
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft
File: uf67oJzxCyh-7SzlZyKzyaDvEv8.mft (raw, json)
Hash identifier: +IPIY700RurKpBZQ2MptP9LO0KRwYrOdX96cadw7P5Y=
Subject key identifier: A0:88:BD:C5:70:96:F9:54:0D:F0:00:C8:D7:22:5F:CC:30:78:5A:F7
Authority key identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF
Certificate issuer: /CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF
Certificate serial: 0A2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft
Manifest number: 0A23
Signing time: Sat 04 Apr 2026 19:34:41 +0000
Manifest this update: Sat 04 Apr 2026 19:34:40 +0000
Manifest next update: Sat 11 Apr 2026 19:34:40 +0000
Files and hashes: 1: uf67oJzxCyh-7SzlZyKzyaDvEv8.crl (hash: d3ot6sGrtjqxM5lK3giZ+1wVtjGhJa0cbkNGHu6pncU=)
2: 27030ADA8EB211EA9D09090FC4F9AE02.roa (hash: 6oS7uBHh39uRWMxaLN591g4ue4626lq3N/zDrAaQzFc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl
rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2604 (0xa2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BB7A, serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF
Validity
Not Before: Apr 4 19:34:40 2026 GMT
Not After : Apr 11 19:34:40 2026 GMT
Subject: CN=69d167d1-ebe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6d:b3:17:7a:2b:66:44:f8:d6:8a:fd:7c:15:
d3:33:8a:dd:ed:f4:14:01:14:69:67:c5:78:cf:d6:
0d:08:5d:bc:72:1f:43:2e:c0:13:4b:aa:1d:4e:85:
b6:90:3a:75:55:75:de:e7:f2:7a:8c:be:df:0c:de:
43:f5:8f:d0:e5:d1:81:c2:9f:83:63:7d:cd:0f:50:
88:42:0b:d4:91:63:6c:60:f0:87:3d:6c:73:76:f3:
0f:96:86:c0:9f:10:2b:47:6d:59:ad:f9:87:3c:9b:
44:53:1f:98:53:b5:55:a2:c9:89:86:f4:7c:a1:62:
9e:d1:26:6e:c3:8f:0b:1f:d1:b7:7b:5b:75:47:27:
e1:c0:5b:5a:09:01:6e:82:ea:8a:ca:e9:49:73:c4:
14:d2:75:61:15:68:a0:52:5f:ae:9c:56:3a:25:c5:
38:52:6e:f3:42:7e:8c:27:95:0f:20:81:f7:38:5b:
77:65:fd:9a:85:4f:14:b3:7a:a3:d2:fc:31:5b:59:
c5:eb:b9:5d:c0:dd:2e:2a:78:44:09:02:53:36:e6:
55:e0:25:5d:7e:b5:b6:8e:96:b1:ad:cf:1a:32:c2:
3a:2e:d8:fd:37:7d:32:6e:77:13:54:32:eb:3a:47:
8a:ce:9c:24:68:59:be:53:1b:17:f7:41:44:d5:c1:
1c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:88:BD:C5:70:96:F9:54:0D:F0:00:C8:D7:22:5F:CC:30:78:5A:F7
X509v3 Authority Key Identifier:
keyid:B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:63:6e:c7:60:13:f1:f4:0d:0f:21:91:76:68:77:10:6a:c7:
5b:b7:92:48:81:24:0a:7d:e0:57:72:07:38:2f:f8:c6:2b:b1:
54:da:03:b1:ce:62:38:37:e6:a4:c2:96:80:34:25:18:79:fe:
a6:71:cf:ee:db:c2:39:23:a8:fe:74:f6:74:d2:9c:d8:8a:68:
51:49:d4:f6:b8:dc:48:7f:c0:b6:da:87:d3:d0:14:6e:fb:af:
e7:87:40:ba:5a:b8:6b:79:f7:13:8c:86:8d:41:a7:34:e2:f4:
a2:dc:bb:f4:42:ff:a5:53:0d:7b:79:61:15:6a:95:b8:26:88:
7b:6a:25:2e:c9:4e:8a:83:0b:79:6d:24:96:b0:e7:d7:43:1d:
34:4f:7e:42:da:a6:72:33:91:7d:5e:b3:2f:c8:ff:78:c0:cd:
cb:b1:84:f8:9a:dd:c2:a8:90:18:05:da:8f:8f:53:28:93:49:
26:c7:e6:e3:91:d4:64:68:13:ce:d2:4e:46:4b:fc:ac:e1:51:
ae:46:85:d9:a9:55:de:85:2c:fe:d7:50:6c:b7:16:ae:f5:55:
c2:14:40:90:45:aa:f6:45:37:92:69:34:df:f7:9d:d3:49:2e:
d7:71:1d:a8:7d:d3:bd:91:10:a6:5f:f1:a0:50:8c:57:26:d7:
e8:27:64:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:21 2026 by rpki-client