
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
File: Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft (raw, json)
Hash identifier: 1i57vneHMnIoZ0J+n4p3GDHFwijzx9dzXjUlSS9+pqU=
Subject key identifier: C5:40:69:8C:EC:A8:6A:17:BA:EB:2C:E6:A6:70:38:4A:BC:E3:92:57
Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B
Certificate issuer: /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
Certificate serial: 0C47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
Manifest number: 0C3E
Signing time: Mon 02 Mar 2026 02:20:18 +0000
Manifest this update: Mon 02 Mar 2026 02:20:17 +0000
Manifest next update: Mon 09 Mar 2026 02:20:17 +0000
Files and hashes: 1: Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl (hash: 7huNukipOHQLO+MAlXzP+T9d/1t1K2e/vs+okfxwTzc=)
2: C7F8C83C217311EA93A29F82C4F9AE02.roa (hash: zVKPBOvgf5ZBPV/BL1nd0Q/b/L3Ds0nzM2EgbZq2Spo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl
rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:20:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3143 (0xc47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9C95, serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
Validity
Not Before: Mar 2 02:20:17 2026 GMT
Not After : Mar 9 02:20:17 2026 GMT
Subject: CN=69a4f3e2-0532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:55:44:b9:87:45:59:67:7d:6a:6c:b6:90:05:
1f:e3:71:dd:80:7b:2c:96:c4:40:aa:a5:f2:71:92:
36:0e:66:14:98:71:a3:76:70:ac:19:a8:29:cb:11:
01:c3:a3:73:2b:32:da:ad:86:68:d1:19:cb:6c:21:
13:03:ca:c0:d0:6b:53:45:c9:bc:b6:ef:77:e4:e8:
97:8a:93:a8:8b:68:d6:3c:65:99:93:83:27:3c:e2:
83:66:b5:ed:91:15:77:3e:06:0c:c3:d8:eb:cb:a2:
db:66:ec:2f:48:f9:cc:b9:19:e4:aa:90:b9:24:d9:
2b:d7:ca:c8:bf:e2:95:22:91:d3:b9:96:db:5f:9a:
4f:4b:54:fc:2f:bd:9b:a4:f3:eb:59:3a:d6:e4:63:
16:e5:d3:e4:ee:e6:f2:6d:bf:94:d5:d7:46:43:d4:
72:0b:2a:65:37:a5:31:54:13:65:2a:c3:97:12:f0:
24:0b:72:0d:9c:32:99:77:85:7c:a8:33:d7:d8:33:
65:43:6c:4d:19:e1:07:f5:90:2a:4d:45:57:f0:47:
fe:33:bc:61:8e:58:e0:2b:51:d3:c0:b6:e2:9e:18:
ce:77:bb:0e:e0:50:b7:39:56:66:af:a3:1b:7d:6a:
f1:c9:15:43:b5:5b:23:6d:da:ff:84:7f:45:73:af:
2a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:40:69:8C:EC:A8:6A:17:BA:EB:2C:E6:A6:70:38:4A:BC:E3:92:57
X509v3 Authority Key Identifier:
keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:38:5f:88:36:10:3e:72:88:c9:64:fa:5d:b8:cb:53:21:ba:
f6:e7:0a:64:26:4b:3a:c2:ec:c1:37:09:b7:8a:e1:1c:04:4a:
2a:99:c9:8a:4d:01:b4:53:52:5f:60:76:21:ff:c8:76:d7:b1:
92:ab:ca:b7:b1:93:42:90:85:06:b8:b8:a4:a3:d7:c0:4e:a4:
7a:36:11:6b:c4:1d:43:1d:06:5f:47:73:cf:98:8a:24:9d:2c:
9b:10:2f:8b:6a:d4:d2:d3:55:cb:22:42:9f:7f:5e:1d:5f:06:
79:0b:eb:80:26:2b:37:86:ef:6e:86:40:aa:a2:ec:d8:88:dd:
64:b0:e3:03:ed:ae:1f:fe:76:85:3e:97:f4:45:bf:12:f5:3b:
f5:ce:3b:b5:4d:bb:ee:10:bc:ea:cb:70:1d:b3:2a:5f:aa:3e:
0b:c3:b9:c0:f4:1f:7a:77:a2:d5:59:8e:52:bc:da:f4:4f:0d:
e4:83:54:19:50:5a:d0:9d:5c:f2:1b:30:84:4a:64:5e:cc:3d:
c5:3e:1c:f8:e0:bc:bd:f9:2c:6d:38:b4:1d:16:82:d3:22:18:
2b:f8:c5:65:9c:22:8a:4f:af:b5:06:a5:bd:54:10:22:5c:0a:
2c:17:91:ee:f7:9c:bc:45:cb:1b:2f:18:d6:35:84:e4:43:50:
b8:70:d6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:46:58 2026 by rpki-client