
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
File: UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json)
Hash identifier: nUK/zFSK9DNCJIXeB3OoAJdalRixwVEsNER8HsjaQL4=
Subject key identifier: A1:8C:DF:62:8E:36:ED:5A:70:89:DB:CD:6D:F7:73:70:A4:7C:A5:47
Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13
Certificate issuer: /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13
Certificate serial: 0C68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
Manifest number: 0C5E
Signing time: Tue 18 Aug 2026 18:57:47 +0000
Manifest this update: Tue 18 Aug 2026 18:57:47 +0000
Manifest next update: Tue 25 Aug 2026 18:57:47 +0000
Files and hashes: 1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: cAsGHPqeDQS/UMZEaxbcu9f7aKGKGlU1iAKx0MsE1ng=)
2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: HVSrkMHkZUPuPigIBAFRqYkv/0wRB+c6OCpvUKZ3fUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl
rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:57:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3176 (0xc68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117754, serialNumber=531749095E449FD82AA1DB50DA834017230BDD13
Validity
Not Before: Aug 18 18:57:47 2026 GMT
Not After : Aug 25 18:57:47 2026 GMT
Subject: CN=6a84ab2b-6329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:65:88:d0:71:21:36:4c:9f:22:8f:6b:c5:c7:
8a:5d:05:d6:f3:a6:05:f5:9b:ab:ae:e4:a6:94:19:
1d:e9:03:46:e7:1c:2f:49:46:57:ec:7b:32:52:c4:
3a:a2:68:45:19:56:ea:9a:a7:da:31:1f:2b:76:7a:
92:75:50:88:89:f2:b5:99:3b:b2:ff:c9:c1:43:96:
61:13:d7:c2:0f:f7:9c:22:43:2a:71:54:10:24:15:
6e:fa:0f:41:95:e8:d1:bc:ea:89:5c:83:f9:fe:d6:
8e:8b:c1:77:35:0b:3a:fd:e5:14:5a:ab:ee:c2:05:
ba:48:bb:bc:ef:33:7d:38:d3:a3:17:c3:b7:2d:2f:
8a:c6:a1:0c:2c:df:9c:a3:a9:4b:3d:71:b5:73:6b:
87:60:b2:d5:16:68:23:b2:8c:46:94:f8:62:fa:10:
82:c0:3a:c3:9c:e0:0f:b3:19:ce:4d:7b:cf:2d:e2:
75:08:ad:37:ab:a7:92:78:c8:27:0a:61:57:14:ab:
89:d7:d0:d0:08:bc:f1:3f:48:60:dc:ae:10:c4:fe:
5c:1e:ab:ce:cc:97:4d:d6:9a:e6:e5:09:ba:26:d0:
fb:27:07:26:8c:48:c9:a9:12:3d:7b:2c:5c:f5:a4:
84:fb:51:25:fe:f2:a1:20:dd:74:01:77:ba:94:2e:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8C:DF:62:8E:36:ED:5A:70:89:DB:CD:6D:F7:73:70:A4:7C:A5:47
X509v3 Authority Key Identifier:
keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:6a:73:1b:f8:a4:69:cc:cb:de:56:76:09:9c:c7:40:e6:69:
cb:ff:1b:14:25:aa:a8:27:8d:5f:6f:f6:57:6c:e7:0b:8e:19:
a1:22:69:1d:8c:45:8e:98:98:db:58:e2:0b:39:b1:80:c5:5e:
cb:f9:b9:3f:6d:00:29:82:1f:1e:a1:d6:ec:45:42:0f:17:30:
6b:bc:ad:95:13:63:33:b2:f9:2b:55:1d:03:db:75:f1:47:7a:
2e:4c:cd:89:74:a5:ec:53:f5:17:fc:fb:08:ed:ea:c9:49:17:
b1:88:b6:6e:3e:19:db:52:8b:93:2d:15:16:5a:75:b9:ed:8b:
05:9f:46:3a:af:ff:f9:1f:42:0c:84:68:9b:78:ba:91:68:32:
53:b4:2f:00:46:9f:4c:45:51:df:8b:54:aa:d8:c4:22:e6:68:
22:13:da:ac:52:cc:35:6b:d7:8f:cb:4e:d5:c9:9b:27:2f:d7:
f2:11:f5:4b:3d:7b:f2:d2:2c:e5:fe:df:0f:97:a1:43:d5:d0:
66:77:d5:6a:fd:c1:b6:79:da:27:ef:19:07:ff:b8:6a:aa:73:
36:9b:86:3e:ea:e9:e7:1d:16:1c:6b:57:93:f8:dc:59:6f:38:
5f:68:2f:f5:db:52:7a:93:1d:df:ac:06:5c:75:a9:aa:1a:9b:
0e:d3:98:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:50 2026 by rpki-client