
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft
File: k-ucLPZOblbp6NVWzMompR6L26A.mft (raw, json)
Hash identifier: kzoXlLjndaiCH+dq7m5ZC3eSiNyvTZv4CPV6auRx4g4=
Subject key identifier: D1:E7:B4:99:46:4A:B9:9A:CE:62:76:65:04:2C:0E:B0:31:3F:C5:24
Authority key identifier: 93:EB:9C:2C:F6:4E:6E:56:E9:E8:D5:56:CC:CA:26:A5:1E:8B:DB:A0
Certificate issuer: /CN=A911FBDF/serialNumber=93EB9C2CF64E6E56E9E8D556CCCA26A51E8BDBA0
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft
Manifest number: A4
Signing time: Sun 05 Apr 2026 06:41:50 +0000
Manifest this update: Sun 05 Apr 2026 06:41:49 +0000
Manifest next update: Sun 12 Apr 2026 06:41:49 +0000
Files and hashes: 1: k-ucLPZOblbp6NVWzMompR6L26A.crl (hash: irEYgxdMS1mojOPXNMImvw//5L7WLNms8u4AOdBAMsc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.crl
rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FBDF, serialNumber=93EB9C2CF64E6E56E9E8D556CCCA26A51E8BDBA0
Validity
Not Before: Apr 5 06:41:49 2026 GMT
Not After : Apr 12 06:41:49 2026 GMT
Subject: CN=69d2042d-1e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:68:19:de:fb:30:4f:eb:0f:ac:84:0d:ca:
5d:be:6c:a8:ed:fb:a3:6a:7c:a1:74:64:5e:2b:4b:
61:05:68:81:35:18:3d:b1:30:5e:e7:a8:62:c5:1f:
5a:88:f1:62:9c:d4:51:44:25:c0:84:61:fc:67:56:
23:78:fc:cd:f8:ea:f5:94:71:0d:c2:a0:b6:a9:1e:
3a:f8:9e:9b:9a:d0:f2:8c:79:a0:b4:f2:6d:09:1f:
49:f2:7f:37:03:0d:3b:3d:77:8b:89:ab:b5:61:aa:
be:00:65:4e:2b:69:a3:4a:5b:86:af:77:37:17:31:
4c:0b:e5:d7:b8:70:1a:2a:99:3d:8d:69:f3:79:6d:
12:fb:85:5f:c2:28:11:bc:5f:88:66:9d:6b:0b:aa:
43:d1:ba:a5:fd:6c:e0:99:15:40:a4:0a:43:99:4e:
ae:53:1d:d8:13:1a:c7:9b:6f:d6:26:44:ac:ad:5f:
cc:14:52:83:2f:0a:7d:16:39:07:3d:02:62:8d:bc:
a5:ad:ba:4a:68:47:d8:5f:2c:81:e6:a8:e3:08:46:
e7:40:80:af:cb:50:64:84:bf:86:06:88:b2:a8:a1:
8b:f0:56:06:f3:e8:a2:5f:62:25:9b:23:83:25:83:
26:c7:1d:ce:53:e7:ca:62:b4:d0:b8:c1:db:3e:d7:
7d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E7:B4:99:46:4A:B9:9A:CE:62:76:65:04:2C:0E:B0:31:3F:C5:24
X509v3 Authority Key Identifier:
keyid:93:EB:9C:2C:F6:4E:6E:56:E9:E8:D5:56:CC:CA:26:A5:1E:8B:DB:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:63:63:0b:47:fa:99:e0:14:77:39:b7:31:b9:29:28:2d:ef:
46:25:c3:dc:64:20:69:d8:ae:b6:e1:cc:89:0a:ad:57:53:b3:
e0:5d:06:eb:b9:65:df:9e:c5:7b:a0:9e:74:d1:ac:e7:73:5f:
50:e4:de:f6:f1:db:09:bc:5d:64:7f:4a:55:83:08:e0:1b:f7:
3c:f5:9c:be:6c:0e:23:9a:d5:ef:b5:6b:b3:8b:61:27:2a:ea:
7e:6f:06:29:02:cb:4f:05:d2:72:91:03:1b:a9:cd:57:13:ec:
c5:d5:12:b8:cd:08:ab:c7:a9:3a:17:e1:0b:b9:47:66:96:04:
4c:aa:46:f6:2a:3e:9e:c8:a2:88:40:bf:7c:9a:28:76:69:bc:
03:82:6d:cf:7c:93:f9:c3:5c:53:24:41:2e:ae:b0:96:e1:8e:
6c:d1:4c:75:05:cb:9a:8d:e6:df:12:bf:0d:f4:50:d1:6b:fb:
5e:95:33:4b:b2:d8:1f:07:a1:30:cd:73:e8:e7:9a:46:80:55:
03:7a:f0:40:5f:42:b2:87:8a:8d:f9:d4:6f:ee:33:a6:f2:fd:
61:0d:bd:68:25:43:43:5e:9a:6c:34:59:ae:95:8f:16:e0:83:
58:33:ae:75:16:2d:e9:c7:f8:34:87:39:e6:72:20:aa:e9:a6:
4e:13:1b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 23:50:07 2026 by rpki-client