
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
File: UuFqm4muyCoM8IXPWufcPrCPDJE.mft (raw, json)
Hash identifier: WMJtlH1Ch3w2EF1iZz7UNGIW24//EXPv3pPU1KgoRYw=
Subject key identifier: 14:C1:6B:3E:4F:78:70:88:90:68:CA:54:8B:90:10:77:AF:65:B2:6A
Authority key identifier: 52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91
Certificate issuer: /CN=A915CA20/serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91
Certificate serial: 106E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
Manifest number: 1063
Signing time: Sat 04 Apr 2026 17:16:45 +0000
Manifest this update: Sat 04 Apr 2026 17:16:45 +0000
Manifest next update: Sat 11 Apr 2026 17:16:45 +0000
Files and hashes: 1: UuFqm4muyCoM8IXPWufcPrCPDJE.crl (hash: usqNBqTW5tqjQ0J1gDhdqqrpcgZ2841U6H8fpaPZIaM=)
2: 63B80D12552011E9BA55007FC4F9AE02.roa (hash: jDSrI3tiBLuiSSNFQkVfzJSHxL6tqKpe8Wp+KW0eJyc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl
rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:16:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4206 (0x106e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CA20, serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91
Validity
Not Before: Apr 4 17:16:45 2026 GMT
Not After : Apr 11 17:16:45 2026 GMT
Subject: CN=69d1477d-e438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5d:9e:4b:d8:65:44:ca:cb:11:19:d1:4e:63:
13:89:ec:b8:ec:4c:8e:30:8e:87:21:39:3b:4c:36:
73:f8:c0:1c:f2:eb:1a:81:fe:1c:37:3b:90:bf:52:
c5:98:36:34:39:a9:eb:43:7f:38:d3:d3:90:73:71:
3c:ad:89:0b:d5:5f:2b:ee:33:8e:71:37:61:c0:33:
54:6c:a4:e5:c3:39:5c:a3:c9:9a:fb:b0:31:7d:26:
cf:1b:33:3b:ea:13:e7:8e:d6:16:3f:07:d6:57:b1:
29:2b:f2:2d:40:87:e0:94:b3:0f:2b:ff:65:8e:f6:
77:25:f1:b5:1d:9b:a3:41:06:d2:ee:0d:c3:6a:c7:
f5:92:84:39:4d:62:f8:f6:89:33:f9:3c:86:74:e5:
72:bf:39:63:d6:90:14:a1:82:05:ce:c6:cf:b6:b4:
9d:71:46:3a:d4:ee:6d:48:39:c5:95:1e:d0:3d:37:
65:7b:01:94:2d:42:47:d0:57:00:20:06:fc:45:1f:
d7:53:04:e7:1a:2e:63:e8:29:fa:56:31:de:25:96:
74:4c:1a:3b:52:3e:bf:ea:c8:67:2c:a1:12:cc:e1:
08:31:6c:e6:42:d2:55:f6:3b:78:61:f0:f4:35:c6:
f7:a5:16:b4:ac:b1:8e:8c:69:fa:26:d3:f2:f6:a0:
6f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C1:6B:3E:4F:78:70:88:90:68:CA:54:8B:90:10:77:AF:65:B2:6A
X509v3 Authority Key Identifier:
keyid:52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:1e:b0:12:58:08:75:53:f0:48:7d:a0:61:6b:da:00:89:33:
01:94:a1:95:32:26:c0:c8:66:51:a1:ba:ee:9c:cf:b6:c7:f4:
c3:0e:90:81:c3:ac:71:fa:b9:9b:fc:44:65:bb:84:5d:25:83:
60:a9:68:07:0e:d9:fe:72:16:64:e8:f9:af:dc:15:a9:e3:c1:
5a:9d:72:7f:35:3d:ca:24:5f:0d:99:7e:73:1e:a3:1e:7f:6f:
78:72:3c:88:5f:58:97:77:ca:72:8d:96:1c:52:56:f5:18:a5:
44:ed:cb:54:f5:bc:26:ff:90:57:32:ee:b7:47:9d:14:6c:6c:
fc:26:23:cd:f0:5b:29:ae:ae:d3:65:6f:a7:d4:b5:db:86:bf:
41:0c:18:d9:31:7b:cb:36:2e:bd:31:12:c0:a2:35:25:90:1b:
b5:23:5f:de:21:64:28:8b:57:f6:46:81:5c:b0:df:3a:72:f2:
d9:c2:e0:79:33:c9:d6:43:9e:36:41:1e:fc:f9:51:4d:ef:78:
31:78:05:f4:2e:46:6c:a4:57:87:a4:1c:95:79:70:02:06:ab:
20:28:0c:dd:71:ed:ec:3b:ba:47:f2:65:f4:77:4e:86:60:87:
59:95:fb:a1:74:21:20:1c:b9:06:c7:6f:a4:8f:fd:64:ba:97:
c8:bd:25:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:32 2026 by rpki-client