
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
File: UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json)
Hash identifier: IJGnGcpD9sj7wxwbo/z/ZIqPuAmo/wLvhueUOn2BaBU=
Subject key identifier: 2D:27:76:1F:BC:2F:51:14:D5:96:94:32:C6:EC:75:63:77:D7:E8:6D
Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8
Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
Certificate serial: 0269
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
Manifest number: 024B
Signing time: Mon 02 Mar 2026 00:08:30 +0000
Manifest this update: Mon 02 Mar 2026 00:08:28 +0000
Manifest next update: Mon 09 Mar 2026 00:08:28 +0000
Files and hashes: 1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: TzGyi38ap5gTG6WDYRCELHbBq8d3znRduO56FG9X2TA=)
2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: UgIjU1Y9FIQZMVmVVjbiH3ya5cbpCsU387MDkBuS42U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl
rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
Validity
Not Before: Mar 2 00:08:28 2026 GMT
Not After : Mar 9 00:08:28 2026 GMT
Subject: CN=69a4d4fd-3126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:5d:02:e4:5b:96:86:33:40:61:a1:c1:71:
c6:70:90:da:bf:eb:c6:32:46:85:d3:9e:b8:78:48:
31:fc:59:b5:fd:5f:d4:14:a0:fc:5a:65:b4:6a:c5:
b6:14:f9:a3:1a:b4:66:a0:75:e7:d9:f0:32:50:0c:
1e:58:9c:23:50:31:b2:a2:8c:a2:b9:5b:95:d8:f7:
20:c0:23:5f:0d:45:22:78:b9:50:8d:0e:32:5a:4f:
64:46:07:e7:70:c8:ae:9d:9f:d3:d3:26:85:79:f9:
01:72:60:ca:78:31:e2:00:04:98:9f:c0:4b:5c:d9:
98:60:76:2b:b0:16:7e:d7:45:07:2f:fc:8f:8b:db:
17:61:ac:da:82:3c:d1:09:bb:37:e2:26:01:37:3d:
f1:71:40:12:09:b8:59:f3:84:e8:b2:ab:f3:f0:e6:
40:e2:f5:37:4c:b0:59:e2:f6:ee:55:13:a0:80:98:
70:9d:b7:4c:d8:8c:a9:fd:ec:a7:54:d9:63:f7:c2:
7b:b3:67:ba:13:00:88:b6:8d:d0:5f:19:c9:ed:be:
d9:23:16:ef:8e:e9:01:2f:69:12:6d:fe:87:49:64:
ef:89:15:9e:99:d3:79:08:26:d5:d6:e8:72:8a:43:
38:69:93:97:fc:4d:39:4b:85:f5:e2:b9:b4:6d:1b:
10:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:27:76:1F:BC:2F:51:14:D5:96:94:32:C6:EC:75:63:77:D7:E8:6D
X509v3 Authority Key Identifier:
keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:6c:2a:a0:a7:a5:11:4c:70:a1:27:5a:7d:ee:cd:12:bd:ee:
c7:34:21:ad:a8:f0:e0:da:04:61:8f:04:9a:e6:d6:ae:be:d7:
5a:30:a0:b7:84:81:fb:be:da:73:e7:bd:89:c2:7e:f3:56:d8:
5d:5d:29:b3:b2:7f:46:8d:1f:25:95:6a:b1:33:60:c8:bc:2f:
7b:60:38:c4:37:30:f0:9d:68:c0:81:a8:34:11:4b:c9:f4:24:
2e:c4:af:28:dc:ba:b5:b8:79:7a:6b:81:7e:23:e8:4a:cc:88:
95:75:2f:de:99:b6:b0:e4:e6:7b:96:75:aa:03:26:08:ed:92:
e7:ef:ba:05:33:5e:2f:22:19:eb:cb:4a:9e:7a:c7:39:99:cd:
d0:5c:8e:a5:2e:41:bb:96:66:ff:fa:34:5c:ff:83:94:d4:0c:
e2:ce:4e:d1:65:4d:87:1b:ac:54:2b:e0:c4:bb:d3:0f:53:9a:
d2:12:bb:59:5d:79:b9:fb:4f:b8:15:e0:2d:68:d7:48:2f:40:
33:f8:43:1f:57:87:36:fd:0c:0b:ae:29:2d:98:3d:3b:16:8b:
14:59:09:9a:0c:19:82:fa:50:3f:35:52:4e:10:a2:c8:59:7e:
a7:5c:bc:5a:4c:e7:9b:ae:e8:55:31:79:d3:01:cc:e1:34:18:
21:14:57:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:23 2026 by rpki-client