
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft
File: u-IzVg79QJs4zbgKAFdaN7qJZDU.mft (raw, json)
Hash identifier: acpJOA8mIN5EZkLl7AupKsv4ly6iLvZ9kjgVMC/oar0=
Subject key identifier: 74:F7:63:DA:E9:D2:E9:97:95:A7:25:4F:B0:A6:0D:71:83:AC:8B:6F
Authority key identifier: BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35
Certificate issuer: /CN=A911ABF4/serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435
Certificate serial: 08D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft
Manifest number: 1A45
Signing time: Wed 20 May 2026 17:29:36 +0000
Manifest this update: Wed 20 May 2026 17:29:36 +0000
Manifest next update: Wed 27 May 2026 17:29:36 +0000
Files and hashes: 1: u-IzVg79QJs4zbgKAFdaN7qJZDU.crl (hash: gFk/3xyWrrFVKGD6bSgsslQs7QlLrE5OQfbhAOLN7fM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl
rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2258 (0x8d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABF4, serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435
Validity
Not Before: May 20 17:29:36 2026 GMT
Not After : May 27 17:29:36 2026 GMT
Subject: CN=6a0def80-7e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0a:ce:2a:5f:d2:4c:8d:4a:d0:9c:f4:aa:3d:
da:9d:62:9e:d8:94:56:1e:83:7f:58:b6:ea:59:37:
71:10:93:22:35:bd:04:6a:d2:3b:ad:09:42:25:a9:
e9:39:f2:e7:a6:16:47:ae:46:fb:82:ad:db:8e:34:
4e:5f:01:f1:56:3f:26:11:a4:e9:cd:91:3a:2c:2c:
f0:f9:87:d1:6c:b9:33:93:5f:c3:77:01:14:5f:a4:
25:6d:4e:e4:34:da:65:92:3f:01:4f:58:4a:b0:11:
4b:43:03:a9:51:9d:e3:a4:0d:98:5a:a8:5b:aa:d2:
7a:6c:93:43:9b:20:f4:c3:6c:89:88:06:77:64:7b:
de:05:c6:58:c5:5b:3f:0d:ac:da:f6:b1:13:44:ad:
6d:c5:f0:2c:32:70:ae:c6:66:60:93:3a:ab:81:ed:
3d:fd:c0:e0:23:99:d8:de:a7:f3:a8:df:18:2b:65:
78:9c:fa:73:d1:f3:31:a9:cb:a4:7d:c6:4b:0a:0a:
17:ab:36:b3:7d:b9:c6:56:a7:27:bf:6e:fd:4f:27:
89:51:2a:5c:54:5f:36:09:4e:5f:d3:f9:32:b5:33:
7a:1e:0f:5c:f6:9c:5f:6e:3d:c5:30:25:19:ae:8b:
5a:89:16:fb:c7:f5:a1:10:6e:77:72:79:b3:36:93:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F7:63:DA:E9:D2:E9:97:95:A7:25:4F:B0:A6:0D:71:83:AC:8B:6F
X509v3 Authority Key Identifier:
keyid:BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:74:79:63:66:b8:51:f1:20:24:23:6e:bf:4d:4f:ae:e1:c3:
58:05:67:1e:8f:73:1e:4d:c2:90:01:85:34:67:31:a9:f1:37:
53:44:34:90:69:7d:fb:df:ae:9e:6f:87:26:ff:69:c9:f8:51:
e0:51:15:dc:21:8d:aa:a9:3c:64:6a:83:b4:7d:3e:c0:75:25:
78:b4:08:43:2d:2b:b3:07:ee:3d:5d:0e:e2:83:33:2f:7c:a7:
70:dc:85:a0:3a:4b:d7:87:85:be:6a:7d:c8:ca:3e:25:e2:2c:
0d:88:a5:40:8b:55:f9:3d:ab:74:6e:07:45:b4:ad:53:b1:22:
2b:eb:ab:04:b1:60:69:63:06:8a:a6:76:e9:d3:46:b1:51:aa:
f0:e6:26:cd:ee:a2:52:db:ab:98:0c:cd:bf:04:2b:d1:03:ac:
28:4c:c3:1b:87:d6:76:33:2b:7b:37:da:0f:25:f3:49:1e:bd:
3e:93:35:26:06:94:5a:aa:5e:f5:e3:00:b3:e2:97:e0:2f:b4:
fe:0f:d6:f9:da:ca:fc:05:e0:61:22:46:e5:05:6e:a0:0e:b8:
2f:1e:8c:c6:86:2c:27:0c:ab:17:09:79:a4:6d:0c:69:95:39:
0b:18:e1:64:51:cc:e9:3b:e6:64:34:55:17:f5:24:25:cc:4c:
57:fb:09:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:40:48 2026 by rpki-client