
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
File: xUK94Lg0fDed4d4dgkOpLLlMh00.mft (raw, json)
Hash identifier: /0RCkRjvD/xM+cmZerLLq6M0fVV2HMnF1bDDuecXES8=
Subject key identifier: 16:F5:FA:B4:74:2C:D8:1A:C3:97:AB:10:4B:9D:84:38:32:94:2B:B9
Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D
Certificate issuer: /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
Manifest number: 0192
Signing time: Sun 01 Mar 2026 05:19:58 +0000
Manifest this update: Sun 01 Mar 2026 05:19:57 +0000
Manifest next update: Sun 08 Mar 2026 05:19:57 +0000
Files and hashes: 1: xUK94Lg0fDed4d4dgkOpLLlMh00.crl (hash: LsNM8guvyA2Z6TVHlYobDTs9IN2lcdGJWpcBn28eQQk=)
2: FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (hash: rlUj0HWvLYRWR8L5dccxDGpfDl0LUtE4Msb9H1/d8Ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl
rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB297, serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
Validity
Not Before: Mar 1 05:19:57 2026 GMT
Not After : Mar 8 05:19:57 2026 GMT
Subject: CN=69a3cc7e-94a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:24:20:eb:87:56:6f:04:05:3f:d7:6f:12:eb:
9e:7a:41:8f:6b:05:f6:62:39:3f:4e:ea:a8:94:90:
37:ed:1a:13:14:c6:34:bf:b3:79:48:5c:bf:5c:a9:
b3:99:d8:87:70:02:86:4a:f7:99:92:87:87:e9:4a:
b3:89:6f:0e:46:ef:6f:f4:a6:a0:84:db:bf:ff:b8:
57:09:08:a0:80:00:e0:7e:e3:51:9f:f0:dd:6f:5c:
2c:b9:e1:10:3e:ac:df:de:3f:ff:bf:52:b0:2e:34:
c2:05:4f:7d:41:03:dc:72:06:fe:62:84:4a:7c:25:
de:76:69:88:0c:2b:11:7a:73:46:88:b9:81:6b:b0:
52:0c:d3:6e:a1:e6:5b:25:9b:94:a0:8f:29:40:b3:
55:f6:13:c0:e0:0f:1b:46:66:11:df:3b:fc:5a:df:
f7:83:ab:94:1d:60:42:e5:81:4a:04:ea:69:cc:97:
43:d7:3f:f4:74:5f:27:d4:af:44:dd:29:b9:60:01:
e9:e3:a5:12:a7:e7:8e:ea:3c:b6:eb:76:2c:b6:0a:
a4:47:23:72:2e:c7:8c:ac:ce:94:c8:b3:6c:98:6e:
4d:7d:05:54:55:89:87:1d:02:92:22:e9:be:9c:c4:
a1:c3:18:fc:c2:e5:1b:6c:be:ff:45:d0:c3:e7:bc:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F5:FA:B4:74:2C:D8:1A:C3:97:AB:10:4B:9D:84:38:32:94:2B:B9
X509v3 Authority Key Identifier:
keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:dc:0a:4d:50:b3:ff:ad:18:c7:f3:62:9c:34:43:11:7b:15:
4c:1a:81:40:34:f1:35:63:93:58:cb:0b:af:b9:44:62:85:1d:
4f:a0:cf:26:4b:b8:8d:dd:26:d1:fe:a3:3d:2c:6e:52:50:16:
8e:0e:78:2d:98:db:e9:00:43:f5:2c:2f:7b:c5:e1:70:86:e7:
a3:f7:50:23:29:61:3e:10:50:70:bf:2b:29:31:b7:ff:ed:06:
ca:09:f4:fb:16:dc:eb:e2:39:e3:dc:bb:ec:8d:89:f8:51:d6:
1a:2d:1b:79:be:68:1c:1c:cc:eb:96:e6:c5:f9:ab:a5:36:09:
c2:75:96:0e:05:aa:12:38:76:5f:25:b6:a5:13:0f:3a:31:1c:
8e:ae:bc:d0:da:54:df:18:92:34:3e:e9:b3:0b:0b:02:f0:17:
92:c6:38:a5:b2:2f:32:77:2b:e9:27:b4:d3:46:fb:88:3e:57:
46:13:c7:8b:ca:b0:02:7f:f9:d9:fb:ac:3d:33:ec:36:1b:95:
c3:a5:d7:e6:3a:93:e4:ae:a7:1d:15:de:c1:55:5d:56:9e:9d:
02:ab:c4:ca:b1:47:a0:e2:b4:cd:00:37:ac:c9:e3:a4:cc:84:
79:25:29:4c:0e:60:16:e0:0e:77:2e:f1:ac:d5:80:45:94:3c:
f4:c0:2f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:52:04 2026 by rpki-client