
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
File: uXgEM1AwWT1tlle8RdvRFLEpHSg.mft (raw, json)
Hash identifier: nfonkvEQpMFBJlZy2aoMbcwxL6b2dwCTjHVDnxQZODg=
Subject key identifier: 4D:76:01:49:61:C8:6C:7B:A4:42:C6:21:19:8F:E0:0B:F3:03:32:07
Authority key identifier: B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28
Certificate issuer: /CN=A91E9310/serialNumber=B97804335030593D6D9657BC45DBD114B1291D28
Certificate serial: 0540
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
Manifest number: 0532
Signing time: Wed 29 Jul 2026 00:12:22 +0000
Manifest this update: Wed 29 Jul 2026 00:12:22 +0000
Manifest next update: Wed 05 Aug 2026 00:12:22 +0000
Files and hashes: 1: uXgEM1AwWT1tlle8RdvRFLEpHSg.crl (hash: Id3jt+mBe382Je03UF6fWl6fX1hOkj9b5bKL17jzS+Y=)
2: E985185E773D11F0B023A932C4F9AE02.roa (hash: cKsWDyjFPx2klIzShbX3cif8qcZohuUF2aGywpw3pTY=)
3: 785EB284773D11F0AB969921C4F9AE02.roa (hash: UY+luSh8qqHRaZPEfACesKw31O/0kf+TUsBSx9+pJiY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl
rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 00:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1344 (0x540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9310, serialNumber=B97804335030593D6D9657BC45DBD114B1291D28
Validity
Not Before: Jul 29 00:12:22 2026 GMT
Not After : Aug 5 00:12:22 2026 GMT
Subject: CN=6a694566-04b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:92:8c:e0:a0:09:6f:8b:19:c3:33:06:04:60:
ac:07:f9:a2:5e:d9:a1:1c:35:a1:d9:57:94:47:6f:
f0:7c:39:8e:c3:29:18:92:ef:b0:06:41:20:13:cb:
a1:c4:71:8f:23:9d:b2:5b:c7:d5:f9:b6:25:7a:95:
b3:98:d4:eb:db:50:51:5e:e6:81:89:dd:62:ed:ac:
46:ff:12:10:38:ec:a8:b1:2b:37:bf:09:85:30:a1:
2e:94:de:a5:2d:43:fc:13:e6:64:d6:d5:eb:b5:1b:
24:f8:6e:62:39:dd:40:83:20:59:cd:aa:b0:a6:32:
00:48:ff:87:37:93:f2:2f:c8:e0:f4:b4:bd:16:03:
f1:63:47:ad:c9:4b:43:07:e0:23:bd:54:5a:84:e9:
85:b4:9d:1f:80:19:0f:fa:9e:64:0a:1a:9f:6b:94:
e0:d6:bd:80:e4:50:0a:f1:15:51:ab:05:1f:3e:60:
f3:fe:78:96:30:a8:dc:64:c0:80:ca:ea:83:ee:f1:
b4:ea:21:72:0d:8b:3f:6f:ef:69:5b:ef:ca:63:a4:
3a:07:e6:ff:8c:b1:c9:f5:14:f8:74:0f:dd:72:3f:
fd:a7:22:8e:99:9b:65:15:8b:c1:98:02:0b:c6:9a:
59:1d:10:48:f0:3c:9c:2f:b4:1f:6d:80:f0:28:cb:
be:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:76:01:49:61:C8:6C:7B:A4:42:C6:21:19:8F:E0:0B:F3:03:32:07
X509v3 Authority Key Identifier:
keyid:B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5c:b1:a2:a6:0e:07:39:c7:b8:db:e1:01:4a:9c:e7:6e:5a:
c6:b4:6d:0a:07:5c:9d:a1:99:f1:9f:61:18:ba:8b:25:4f:60:
f9:96:31:52:80:58:dd:c8:95:3b:15:87:cc:00:ed:70:89:47:
7d:2e:68:87:78:63:90:35:61:a7:c6:96:49:61:cf:e3:2e:df:
a1:82:be:a3:a8:74:9b:10:c8:00:4f:e0:55:a5:8b:d5:eb:b2:
9e:25:37:20:20:66:d8:2c:06:4b:0f:71:0b:dd:8c:3e:27:2c:
8b:a8:b7:24:ad:95:0e:bd:7b:bd:f3:72:4c:13:fd:43:66:47:
03:24:f1:fe:0c:b1:30:43:94:be:a9:f3:16:ce:56:25:6f:98:
68:60:33:ac:2e:49:f6:1c:88:92:d3:d5:08:69:0e:bc:63:ad:
35:8c:18:a0:cf:b2:88:71:3a:48:93:2c:8e:a3:1a:4d:72:60:
a8:0f:c6:9c:79:1e:12:4d:df:e7:36:9a:25:24:d2:fd:a9:93:
c1:a5:7e:02:a8:aa:6c:74:80:fa:39:34:28:bf:cc:58:cf:5e:
11:73:6a:12:b2:69:95:2a:82:7c:42:ab:7e:c9:65:ee:7f:ba:
7f:c0:74:b3:4b:dc:2f:28:04:e9:7d:33:a9:6e:a1:1e:d0:34:
03:0b:d2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:23 2026 by rpki-client