
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
File: UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft (raw, json)
Hash identifier: GtqNqum+x3EnpvrQP/v8YQizKOOf1LVsHWPOWTJB7sU=
Subject key identifier: BD:32:1C:18:77:A4:FC:C6:6F:38:EB:A5:A5:96:7A:25:56:D8:20:40
Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56
Certificate issuer: /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656
Certificate serial: 02E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
Manifest number: 02CB
Signing time: Thu 21 May 2026 01:30:00 +0000
Manifest this update: Thu 21 May 2026 01:30:00 +0000
Manifest next update: Thu 28 May 2026 01:30:00 +0000
Files and hashes: 1: UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl (hash: TwNh9o+Xn+B9nEtz4NGB1NY9BGT/iG05daVA44zZRWE=)
2: B288EC9C870811F0A371DD81C4F9AE02.roa (hash: 0BOrDnShuL/QhrZ0gDHGyMtGSNIca2cAczupvc+0+QU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl
rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 737 (0x2e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BAD6, serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656
Validity
Not Before: May 21 01:30:00 2026 GMT
Not After : May 28 01:30:00 2026 GMT
Subject: CN=6a0e6018-0998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ac:41:79:52:18:4a:ae:47:67:9a:9d:f8:bf:
bb:57:09:18:50:73:0c:65:29:4b:27:9f:a4:0d:cc:
b9:6c:02:32:6d:22:39:aa:6b:8d:f2:04:0f:a5:5a:
3b:29:5d:ef:7c:89:3e:97:6a:72:3f:a2:62:91:1d:
0c:d3:fb:93:61:13:3d:31:d2:8a:54:03:43:82:93:
31:fc:81:93:17:fa:43:80:41:fb:9c:cb:f5:6d:01:
94:e9:af:0f:63:d1:f8:0d:b1:45:b2:df:5a:f7:19:
61:2c:ba:63:2c:51:cf:24:3e:cb:32:74:85:f7:c5:
38:10:8b:51:20:1c:5e:93:97:78:48:ea:f9:30:82:
46:71:94:58:98:86:66:b6:ca:7d:76:2e:06:3d:47:
99:5b:10:d2:cd:86:dd:16:f0:1b:7f:dc:9e:55:a3:
2f:84:b0:aa:93:85:34:67:c7:f6:5e:4c:5b:4e:ee:
52:eb:1f:2f:72:36:f4:51:c5:ae:f3:72:fb:4c:47:
20:90:74:63:25:0f:03:97:40:23:50:dc:e7:99:f4:
59:4e:b5:32:34:40:88:c8:f5:59:bd:89:7e:bd:1d:
86:0c:84:12:1e:5f:f9:db:d5:f8:20:ea:ba:79:92:
8f:23:74:b6:87:0e:c5:45:fe:0f:23:72:54:ed:9d:
5b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:32:1C:18:77:A4:FC:C6:6F:38:EB:A5:A5:96:7A:25:56:D8:20:40
X509v3 Authority Key Identifier:
keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:54:37:ff:ef:98:e8:71:66:8e:12:e4:d1:31:97:eb:67:e6:
fd:c4:a5:00:8c:7f:bf:37:63:33:3c:bb:d3:9f:60:77:47:e3:
1d:d8:8e:25:21:51:dd:4e:38:f7:73:30:da:f0:34:f5:ec:d4:
8e:c4:ea:36:1b:8d:7c:ee:70:b1:83:6d:f2:eb:94:fe:c7:67:
50:17:ce:59:59:ab:c6:0e:54:69:2d:36:0d:5a:3e:83:c6:fe:
c7:be:33:f0:12:e9:d3:4f:c5:86:eb:6f:67:15:18:a7:7b:55:
44:c6:6b:c7:6e:35:b3:d3:af:7e:f0:05:aa:c9:de:0f:c8:2c:
70:37:a0:5f:14:19:35:70:d7:87:e2:62:9e:25:b4:e6:79:6b:
08:24:e2:2d:12:5e:3d:c1:38:fc:90:43:ef:79:fa:f3:94:b2:
12:86:3c:7a:24:dc:9a:2a:9f:bb:9c:3b:61:f7:8f:3b:5a:5a:
ed:7a:98:f5:dd:ab:b1:6d:0e:5d:45:e9:aa:6f:68:48:ae:f6:
78:e0:97:02:64:32:bf:36:b5:cf:e9:0b:eb:a9:d7:c5:20:cc:
67:9a:c4:ca:cd:7d:9f:98:6d:78:7e:cc:23:a0:b7:50:6d:40:
ba:5d:2f:45:86:66:fa:70:92:5c:b1:84:8e:48:8c:92:85:bf:
2c:4e:65:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:34 2026 by rpki-client