
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
File: uH-tZU7EIXxlANDwaxm-MZ09rfc.mft (raw, json)
Hash identifier: D/CvYGwJxKs2OgN0htKtmjVtpPTVk3Tgh3VuNWF9Gvg=
Subject key identifier: EC:82:2A:0D:F2:1A:9C:DC:88:B0:15:89:DD:48:75:28:4B:99:F4:0E
Authority key identifier: B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
Certificate issuer: /CN=A9155725/serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
Certificate serial: 013A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
Manifest number: 012B
Signing time: Fri 23 Oct 2026 06:17:14 +0000
Manifest this update: Fri 23 Oct 2026 06:17:14 +0000
Manifest next update: Fri 30 Oct 2026 06:17:14 +0000
Files and hashes: 1: uH-tZU7EIXxlANDwaxm-MZ09rfc.crl (hash: M9RzVcb9SMeAU9CtCqgqFlkG0sCLv9V45CqvOe9mtVw=)
2: 75A4B2D4084611F08BEB2E2DC4F9AE02.roa (hash: YxGLaTIXF5/4zegk0ebGTbG3KkMe3GF8/cFOY/M/JZM=)
3: 7621BEA0084611F08BEB2E2DC4F9AE02.roa (hash: ekv9lLMJowy0tTt5Vgk8NN5c2QvrR8UHcRzo+mWEFnI=)
4: 753F0588084611F08BEB2E2DC4F9AE02.roa (hash: GvdeGH0sSCGiMmyFpeTDGYKnqtnBqjejK6ik65LVhK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl
rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 06:17:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155725, serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
Validity
Not Before: Oct 23 06:17:14 2026 GMT
Not After : Oct 30 06:17:14 2026 GMT
Subject: CN=6adafbea-63b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:7b:91:17:fa:29:eb:55:0b:85:80:b3:18:
a6:3f:ed:43:23:ee:0e:d2:0a:98:73:83:17:4e:71:
d8:1f:2b:09:3b:37:44:ba:24:14:12:ce:92:62:e5:
46:20:96:74:5e:22:bd:b0:b0:88:f8:25:40:82:c3:
cf:ec:a2:68:ae:a6:67:44:45:49:77:e8:27:b2:1e:
58:0c:b8:58:00:a9:a7:12:08:fa:0d:21:65:81:d5:
92:be:f8:8a:58:06:57:d7:84:92:c1:79:47:26:81:
85:6f:40:ea:82:28:cb:f5:d3:cf:1a:5f:77:3f:67:
61:0f:23:59:41:0c:e0:7a:88:5a:fe:71:80:d5:a0:
7e:f3:22:90:11:d9:26:3d:a4:36:04:2c:0c:b7:5e:
bb:f2:8d:40:b9:e9:53:42:98:2f:bf:9a:d5:16:17:
0d:af:d6:89:d5:b9:cf:d8:6d:cb:8a:35:52:bf:5d:
48:4d:9c:d8:3e:df:6d:f8:ab:37:1a:be:6b:93:40:
88:2d:7f:27:9b:cb:e1:82:fb:4a:38:2b:94:af:a9:
91:65:ba:29:f9:a8:88:b5:28:c6:0e:1e:6e:1c:ba:
80:60:e5:4f:92:e6:df:b7:56:d5:a0:02:96:11:9a:
3a:10:19:46:f1:cd:b4:13:01:97:f0:f0:6b:6a:1a:
31:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:82:2A:0D:F2:1A:9C:DC:88:B0:15:89:DD:48:75:28:4B:99:F4:0E
X509v3 Authority Key Identifier:
keyid:B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:ec:72:30:5f:16:79:99:40:07:20:70:15:83:d1:5d:ee:80:
93:17:c1:ef:ca:68:76:e3:bb:4d:5b:ab:e9:6a:9b:57:82:d4:
40:05:08:56:55:cb:d3:84:96:b1:26:b8:4c:78:69:93:48:25:
58:94:72:27:e9:3a:f7:b5:f1:41:db:01:58:9d:56:49:e4:2a:
ae:9a:ba:6e:24:02:3f:68:78:b6:e8:5d:77:b9:b4:49:8a:30:
00:09:6c:67:d9:5b:f5:4b:6f:b2:fe:a9:1f:78:23:cd:6b:40:
58:50:23:12:bd:84:95:64:48:24:a5:05:74:2d:5e:83:b3:cb:
16:f9:ce:de:8f:e8:31:25:79:e0:34:c3:31:fe:a7:01:64:d3:
75:e1:d2:bc:99:f3:61:8a:82:cf:11:c7:88:fa:bb:b7:45:48:
2a:cf:5e:44:56:0b:1b:69:16:be:f6:68:23:3c:a2:43:6e:8a:
0b:68:fd:54:01:62:ac:c4:75:85:64:92:4f:72:cc:3f:00:78:
11:23:80:ad:e1:8d:2f:16:d0:f0:9b:90:05:16:bf:23:d7:3d:
c9:4a:9b:79:14:fd:dd:e3:54:8d:75:b3:b1:42:2d:a3:57:c6:
5e:f9:0b:63:45:a2:91:5c:75:9a:26:8e:65:f7:09:f5:78:01:
a8:8b:25:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:15:27 2026 by rpki-client