
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft
File: uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft (raw, json)
Hash identifier: Q4kGGIiDCnKiwIFrl3P6OaKPMqtsE0UiUWGtq5mMXUg=
Subject key identifier: 65:34:FB:F5:7E:F2:45:21:16:B0:A9:66:64:52:C6:81:B6:2D:2D:26
Authority key identifier: B8:22:5F:1E:B8:67:66:47:C3:59:DB:C1:10:BF:EE:DE:B4:4F:D5:E8
Certificate issuer: /CN=A9195A3D/serialNumber=B8225F1EB8676647C359DBC110BFEEDEB44FD5E8
Certificate serial: 04B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCJfHrhnZkfDWdvBEL_u3rRP1eg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft
Manifest number: 04AD
Signing time: Sat 04 Apr 2026 23:42:22 +0000
Manifest this update: Sat 04 Apr 2026 23:42:21 +0000
Manifest next update: Sat 11 Apr 2026 23:42:21 +0000
Files and hashes: 1: uCJfHrhnZkfDWdvBEL_u3rRP1eg.crl (hash: ijyR0FtJdTYXjC9k45lk8y4+nrjZTw2h7IeMwYNBb+Q=)
2: 5AFB85086EC411ECB8E7492BC4F9AE02.roa (hash: OpFOQ/Qs7pTcBKY6eGcg4iGZBHwfeCp3YAy8fBKvp0Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.crl
rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCJfHrhnZkfDWdvBEL_u3rRP1eg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:42:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1204 (0x4b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195A3D, serialNumber=B8225F1EB8676647C359DBC110BFEEDEB44FD5E8
Validity
Not Before: Apr 4 23:42:21 2026 GMT
Not After : Apr 11 23:42:21 2026 GMT
Subject: CN=69d1a1dd-a5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dc:88:80:e8:48:78:ab:43:49:6e:ba:38:f3:
c1:0a:22:b2:07:41:0a:8a:51:07:ce:13:b4:98:4a:
d9:8e:01:46:dc:69:7b:02:e2:23:a5:9d:99:6f:23:
0b:b0:d0:08:10:0b:9c:3b:e2:f0:b9:55:ad:8c:bf:
57:66:e5:d7:bd:d0:9f:59:4b:53:7d:d3:40:58:e3:
1f:61:88:dd:72:c5:ac:fb:71:bf:aa:3a:86:09:92:
c5:72:56:22:1c:ab:1e:cd:68:80:4c:32:43:43:b3:
c3:e6:0d:04:e7:ee:ae:ef:8e:85:19:69:e4:db:f0:
d7:89:f3:27:67:9a:09:dd:1a:26:45:18:a9:07:f9:
3b:9d:ce:5f:98:b0:f9:c7:c8:c8:66:b7:a9:e8:8e:
c6:28:4f:76:ee:0b:77:fa:ca:3e:22:83:e3:91:15:
ff:0f:36:8d:a2:8c:7e:32:b5:06:a4:ed:4c:7b:d3:
72:0b:32:97:cb:4a:1b:81:cd:c6:d9:0f:6d:e5:71:
4a:6c:9e:3d:65:87:35:e3:f2:e5:81:c7:92:b0:2e:
8f:3f:c7:63:59:00:ec:98:90:96:28:ac:f5:3d:ff:
b1:8c:e0:4c:c7:dc:7c:e1:73:5c:d9:10:9b:17:c7:
de:4c:98:3c:53:f6:ff:35:97:5e:ff:15:23:28:97:
12:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:34:FB:F5:7E:F2:45:21:16:B0:A9:66:64:52:C6:81:B6:2D:2D:26
X509v3 Authority Key Identifier:
keyid:B8:22:5F:1E:B8:67:66:47:C3:59:DB:C1:10:BF:EE:DE:B4:4F:D5:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCJfHrhnZkfDWdvBEL_u3rRP1eg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:4e:17:cb:8e:23:d1:5a:f4:a8:e0:45:da:e7:ed:eb:6e:41:
51:dc:5b:3f:16:42:fb:a4:c3:08:67:94:80:c7:45:dc:e2:9b:
3b:f4:e2:81:a7:46:7f:b5:87:1e:b0:cb:ef:93:a6:af:85:26:
d2:c6:de:cc:37:95:07:b2:63:42:c6:33:60:5e:f3:89:71:57:
fe:c1:46:62:76:22:56:3e:91:ec:b9:21:62:89:94:78:d3:5d:
fb:cf:a5:a1:25:1c:70:c6:09:fb:ca:90:31:5b:b6:d5:1a:32:
14:f6:26:e7:20:84:f3:61:91:41:67:2d:c8:05:10:c9:09:3e:
68:66:f7:86:5c:d7:a4:bd:d1:bd:42:1a:e0:1c:7b:fb:12:9f:
9f:36:6f:c7:c8:bc:d8:6b:38:8c:c0:07:6d:c1:03:ca:5a:73:
58:5e:f7:54:b3:9c:7a:49:7a:ca:a8:26:73:1f:13:88:ff:9d:
8f:6c:16:d5:a7:37:eb:1a:8c:a8:00:a2:9c:01:50:3a:0f:a4:
e3:fa:14:28:03:a2:90:0e:6d:c5:ae:1d:5e:b3:9b:b6:78:78:
17:d7:74:c2:cd:3d:03:bf:46:5d:43:d5:42:ef:4d:14:b1:5e:
ae:44:75:58:5d:02:4f:b9:6f:31:6f:18:30:eb:f7:7b:ed:0b:
ea:f5:68:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 03:39:11 2026 by rpki-client