
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
File: UgGonTDEgplFBBjJVrh3JJcG6Vc.mft (raw, json)
Hash identifier: qs3RKL7b2baPQTWackRYkxjEvRDmoM7CpG+LDzpwj5c=
Subject key identifier: 60:8B:41:71:A3:19:8D:47:F3:D4:5B:05:62:D9:3E:66:1C:4B:54:10
Authority key identifier: 52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57
Certificate issuer: /CN=A91E7E94/serialNumber=5201A89D30C48299450418C956B877249706E957
Certificate serial: 05C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
Manifest number: 05BD
Signing time: Mon 02 Mar 2026 00:23:15 +0000
Manifest this update: Mon 02 Mar 2026 00:23:13 +0000
Manifest next update: Mon 09 Mar 2026 00:23:13 +0000
Files and hashes: 1: UgGonTDEgplFBBjJVrh3JJcG6Vc.crl (hash: yj59jXnV+KdLrfm7qWieNuhuOWM4Sdl8ttmNdIDfD2Y=)
2: FAF4A0E0FB3211EB967B1759C4F9AE02.roa (hash: za9ZwUg3oqacV1ELjLoUapqiFDMjNUL4gcIlc/8/4R8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl
rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1480 (0x5c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7E94, serialNumber=5201A89D30C48299450418C956B877249706E957
Validity
Not Before: Mar 2 00:23:13 2026 GMT
Not After : Mar 9 00:23:13 2026 GMT
Subject: CN=69a4d873-7d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:c1:06:f0:9e:5a:3d:8f:34:1b:7d:ba:8d:
76:57:75:c5:2f:a2:05:21:fc:d0:2d:16:1e:38:ff:
a8:33:27:42:b0:95:87:82:54:51:cb:ec:97:95:3a:
de:f6:de:92:91:ff:34:ed:d0:59:5f:8e:d9:ba:ca:
6d:a2:62:4a:cf:1b:3e:8b:6d:97:3b:2d:b2:35:1a:
e5:92:0b:7b:67:e8:8c:0a:a4:d2:71:b5:7f:20:3b:
9b:d8:44:7e:2c:7f:a5:8c:93:11:95:13:32:b3:8f:
ce:37:e4:8c:b8:de:77:a2:ea:4e:d5:24:01:6e:3a:
84:08:98:c6:45:e2:91:bf:c0:25:bc:90:27:f4:9f:
27:08:76:26:d9:de:ee:0c:d6:10:0b:48:fc:0a:e2:
e8:c4:16:b4:c6:f6:dd:bc:b7:37:d0:55:f7:50:ce:
6e:64:12:62:e9:00:23:63:2c:57:74:a6:20:50:27:
9c:37:a2:b4:d9:22:35:c8:85:b6:a2:31:70:48:c5:
e2:bb:12:79:ec:a5:c7:cb:fb:ff:e2:32:3e:c3:da:
a9:c1:d3:01:0b:89:76:79:9e:40:d6:82:35:79:19:
4f:7a:98:1b:71:40:0e:f5:5f:23:8b:41:7e:7c:30:
91:95:06:bf:df:2d:52:f3:ec:d0:4c:5d:26:b4:f8:
c0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8B:41:71:A3:19:8D:47:F3:D4:5B:05:62:D9:3E:66:1C:4B:54:10
X509v3 Authority Key Identifier:
keyid:52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:96:cb:84:41:51:2d:0d:57:64:cd:c7:93:d3:c1:72:ad:a0:
db:bf:7a:dc:b5:50:3e:8b:91:57:ad:2a:c4:6e:9e:b1:fd:27:
3d:f3:20:dc:57:b0:0e:da:73:d7:d5:57:75:e4:f4:70:5f:60:
b9:e1:e5:67:0b:82:97:85:a9:a8:f0:63:7b:4a:ec:16:44:9a:
0d:b9:39:70:79:ff:d6:3f:d7:75:2c:76:08:7f:6f:a7:3b:76:
79:b9:f5:1b:1d:96:43:ed:b3:1c:95:57:ee:1f:d9:18:22:e8:
ae:23:9a:c9:b6:79:12:aa:8f:df:4e:59:84:2f:d9:93:bb:be:
c0:53:27:77:e8:00:2d:a5:dd:7b:ce:f5:5b:38:0b:d4:a7:4f:
de:06:94:c1:5a:f8:33:a3:33:67:7d:b2:41:25:98:0f:26:c0:
89:9a:8e:c8:fe:b5:ab:28:0b:bd:ef:95:8d:e7:16:05:2e:69:
5b:78:b0:f9:62:ab:f2:d3:7b:c3:f2:0b:28:71:bb:68:49:13:
c2:7d:99:52:6b:12:b2:44:47:3a:5e:0d:03:97:d3:bc:ff:52:
7d:44:da:31:0d:0d:bb:b4:88:2b:d5:0c:65:28:dd:67:98:27:
fe:78:26:a2:ac:98:6a:e7:51:a1:27:0d:d4:30:8c:d4:4c:f7:
6a:49:09:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:58 2026 by rpki-client