
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
File: UgupTND7nnwUDfvAzFi5PPVMIvM.mft (raw, json)
Hash identifier: KlEXgoJM85KCjXfoKqO7AYrUQtqOJpBmeh4RI1I0ORo=
Subject key identifier: 47:F3:ED:43:EC:8E:73:D5:25:F5:2B:E4:8D:FC:2C:28:FD:EF:91:3E
Authority key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
Certificate issuer: /CN=A91F8981/serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
Certificate serial: 0117
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
Manifest number: 0115
Signing time: Sun 01 Mar 2026 06:54:36 +0000
Manifest this update: Sun 01 Mar 2026 06:54:35 +0000
Manifest next update: Sun 08 Mar 2026 06:54:35 +0000
Files and hashes: 1: UgupTND7nnwUDfvAzFi5PPVMIvM.crl (hash: UVBuvk/+ql9p+sM467EepGUNyZO89NBb51dtlzrCST4=)
2: D79D112E6C7F11EF92105459C4F9AE02.roa (hash: taSipunEH/A4JKib1d15PbUF8sLm4qJrajeTCDOlA48=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl
rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:54:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279 (0x117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8981, serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
Validity
Not Before: Mar 1 06:54:35 2026 GMT
Not After : Mar 8 06:54:35 2026 GMT
Subject: CN=69a3e2ac-4a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:e0:35:0c:a6:39:71:ff:4f:fb:cd:38:99:
f0:59:0c:44:56:6d:dd:04:32:c1:75:f3:f8:81:2d:
ef:fe:03:26:df:3e:f9:ff:4e:81:93:fe:b5:44:2f:
16:39:c9:1f:22:c4:da:eb:eb:28:c5:db:6e:a1:6d:
af:94:8f:0a:5d:20:09:a8:4a:9f:2e:05:b3:50:74:
6d:0e:3d:34:e2:a7:91:7b:cf:7a:e7:14:67:49:66:
21:3e:e8:c0:50:94:36:5b:80:ae:2f:60:71:61:86:
4d:5f:ff:e6:c3:94:e4:47:63:13:b7:19:9b:cd:2e:
92:90:fe:15:74:11:af:89:3f:6f:f1:71:9a:16:c6:
76:28:f1:67:4b:6b:c3:94:2b:fb:53:cb:cd:04:bc:
ac:8a:8a:62:7f:23:34:46:2b:10:30:cd:34:5f:a3:
5a:7d:25:ac:39:60:a5:4d:d8:85:04:28:19:6a:a4:
72:21:3b:ee:82:a0:8d:e1:45:30:7d:35:df:b7:47:
f1:9f:3c:f5:a6:ee:85:0f:02:6d:cf:ee:47:38:3f:
fe:29:7f:37:69:11:7f:1f:14:2b:47:63:05:f4:a0:
c1:35:1f:6b:79:98:f8:7b:2c:d8:71:99:5d:ca:aa:
5b:61:c7:d8:d0:e5:1a:eb:c0:e9:2e:7c:e0:c2:f2:
c6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F3:ED:43:EC:8E:73:D5:25:F5:2B:E4:8D:FC:2C:28:FD:EF:91:3E
X509v3 Authority Key Identifier:
keyid:52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:b7:3c:24:4d:b9:8e:35:1f:d5:6c:bd:1c:85:ca:30:22:9e:
09:2a:7f:b2:5d:04:47:57:69:75:90:d1:8c:d0:c3:cf:ab:2f:
a7:59:9e:19:45:58:16:e5:db:c2:06:c0:01:84:5d:06:31:f9:
e7:1b:0f:32:fc:fe:0b:02:35:8d:f3:0e:31:48:23:22:a7:3f:
d9:9e:a9:94:03:aa:f3:23:97:db:28:58:86:1f:dc:b4:31:2c:
4b:5b:9c:12:f3:e4:ae:13:c5:93:fc:f4:47:2b:c8:35:9a:f4:
97:1b:dc:ec:3f:7e:b7:21:21:fa:35:bd:39:18:dc:7a:c9:af:
f4:1d:15:fe:b7:c2:e9:6f:a6:ed:f3:61:14:63:2f:ce:ea:07:
f7:b2:65:18:20:07:8d:ce:05:28:50:77:06:6a:e0:e3:a4:19:
3c:ae:fa:5c:77:bb:6f:fb:d9:1c:c4:ab:30:98:54:93:7d:97:
da:75:3d:3c:5c:08:d4:43:cd:6f:93:20:ac:0d:55:d3:cf:87:
73:98:1d:3d:cf:49:98:89:34:f7:d6:25:57:a1:bf:c9:c8:1a:
a8:76:2d:6e:71:0e:71:dc:b6:d8:08:42:86:d8:f0:36:4a:7b:
0f:79:fa:ec:92:9d:c0:40:6c:6c:fa:35:79:54:a3:0e:d5:22:
9e:42:1e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:16 2026 by rpki-client