
$ rpki-client -vvf rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft
File: UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft (raw, json)
Hash identifier: 7t1Vyx9UhwUobsPsONMNxTSXMgaYg6kVloNqU/+g4ac=
Subject key identifier: 55:B0:54:71:44:AA:68:C2:43:A8:A3:C9:D6:30:2C:A6:84:ED:0B:E2
Authority key identifier: 52:1B:06:C2:91:10:28:4A:AA:FE:08:75:AA:61:86:B0:00:6D:27:67
Certificate issuer: /CN=A911902E/serialNumber=521B06C29110284AAAFE0875AA6186B0006D2767
Certificate serial: 06B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft
Manifest number: 06AD
Signing time: Tue 04 Nov 2025 22:20:51 +0000
Manifest this update: Tue 04 Nov 2025 22:20:50 +0000
Manifest next update: Tue 11 Nov 2025 22:20:50 +0000
Files and hashes: 1: UhsGwpEQKEqq_gh1qmGGsABtJ2c.crl (hash: aErQtbK4Y41oGkJfv7uyDkfhFlMQTCCS7o2CzHaDbw0=)
2: C3FEC56C855711EB871D267FC4F9AE02.roa (hash: pn41QbwI43rxSeVr0SInvG6/Q6c7Gj04UiR8iNhF0jM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.crl
rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1718 (0x6b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911902E, serialNumber=521B06C29110284AAAFE0875AA6186B0006D2767
Validity
Not Before: Nov 4 22:20:50 2025 GMT
Not After : Nov 11 22:20:50 2025 GMT
Subject: CN=690a7c43-e9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:d2:f5:5a:3e:be:4b:78:a9:10:39:2c:35:
82:b0:9f:40:be:d3:c2:a3:06:a3:77:0f:71:19:c5:
39:63:c9:64:66:f1:23:8c:da:f4:7b:55:1b:6f:c4:
f5:c5:59:37:35:0f:19:6d:10:d0:6b:21:35:b0:79:
0d:e6:9e:19:6f:22:e2:29:8c:e9:57:93:39:64:1e:
40:fa:20:bc:69:1a:72:99:98:8b:ac:6f:41:e1:b6:
6f:01:a3:9c:60:0b:7c:67:0e:bc:2c:a7:5f:77:4a:
94:aa:c7:ab:f0:bd:83:92:50:c8:e5:79:db:6e:50:
c1:f3:2b:d0:3e:23:d3:8a:02:28:ab:cd:2c:af:4a:
aa:cd:92:34:5a:94:4c:2e:a6:4f:33:c8:ce:45:d3:
f3:ea:3c:8b:04:44:94:98:b6:9f:e7:fd:7c:9d:f9:
c4:69:46:d0:5c:65:36:a1:1b:3d:7c:08:78:48:ad:
d9:ee:21:fe:fd:cf:c5:96:ce:e3:2d:6a:b5:0f:49:
70:89:d1:ad:01:3b:5c:4a:57:36:9b:d6:9d:b7:da:
14:a3:19:6e:6f:f1:aa:26:3e:34:35:72:89:fb:11:
60:1a:d2:31:13:c9:1d:c5:25:5c:70:66:ab:77:7d:
e0:25:b2:fe:f6:f2:71:e1:61:88:3d:f2:9b:39:02:
02:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B0:54:71:44:AA:68:C2:43:A8:A3:C9:D6:30:2C:A6:84:ED:0B:E2
X509v3 Authority Key Identifier:
keyid:52:1B:06:C2:91:10:28:4A:AA:FE:08:75:AA:61:86:B0:00:6D:27:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:b5:5b:ba:9b:33:9b:dd:ef:5b:4f:df:c5:ad:91:d0:41:fe:
d8:90:63:f7:a1:85:17:a4:27:46:60:7a:b5:94:2e:ef:58:3a:
ef:36:e0:be:3b:75:d2:16:aa:77:52:3a:dd:b3:97:83:68:da:
47:2d:a9:3a:4a:74:a6:30:03:77:88:2b:9c:90:8b:b8:07:87:
ff:89:24:b9:d8:70:de:aa:6c:af:bd:1c:56:6b:b4:38:21:c7:
f1:cb:7d:9c:7d:dd:a2:95:c8:ff:be:06:5a:b1:10:a0:75:34:
d3:f6:8e:4c:31:39:fd:c3:71:84:f3:4b:0c:3a:37:15:0a:f4:
af:29:68:0f:72:c9:90:a4:be:5e:08:99:da:e3:23:42:8a:48:
25:44:71:25:81:1c:17:51:d2:9b:69:9c:3e:31:27:97:ce:cc:
92:b8:ad:26:2a:98:e1:b8:02:92:65:71:e5:1c:cf:0e:0c:8f:
9e:12:9c:78:c0:dc:17:29:e5:79:1c:c3:65:2c:6e:41:60:15:
3b:3b:61:72:37:6d:a7:f0:b4:a9:54:f0:f3:85:11:86:f9:21:
d9:4a:47:10:34:dc:3a:87:0f:73:d9:f4:f7:4d:b0:83:a0:7a:
58:ce:96:e8:4f:85:f5:fd:61:95:3e:85:dd:f9:2b:6d:b4:93:
24:36:8f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:28:37 2025 by rpki-client