
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
File: lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft (raw, json)
Hash identifier: uPFSiS/7TfPin8lgIkrH4OtyJHJVaVDcJ8jMlJ/AXAA=
Subject key identifier: 75:34:1F:AC:98:BC:72:FF:57:D0:31:8A:9F:9A:D9:1B:0A:98:FC:F8
Authority key identifier: 95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0
Certificate issuer: /CN=A9118749/serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
Manifest number: 011B
Signing time: Tue 21 Jul 2026 07:30:20 +0000
Manifest this update: Tue 21 Jul 2026 07:30:20 +0000
Manifest next update: Tue 28 Jul 2026 07:30:20 +0000
Files and hashes: 1: lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl (hash: n3/d+WWk6ZfHMIcSvWhJYpJ6oNs53eWGEl6r3KaeR74=)
2: 0D9D8C8CDC2311EFAEB2F679C4F9AE02.roa (hash: zpf55g2EZGmJ8domoDiH0XWR0tTe31ZdyOLgVVw44Oo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl
rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 07:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118749, serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0
Validity
Not Before: Jul 21 07:30:20 2026 GMT
Not After : Jul 28 07:30:20 2026 GMT
Subject: CN=6a5f200c-f3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:b9:f3:6f:aa:67:30:c7:7c:ad:96:5e:d4:
09:b2:ae:e8:2f:75:50:f9:35:85:00:5b:30:29:34:
e6:a0:c8:7a:81:73:e2:55:ec:7d:4c:3e:83:b6:08:
26:69:99:26:4e:e0:d7:10:1d:23:01:41:d7:c0:a1:
33:a9:2b:19:bd:d2:46:90:f9:6b:ce:4f:18:fd:46:
92:b1:bb:9c:63:0a:10:7d:cb:d2:24:14:d0:8c:01:
9a:72:48:0e:39:c3:f2:6f:78:7e:af:2b:08:76:88:
de:27:80:a4:ac:e2:31:e5:4c:8c:c2:34:41:ad:6c:
c8:ff:68:45:35:7c:96:e9:55:da:7d:fd:3f:26:3a:
ea:3a:3c:2b:2d:f2:04:ea:aa:3f:8a:cc:55:b7:bd:
b1:db:67:40:d5:47:33:d8:35:24:f7:38:ee:db:4e:
23:05:ae:38:a5:67:64:73:00:a2:b6:d7:8d:08:7c:
3b:e6:33:da:53:57:91:15:f5:da:72:ce:c6:5e:f7:
cb:2f:fc:8c:c2:4e:b4:0f:0b:c4:1c:4d:b1:22:52:
03:9b:f0:27:77:d4:6a:ce:4a:f8:1a:a9:fe:be:28:
34:fd:a5:03:44:56:4c:ae:02:cb:d8:a1:df:53:7e:
bd:f6:d9:eb:48:5d:ac:9d:40:f3:b4:9c:4c:37:e6:
3f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:34:1F:AC:98:BC:72:FF:57:D0:31:8A:9F:9A:D9:1B:0A:98:FC:F8
X509v3 Authority Key Identifier:
keyid:95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e4:89:1d:af:02:63:1e:06:d7:bd:79:3b:f5:af:1e:25:88:
fe:85:0d:20:9e:ba:0e:77:d5:61:17:a5:59:5d:3f:28:c8:ab:
8f:a4:9e:e4:ba:e5:f2:e1:53:e5:90:8b:b5:22:7f:44:e2:be:
03:7a:9d:94:9c:44:93:b6:5e:79:dd:a7:9b:b6:64:59:f2:fb:
52:40:f0:e9:c7:2f:8e:57:b8:96:cf:f0:86:85:7f:c7:45:47:
68:02:a7:0f:74:d0:71:7b:54:7a:f1:7d:8f:0d:a0:a5:00:eb:
a6:98:94:0b:7b:fc:83:99:88:c9:c8:54:af:5d:ed:b2:9b:fd:
5a:84:6e:bf:f1:90:cd:53:a0:ba:0a:08:62:8f:87:29:7b:a7:
57:d7:00:f3:a9:a2:81:98:07:2a:86:d0:2f:fa:ac:5a:12:9d:
70:85:53:50:8e:b4:bf:80:37:d5:25:6d:e5:ae:68:df:fc:f1:
c7:05:b0:ff:29:e8:8f:5a:fd:e7:92:c1:5a:d2:c9:0c:59:d0:
ed:26:c4:ef:64:d0:b3:2d:57:8b:18:a5:a3:36:87:56:a5:51:
c2:04:40:46:c9:c5:58:9d:b5:86:4c:31:87:84:16:68:0f:ad:
a5:d9:d6:3c:10:42:57:14:08:03:48:c1:03:80:c5:e1:55:9b:
2a:2c:05:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:10:52 2026 by rpki-client