
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
File: UgGonTDEgplFBBjJVrh3JJcG6Vc.mft (raw, json)
Hash identifier: DdKhxYJXT4BRG+s6muztdvl2vX65y0vR/XWM/z7mL8U=
Subject key identifier: 48:BB:DA:EB:5A:97:90:8B:F1:51:21:D2:A9:68:8F:06:C8:D2:0D:C1
Authority key identifier: 52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57
Certificate issuer: /CN=A91E7E94/serialNumber=5201A89D30C48299450418C956B877249706E957
Certificate serial: 05E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
Manifest number: 05D6
Signing time: Thu 16 Apr 2026 22:55:28 +0000
Manifest this update: Thu 16 Apr 2026 22:55:28 +0000
Manifest next update: Thu 23 Apr 2026 22:55:28 +0000
Files and hashes: 1: UgGonTDEgplFBBjJVrh3JJcG6Vc.crl (hash: LgiOOBc9+WzmDhLeNvk8UTS5YXWUvbXD6x0hMjEgTuQ=)
2: FAF4A0E0FB3211EB967B1759C4F9AE02.roa (hash: tMsJF1RkyUwJRBsH0zT5DwcSG9DDZ6NHm8vuVOU4VKc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl
rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1513 (0x5e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7E94, serialNumber=5201A89D30C48299450418C956B877249706E957
Validity
Not Before: Apr 16 22:55:28 2026 GMT
Not After : Apr 23 22:55:28 2026 GMT
Subject: CN=69e168e0-26ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:90:45:19:65:dd:42:81:fc:ab:a4:7e:7b:5c:
2e:7b:42:97:b1:48:e2:f5:bf:f9:a7:74:82:c8:f9:
e2:ae:3c:60:7d:88:95:58:af:45:fe:ee:34:27:f9:
c0:7a:35:5c:83:8d:e1:b0:81:b8:42:69:f9:b1:2d:
fa:20:b9:e9:cc:e5:1d:73:8b:8f:f9:59:50:46:95:
76:f1:9c:3e:18:7f:78:33:ee:c7:c6:e7:af:ab:9a:
e9:20:80:f8:c3:b4:3a:7d:8a:62:bf:af:92:09:bd:
85:de:6d:72:28:15:6f:48:50:d2:7b:57:94:e7:1e:
e0:b9:37:7d:9f:5e:4a:88:d0:13:a7:48:aa:b8:14:
a4:93:0b:8c:fe:bc:b0:4d:5c:82:5e:0a:5a:df:77:
77:a3:83:25:d9:3a:b5:98:90:b5:34:0a:87:0c:ea:
40:ec:d5:d3:7d:92:4c:f2:d9:b0:80:7f:52:c5:a1:
f5:54:5c:de:27:1d:d5:dc:8a:c1:7d:51:bb:88:6a:
45:da:ab:89:5e:c3:5c:0f:a6:6c:74:b4:a6:03:4a:
26:90:1f:45:9e:fc:53:20:37:20:5f:0a:dd:b9:19:
e8:69:7b:ed:01:5a:64:b4:1f:46:fe:4e:ab:03:da:
0e:69:f2:3e:75:93:21:6b:42:99:09:01:d3:24:ff:
f6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BB:DA:EB:5A:97:90:8B:F1:51:21:D2:A9:68:8F:06:C8:D2:0D:C1
X509v3 Authority Key Identifier:
keyid:52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:ec:90:c9:fc:66:78:b8:a8:ea:3c:91:5e:ff:b2:d7:5c:18:
5e:da:72:3e:89:b4:71:0d:1f:fc:82:06:d9:76:82:6a:ad:cd:
c9:39:b9:cd:53:55:d3:3f:95:39:19:ae:7e:c6:e0:55:36:29:
cb:27:34:88:9b:ea:45:94:bf:3d:e1:b8:54:54:16:63:d9:c8:
49:ff:d2:76:e4:2b:a5:bc:b8:7c:98:f5:ea:04:39:b6:88:1c:
9e:da:ef:12:11:96:be:a2:ab:c4:8f:2c:0d:d2:11:03:c1:0c:
56:61:60:6d:3d:48:43:6b:19:7e:8e:70:7a:14:d4:75:d4:11:
df:f2:5e:4f:b7:52:dc:de:fb:13:e8:b6:aa:f6:fb:8c:3f:87:
1d:48:05:21:97:6f:df:69:1a:59:66:36:65:db:d4:69:82:29:
17:48:51:a7:ea:00:4a:26:18:10:f3:90:e1:4b:9f:ef:4f:43:
e9:7c:44:fa:6a:4f:04:0f:1e:c0:86:f4:65:10:1a:55:37:84:
a2:cf:78:99:e5:a2:ca:3e:bb:fc:04:a2:93:38:ed:63:9a:bb:
cf:81:80:32:3b:08:19:f0:ec:e3:c9:21:c0:56:0f:c1:6f:10:
cc:ca:bf:23:2f:9a:27:ce:a8:27:87:78:47:ca:ac:63:f0:61:
c6:4a:8f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:05 2026 by rpki-client