
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
File: uNk1BsinkdH5_6W2fDiBbdwD7ms.mft (raw, json)
Hash identifier: 5FY3eYITo2ORuW8DeK3rswdn3yV5vD8XcMS0uOPrIzI=
Subject key identifier: 7C:14:AE:F2:07:17:FC:C0:63:BD:99:EB:A8:EB:6A:DD:74:48:C3:BF
Authority key identifier: B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B
Certificate issuer: /CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
Certificate serial: 0AED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
Manifest number: 0ADD
Signing time: Sat 04 Apr 2026 19:14:56 +0000
Manifest this update: Sat 04 Apr 2026 19:14:55 +0000
Manifest next update: Sat 11 Apr 2026 19:14:55 +0000
Files and hashes: 1: uNk1BsinkdH5_6W2fDiBbdwD7ms.crl (hash: b8cZxQWKWbq0W6sme7tdsGmwmkqsLd0CKhmve1Ey8/Y=)
2: C60C2764185011F1A18A69DF283D8C67.roa (hash: I8olMC5CQ8v8CUELDXLaq2KV7YbR8LxPwnwv5RnxsQk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl
rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2797 (0xaed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110DEC, serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
Validity
Not Before: Apr 4 19:14:55 2026 GMT
Not After : Apr 11 19:14:55 2026 GMT
Subject: CN=69d16330-3776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:fe:eb:49:7a:8f:27:27:7c:2b:d3:1d:02:
d9:d6:bc:25:bc:ba:d6:dc:4d:56:ac:f9:32:74:7f:
51:9c:dd:c9:97:5c:92:14:75:87:1b:74:f7:ae:0f:
d9:4c:74:0d:50:6b:4b:01:b3:66:ef:2f:1e:ee:15:
a3:48:f6:85:e2:54:a9:b6:d6:5b:47:2b:c7:9f:26:
0d:58:d4:6b:c6:c7:bb:b2:d9:70:d1:56:d1:53:f9:
38:ac:30:e4:fa:43:25:d1:61:29:0a:d8:3b:72:8a:
5c:ee:d4:2b:98:39:19:67:93:21:4d:ae:3d:85:53:
8a:0b:e5:70:6e:11:b9:e1:2d:17:4a:b8:7e:92:65:
de:da:91:bc:74:9a:17:fd:67:57:bc:a2:82:4f:c4:
a1:93:2e:b9:98:2b:ed:a0:f5:d1:87:2b:af:f5:dd:
2c:89:27:19:1b:19:b3:df:4a:35:bb:08:a6:1c:fd:
f3:12:44:ed:cb:43:46:ff:92:0f:fe:5d:41:1f:17:
13:fd:43:d4:fd:8b:b2:04:aa:59:01:13:d9:80:8c:
46:bc:f7:1b:54:10:fc:91:13:ae:ac:f5:b4:d8:96:
05:97:d9:67:60:4b:e3:6d:45:eb:23:e5:e8:c5:66:
7b:ac:97:e7:62:6a:ff:f1:07:9e:5d:49:4c:87:2a:
3c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:14:AE:F2:07:17:FC:C0:63:BD:99:EB:A8:EB:6A:DD:74:48:C3:BF
X509v3 Authority Key Identifier:
keyid:B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:70:85:66:93:85:f2:67:33:51:94:ab:6f:5b:c5:ad:81:df:
9c:80:cd:0b:ae:dd:c7:bc:34:04:b6:7d:3f:88:80:3a:79:6e:
1a:6c:84:55:f6:3b:10:65:6f:d6:85:f7:84:4b:13:e9:fa:12:
61:c5:96:62:f5:36:5d:ff:1d:8b:5f:7c:f1:5f:21:a2:a7:86:
65:7f:0d:36:74:1d:de:ce:3c:52:fb:d5:dc:d4:22:e5:fc:9e:
36:b6:68:7d:58:e2:63:4d:15:be:dd:51:1d:8d:5e:76:2c:d1:
be:ed:8b:74:bb:36:e2:08:68:7b:94:d9:a9:f3:ff:b4:93:b1:
d3:5f:45:a7:66:be:67:fb:23:a0:3d:86:7a:d2:f7:4b:5b:cd:
c3:b9:83:45:31:dc:d3:05:75:3e:94:81:dc:8f:4c:2c:39:c1:
38:72:b6:eb:76:df:b6:18:03:8f:ee:4e:c4:ce:32:32:b8:12:
f9:39:41:85:fa:4f:eb:ca:f6:c1:64:39:d5:a7:c1:f9:06:7b:
46:a1:2a:14:f7:64:a0:ab:8e:b3:ee:b3:e8:f8:d7:65:26:d6:
cb:ce:d9:b2:49:6b:29:45:10:df:ad:96:6f:d3:dd:d1:ab:19:
4c:31:1f:18:de:01:02:76:2e:0d:bc:20:a5:9f:e3:dc:fd:ad:
49:27:55:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:33 2026 by rpki-client