f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5C49, serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB
Validity
Not Before: Feb 28 21:34:45 2026 GMT
Not After : Mar 7 21:34:45 2026 GMT
Subject: CN=69a35f75-e558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:c6:05:51:78:ef:a9:eb:3c:93:3e:37:77:
c4:f3:55:e3:3f:2a:6c:59:cb:7d:80:7e:e3:31:73:
ef:3e:41:00:25:c9:1c:14:08:96:c9:f9:95:5c:2e:
68:93:ee:1a:3c:d2:66:24:d5:65:c8:8f:b8:53:82:
42:7a:8f:dd:bf:95:29:66:aa:1c:44:61:ac:b1:d2:
f1:bf:8c:88:88:97:90:a7:08:38:a9:ea:db:22:9f:
03:d6:aa:86:bc:8c:4a:1c:b1:9e:37:7f:d8:a8:31:
02:3d:56:28:5e:e9:e3:a7:6d:c5:26:c7:63:8f:18:
8f:3b:7a:02:dc:38:7b:39:88:83:4c:23:ba:7f:3e:
98:e8:d9:ea:6a:8c:67:e8:a5:db:bc:17:e8:83:29:
d3:3c:cf:dc:0a:68:60:39:a3:59:5a:f0:a5:e9:a2:
37:ec:6d:8e:8e:6f:1f:ad:13:da:6d:e9:76:64:85:
79:27:63:73:31:92:d2:2f:3d:52:c9:45:69:00:47:
66:d9:ec:1b:fc:42:59:82:c6:ec:93:70:b9:2d:5e:
11:5d:47:3c:a6:60:9c:a9:e1:fa:2e:87:43:76:29:
39:cf:c8:7d:e4:90:d7:cf:e6:db:e6:44:0b:4c:21:
f4:a4:95:e6:54:20:b9:ef:31:21:10:58:9e:ee:42:
0e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:98:A9:D9:25:C5:CC:A6:5C:14:DC:10:5D:AF:6A:A8:65:16:F4:2E
X509v3 Authority Key Identifier:
keyid:B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:3a:49:4a:f6:32:58:0d:62:f3:ad:01:45:05:71:ba:59:00:
1d:f5:3f:bd:24:3c:f4:ae:85:68:72:d7:2c:d9:50:ea:28:0f:
0a:da:1f:36:05:28:67:e3:93:89:08:62:e2:0f:7f:a8:db:91:
92:d8:75:4d:91:ef:a9:03:bb:ee:82:7c:0b:1b:f6:01:15:2e:
67:5b:0e:c9:f1:44:e2:67:ea:00:b5:05:e2:2b:b9:0a:37:5d:
13:43:3d:65:f0:32:91:28:17:a3:7e:b6:95:da:5e:89:b8:2e:
44:44:4c:b0:c6:2e:79:f0:e0:aa:0e:17:ea:a3:d4:0e:d1:fb:
75:92:0b:fb:8c:84:98:40:0a:ac:f3:06:47:e4:ba:28:44:a0:
69:7a:b3:79:63:2e:95:8a:7a:39:91:10:9f:0a:1d:e0:89:0e:
a9:3e:bf:4d:84:f7:8d:fd:72:71:15:81:84:57:7c:3c:a7:85:
c4:3b:93:02:0e:1e:f7:95:6b:89:2b:dd:c9:b2:24:c0:a2:53:
13:53:e8:5b:15:85:82:d1:f3:eb:68:11:4a:6f:95:69:f9:12:
0e:47:f1:08:55:30:db:57:fa:74:9d:59:d8:79:d5:7e:6b:ce:
ce:b1:4f:75:93:06:3f:61:8f:ab:b8:1f:a8:fe:1d:3d:d9:ac:
c8:1a:d1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:17:20 2026 by rpki-client