
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft
File: uN9D7us1RpuyzAulIS0b_yaKe24.mft (raw, json)
Hash identifier: G1ILp+J/loGjZ4s+zs46282Oov4qlW6C/Bq8HJyTCJ8=
Subject key identifier: 73:44:A2:1A:4A:E1:ED:F6:E4:09:CD:B9:A5:28:10:9C:6A:55:21:E3
Authority key identifier: B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E
Certificate issuer: /CN=A91F134A/serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E
Certificate serial: 0268
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft
Manifest number: 0263
Signing time: Sun 01 Mar 2026 02:46:10 +0000
Manifest this update: Sun 01 Mar 2026 02:46:09 +0000
Manifest next update: Sun 08 Mar 2026 02:46:09 +0000
Files and hashes: 1: uN9D7us1RpuyzAulIS0b_yaKe24.crl (hash: eyyrMlHIoe8PoZEjCAEPDFHNaqVzTH3I5NfJubW6y3U=)
2: 90269D3A716611ED9D80F448C4F9AE02.roa (hash: 5f74h8n3N2lPubEJTNiK66D1BQc1WtrIYebG81I+9UM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl
rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:46:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F134A, serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E
Validity
Not Before: Mar 1 02:46:09 2026 GMT
Not After : Mar 8 02:46:09 2026 GMT
Subject: CN=69a3a872-7d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:81:49:a1:27:c8:17:06:6d:98:8b:24:74:
7f:7f:17:1a:37:a6:2f:8f:23:78:81:24:81:db:2e:
2f:f7:70:d7:42:07:83:c2:2b:f2:12:c6:7b:78:92:
ad:52:ef:08:42:f3:8d:96:ad:03:ac:80:30:e4:63:
66:15:6a:03:e2:b4:cd:fa:18:28:21:00:38:92:92:
e6:a8:7f:8e:9c:89:5c:eb:f3:47:f3:99:de:cf:91:
36:67:8e:e3:24:65:87:7c:94:e7:64:fc:86:09:b9:
88:49:f4:a2:8d:1c:7f:ed:b0:3c:ce:7f:19:b0:46:
49:a6:ef:c6:a8:35:cb:59:4d:4e:f5:5b:e1:58:1d:
a9:09:a5:91:09:f6:38:c2:6a:d2:5f:c7:57:47:a0:
79:69:75:af:9b:17:4e:68:76:b5:e8:df:2e:16:ac:
2b:4b:a6:cd:54:46:b3:14:92:00:e2:54:fe:3e:20:
d6:06:d0:0e:60:fa:20:46:c7:a6:b5:c6:56:66:2a:
2c:e2:7e:03:57:ee:24:65:1c:dc:b4:2e:9f:18:64:
71:7f:30:ce:de:b0:33:5e:49:8b:d2:94:47:30:6e:
39:4d:95:ac:dd:fa:be:a3:75:6c:f7:70:15:be:ac:
60:67:15:5c:ec:d7:cb:9e:b7:a8:5b:d4:a1:5d:4c:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:44:A2:1A:4A:E1:ED:F6:E4:09:CD:B9:A5:28:10:9C:6A:55:21:E3
X509v3 Authority Key Identifier:
keyid:B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:70:68:7e:d0:b9:5e:02:65:5b:01:44:af:72:9b:10:ee:67:
01:c5:bc:71:9c:ff:72:cd:62:a3:a6:42:8e:84:89:a0:72:65:
80:cf:1c:cd:02:67:77:58:e3:7d:1e:89:c6:70:5c:1c:5a:29:
ff:e5:15:f7:f4:f5:59:02:b6:5e:aa:7c:3a:84:82:4c:dd:41:
29:21:33:01:d5:df:62:14:1f:68:13:05:32:57:7a:fc:af:f0:
d3:2f:77:b1:fd:c6:7b:0e:7e:f8:e1:de:d9:05:b3:8e:d5:61:
16:bf:69:0d:2e:2f:ee:cb:91:46:73:90:b1:ed:fe:13:fb:c5:
84:1f:7e:df:91:b1:93:16:5d:e7:0e:dd:c5:68:8a:a3:e9:de:
74:ef:f3:d0:f5:6b:24:76:81:7b:20:e7:e1:ba:a7:f6:76:9b:
ef:89:cb:0c:12:a6:0c:be:70:ab:f2:e3:f7:46:cf:42:18:df:
58:5a:60:4c:2c:15:41:98:9a:08:3e:57:0c:d4:b2:0d:26:bd:
bf:75:d8:55:6b:29:d1:63:f4:c0:5d:c3:f7:6c:10:5d:b0:16:
16:93:c5:7a:92:e7:0c:ab:2f:3d:e1:02:34:d8:74:14:64:e3:
58:52:b4:ce:43:e0:ab:15:ed:e4:7e:df:cc:36:43:ac:e2:a3:
c7:12:a5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:31:52 2026 by rpki-client