
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
File: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft (raw, json)
Hash identifier: vzuMz0yzbhEgAJRHTjGaAOeTr3SD6QHO+sZgjroqkIA=
Subject key identifier: 3C:80:3A:2B:CC:AA:62:30:27:09:04:9F:8C:A0:9A:A4:AF:B5:EA:EF
Authority key identifier: 53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82
Certificate issuer: /CN=A91F3AF8/serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682
Certificate serial: 0866
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
Manifest number: 0854
Signing time: Thu 16 Apr 2026 20:43:40 +0000
Manifest this update: Thu 16 Apr 2026 20:43:40 +0000
Manifest next update: Thu 23 Apr 2026 20:43:40 +0000
Files and hashes: 1: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl (hash: GirYQvzSG7B5CWaUz9Cq2tJhBZ7dIRDpvw5+MwF15yk=)
2: 3791632A030011EB909C3244C4F9AE02.roa (hash: XDxzL6lCljcaL+PFu7uqMJYwZnreyNdPjBF2CgcbiTk=)
3: CC08667A7A6011EB9BC9937BC4F9AE02.roa (hash: 8w0OkkiQMesnqjsDX17pMHO1P+oif+rNa46fjPHMrwM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl
rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:43:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2150 (0x866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3AF8, serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682
Validity
Not Before: Apr 16 20:43:40 2026 GMT
Not After : Apr 23 20:43:40 2026 GMT
Subject: CN=69e149fc-1067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:d5:1e:67:7d:fe:32:9c:a9:f4:60:97:01:
b4:b7:ad:41:89:4c:be:19:f6:3f:41:c5:60:f0:97:
68:93:e7:b7:0c:62:c1:27:c0:e5:a9:27:52:d2:d5:
27:86:49:1c:64:1c:85:7d:ee:47:02:8f:f7:aa:00:
eb:db:ad:b0:3d:29:d5:80:03:ed:5e:21:cd:aa:e4:
38:07:75:60:cb:f3:60:9a:3c:d8:d6:ac:dc:13:0f:
8d:89:75:6f:6c:f2:d7:7d:0b:50:11:93:50:59:48:
1b:e8:e2:c4:24:a8:c1:36:64:03:b5:0d:fc:dd:90:
82:15:7d:65:19:05:6b:d9:96:0c:0f:73:b5:c7:cf:
c8:b7:bf:de:fe:62:e5:4e:25:9e:aa:cb:bd:b0:eb:
c2:ab:79:3c:47:0d:d7:fa:77:03:e5:4e:11:83:43:
08:8b:d6:7d:c9:2f:43:f6:d6:2d:54:c1:cd:ff:49:
e7:78:c9:1c:55:c2:1e:30:b0:c2:4a:05:77:04:ec:
0f:d2:6b:fe:f0:3b:a1:68:78:bb:e3:14:90:e9:d1:
66:75:b2:bb:9a:3f:4c:83:d5:8e:e8:85:26:b0:ff:
12:44:13:5d:b3:60:5f:c9:be:97:59:ae:59:e4:9a:
67:e9:c2:36:8c:a1:77:3a:99:0b:91:bb:8f:de:3e:
6b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:80:3A:2B:CC:AA:62:30:27:09:04:9F:8C:A0:9A:A4:AF:B5:EA:EF
X509v3 Authority Key Identifier:
keyid:53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a9:0e:98:52:9b:ce:a6:1b:e9:60:a7:1d:ed:6b:63:12:da:
b6:ea:75:bf:98:22:90:bf:b9:be:f5:f4:3c:75:4e:24:e8:b1:
7d:c2:07:e3:14:2b:a0:22:d8:c6:b5:6a:40:f2:a5:e5:e4:20:
d4:23:a8:62:4d:11:cd:c9:cc:ae:4d:ee:8d:c6:9b:75:39:1d:
0c:79:06:e2:b4:f8:e9:19:b4:67:6f:9a:e7:73:db:2b:42:80:
52:dc:d5:08:77:4b:22:92:ed:1e:62:42:fb:b1:82:8b:a7:13:
a9:ab:3e:fa:84:be:ab:e5:8b:e0:e2:35:ed:9e:18:67:8f:32:
25:48:d7:4d:73:ec:b0:57:d6:de:22:5a:16:b4:97:c9:cb:a8:
ba:55:1b:b2:26:53:ac:31:09:58:6a:74:64:fd:8e:dd:b6:cf:
67:a1:39:d4:92:7b:b9:59:b4:86:94:c9:67:e9:66:f5:3c:81:
ee:9e:8c:1e:44:27:29:2a:f6:57:0a:9d:b6:e0:7e:5f:cb:14:
95:2f:eb:a8:ba:5d:24:52:0a:a9:9d:87:0d:dc:f0:cd:f0:90:
d6:90:c1:42:be:6a:bb:a5:0a:64:58:28:32:1b:81:5f:b7:42:
88:67:79:88:5b:5f:d9:7f:40:34:3f:62:be:35:67:b5:24:12:
1f:2b:b4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:24:24 2026 by rpki-client