
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
File: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft (raw, json)
Hash identifier: RgwniFo2V2qGQyJjZU5jPOnnA2YwdEYv3vYeAOiX2aA=
Subject key identifier: 51:54:09:FD:B2:E1:5D:1C:D4:E6:DB:E3:30:74:5C:5C:F1:57:40:95
Authority key identifier: BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4
Certificate issuer: /CN=A9189122/serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4
Certificate serial: 0256
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
Manifest number: 024F
Signing time: Sun 05 Apr 2026 01:54:35 +0000
Manifest this update: Sun 05 Apr 2026 01:54:35 +0000
Manifest next update: Sun 12 Apr 2026 01:54:35 +0000
Files and hashes: 1: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl (hash: G7/taOR9VIaw0qPhd+1dX8Lp3/du+dZmnwSE8KPQV8Y=)
2: 9E8DB380B2C611EDBC366A1DC4F9AE02.roa (hash: TBwg76n32/ryDvqpMLdIBy5r0D9A4uQdrgYb0AHqYNc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl
rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598 (0x256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189122, serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4
Validity
Not Before: Apr 5 01:54:35 2026 GMT
Not After : Apr 12 01:54:35 2026 GMT
Subject: CN=69d1c0db-82ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:07:83:c0:4d:8f:8c:d1:e2:12:48:f2:ec:
25:56:75:29:31:52:b8:bb:2e:61:67:26:27:72:f6:
75:86:2e:94:70:4e:83:e0:be:da:fa:ab:3e:13:c9:
35:ea:42:bf:92:f6:95:f6:33:5a:93:94:51:c5:1f:
90:e9:a9:fc:58:3d:2d:24:da:77:b6:bd:2e:ad:1d:
df:e7:9e:11:a7:27:b0:7f:7e:57:0b:9f:4a:93:bb:
65:a2:5d:76:fb:ac:a8:32:2f:48:0a:5a:e3:ad:a1:
dd:00:3c:27:af:16:26:a2:1f:44:9b:e5:f2:aa:04:
44:f9:c0:35:5c:ac:34:f1:48:33:d7:5c:28:c0:dd:
5c:aa:48:04:ed:de:59:73:57:95:7c:58:f5:72:81:
43:49:d9:8c:f5:96:27:c4:38:11:f8:2c:45:e7:a9:
d0:93:5f:33:8f:d7:7f:97:b1:12:61:06:38:5d:f2:
52:f0:c4:a8:3d:8d:95:93:f4:3f:ab:30:c9:95:5c:
de:21:22:0c:de:cc:bf:17:aa:7a:41:c5:95:fe:bf:
c9:f6:22:73:b3:ad:1d:9c:be:41:a6:ff:2d:4e:bf:
27:24:e2:00:b5:ee:38:c1:bb:e1:07:74:f1:20:e3:
c1:3d:c6:d6:86:1a:52:e6:cd:3e:73:2b:78:9a:df:
24:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:54:09:FD:B2:E1:5D:1C:D4:E6:DB:E3:30:74:5C:5C:F1:57:40:95
X509v3 Authority Key Identifier:
keyid:BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4a:9c:c8:85:4a:6f:82:32:77:75:42:ae:b5:2a:ab:27:85:
73:25:da:b7:64:01:fc:29:d6:3e:41:e4:41:f8:d1:07:f4:09:
e1:8f:e9:fd:24:46:15:cc:76:7a:40:46:36:24:b4:5e:ee:94:
2b:1e:26:f2:56:7f:d5:74:79:cd:3c:f2:46:e7:49:2a:a2:42:
eb:06:82:cd:70:0a:aa:98:4b:11:6b:77:18:02:29:2f:f2:67:
12:9c:14:b8:9b:36:e9:1e:36:34:b6:4f:02:15:77:48:bd:ec:
7c:12:a9:12:c5:0e:78:b5:25:61:ef:fc:bd:d0:d5:86:68:89:
c8:88:4a:1b:fe:81:af:10:de:39:dc:b7:be:b6:ee:ea:1e:65:
5a:14:11:90:86:85:d9:6f:d7:e8:a4:49:7a:6f:9d:eb:1d:af:
88:16:c4:44:51:ff:f5:c8:41:89:dd:ab:f2:82:e5:b4:10:55:
5b:37:6f:07:47:05:c5:d0:46:c5:85:05:b0:36:92:ee:7c:e6:
e2:8a:7c:46:b5:f3:68:cb:e2:dd:17:f8:d6:34:60:39:c0:2e:
44:66:56:20:bd:8b:e5:f8:93:ef:e5:f6:9c:62:36:2b:db:6b:
f3:ab:fe:16:5f:14:68:27:e7:0d:ed:80:19:0d:a9:ac:78:d8:
5f:3c:a5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:03 2026 by rpki-client