
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
File: UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft (raw, json)
Hash identifier: YdO2eG6EYXoJw9Fe5HiM7dVnMXO6wXKFpYZC2jKL8iM=
Subject key identifier: 06:CD:90:85:80:9D:C8:43:76:E7:73:8D:DD:F2:32:67:AC:B9:39:BA
Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56
Certificate issuer: /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656
Certificate serial: 02C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
Manifest number: 02B1
Signing time: Sun 05 Apr 2026 01:14:01 +0000
Manifest this update: Sun 05 Apr 2026 01:14:00 +0000
Manifest next update: Sun 12 Apr 2026 01:14:00 +0000
Files and hashes: 1: UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl (hash: HhkmU9SX7cUWkNYfaoUQUHJbU6jPAyJmvDXUbY5hBUQ=)
2: B288EC9C870811F0A371DD81C4F9AE02.roa (hash: EbM83ZEvePXe1Ly5n5Vgc1KedeQFazDTw+k8LcCr0ls=)
3: 35CBA9EC70D311F08BF5B035C4F9AE02.roa (hash: nJ1vYtdsXfeT0k12QEfSHKja0MiLNjEpDEZqyjvHy0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl
rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:13:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708 (0x2c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BAD6, serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656
Validity
Not Before: Apr 5 01:14:00 2026 GMT
Not After : Apr 12 01:14:00 2026 GMT
Subject: CN=69d1b758-95d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:c9:48:55:eb:17:99:e5:5a:3e:c7:f3:b6:
8d:3d:dd:e6:7c:05:2d:3e:d0:3a:b8:9e:dc:e9:e9:
82:79:0b:f0:74:cc:41:22:b9:be:a8:4c:60:27:ae:
12:ec:6f:ac:e0:10:0d:27:0d:96:9c:8e:b1:e2:16:
c2:61:e3:22:19:9f:44:ea:bb:f2:19:1f:ce:98:54:
37:9b:ca:97:eb:44:e4:36:63:89:8a:e9:e8:68:3a:
fd:b9:65:e8:2c:f2:13:d8:ef:47:e5:2f:89:24:ed:
ad:0b:7f:76:5d:d6:ca:c1:1c:50:38:45:d1:64:36:
5c:6e:42:3b:9c:5b:41:f8:8d:9b:74:2d:53:39:de:
ef:6b:25:1b:f2:6c:a2:0d:a8:db:64:37:f4:96:e3:
0d:8a:21:18:01:07:c5:ad:ec:cc:71:e2:6f:bf:1e:
6a:91:bd:9c:ee:3b:5e:71:c6:21:fc:4d:1d:b3:d1:
91:63:ef:68:f8:1f:b5:67:f2:1e:3a:de:88:ed:b7:
9a:e7:9f:c6:92:9f:84:e1:f0:15:92:aa:2b:d9:d9:
2e:3f:18:f6:8b:39:2c:00:e8:60:9d:c5:df:39:1c:
5c:d0:22:bb:26:1a:b3:94:08:50:eb:eb:aa:0c:c1:
a5:67:19:d0:3f:6b:fa:5b:fc:02:0d:d3:e3:79:eb:
1d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CD:90:85:80:9D:C8:43:76:E7:73:8D:DD:F2:32:67:AC:B9:39:BA
X509v3 Authority Key Identifier:
keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:2e:5a:85:0c:67:fe:4e:65:a7:90:7f:94:7b:9d:bc:ec:ad:
f7:a4:a5:70:79:8a:cd:e9:60:91:2d:8c:e2:b2:6e:41:f5:52:
f0:93:f2:cb:88:cc:71:82:ef:bf:21:1c:5b:cd:c0:01:ca:b9:
57:44:e5:fa:dc:db:77:47:14:e4:37:e3:8f:ca:73:a3:20:a0:
0d:2a:da:de:78:11:0a:a4:c4:02:de:21:24:87:61:0d:46:96:
3a:62:92:15:e1:ff:ed:3c:c5:e0:29:a5:14:52:89:97:74:ab:
93:9e:4d:a0:a2:bc:dd:30:1e:d3:b2:b3:59:3a:34:0a:76:99:
38:a6:41:73:b0:10:d3:09:d3:d6:e3:b5:fa:6e:78:a7:1e:70:
87:0e:f7:78:7b:7d:86:8b:0d:4f:35:4e:a1:a0:8a:6a:e0:05:
78:28:5c:00:30:d8:8e:b1:39:dd:cc:dd:a7:71:4d:a5:a0:d0:
cc:f2:ea:fc:83:80:40:86:fa:5e:e8:9a:b6:5c:3a:be:32:f4:
2d:a1:03:ce:a0:37:67:eb:74:f3:ed:6f:0b:5a:d3:51:54:6e:
04:97:49:41:3f:c6:bc:77:81:49:c6:dc:12:7f:84:0c:11:34:
e0:0d:6c:24:fa:32:1d:20:03:1c:90:09:74:b1:fd:0d:f9:d2:
05:96:b9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:39:58 2026 by rpki-client