
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
File: uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft (raw, json)
Hash identifier: LL5FPE3Be0c7gfccytg7xnsNQtpVm61M27uWYSkKm80=
Subject key identifier: E7:02:2C:53:6E:9C:1B:F9:4A:0F:9C:B6:48:AE:95:D7:AB:7A:DB:7C
Authority key identifier: B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D
Certificate issuer: /CN=A911F2DF/serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D
Certificate serial: 01C8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
Manifest number: 01AD
Signing time: Thu 03 Sep 2026 04:17:57 +0000
Manifest this update: Thu 03 Sep 2026 04:17:57 +0000
Manifest next update: Thu 10 Sep 2026 04:17:57 +0000
Files and hashes: 1: uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl (hash: yUTufxpWxaTyy3cWnvQmOkXqGxUpUaJh9f1iMYLRZo8=)
2: 659B37E4958E11EFAFF1870AC4F9AE02.roa (hash: Oq52N/ekiWeIII4g9u3Cj+mGMLq4I3r8aDPxQbni/Mo=)
3: 7FAE29E8958E11EF9CC0DD0AC4F9AE02.roa (hash: fhAGA7U+T9cLvdjqCVwOeUhhQP8Fkcx/sUcd0jEHT6k=)
4: 92E390AC958E11EF87A4040BC4F9AE02.roa (hash: bFWyMjM59KpMl2IdJ0Vj6yC7NnD6EqeOW3IYGS46pNA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl
rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 04:17:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F2DF, serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D
Validity
Not Before: Sep 3 04:17:57 2026 GMT
Not After : Sep 10 04:17:57 2026 GMT
Subject: CN=6a98f4f5-aa7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:68:8b:10:83:96:5d:b3:e2:9e:b1:93:ae:
e7:7e:1e:f6:36:21:52:81:72:90:9d:2d:b8:49:d3:
0f:12:b3:59:99:08:10:dd:27:57:44:bc:26:b5:4c:
6f:bf:11:48:39:f2:c5:2c:13:53:70:5a:93:59:79:
a1:f1:dd:b9:15:fa:9b:bb:a0:c0:ad:e2:04:0d:32:
63:70:93:3b:81:73:32:73:20:f4:9b:59:25:98:1f:
72:07:0f:fd:b8:d4:08:be:24:36:c4:f0:5c:a9:50:
b6:6a:3a:76:e5:0d:b4:5a:b3:fb:a9:fd:d1:88:38:
fe:a2:38:bd:52:b7:5b:b0:b6:8a:62:54:a8:70:49:
f0:7d:86:7a:84:07:84:f8:2f:53:42:0a:cc:7d:e3:
77:86:0e:f3:1b:ee:62:17:ad:35:8d:c0:dc:a7:0b:
7b:e4:9c:fa:4b:fc:89:41:cc:66:a7:1c:76:59:cf:
e8:cb:55:76:2d:d5:e5:8d:41:ca:39:b6:4f:aa:28:
cc:e6:96:3d:e7:33:d8:a1:13:eb:d2:6e:57:e9:44:
c9:3c:cf:78:9d:0c:8e:ea:ff:5a:88:e8:3c:53:3a:
33:82:93:73:8f:ea:7b:41:d8:50:0a:a3:0e:38:95:
c9:a3:24:20:2d:c5:27:43:8b:89:7e:c2:60:2e:a5:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:02:2C:53:6E:9C:1B:F9:4A:0F:9C:B6:48:AE:95:D7:AB:7A:DB:7C
X509v3 Authority Key Identifier:
keyid:B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:20:36:9a:ed:b4:18:07:96:63:71:38:b9:8c:36:df:cd:2f:
b9:5c:0f:46:ec:a8:1c:d9:0d:a6:47:5e:1f:07:90:3c:54:e6:
ae:74:b7:50:e8:17:ca:7d:5e:de:01:e4:84:fe:0f:d9:99:44:
7f:ee:54:d8:c6:f2:bd:c5:20:c4:ed:9b:fa:c1:da:c3:2a:3e:
d7:72:5b:48:72:26:52:de:01:32:c3:ab:38:a5:cc:fa:6f:fe:
ad:b6:59:e5:ba:5e:d1:83:75:f2:f3:86:09:7e:8c:44:dc:7f:
59:29:aa:6b:0d:de:c2:73:c1:a3:7d:d1:67:af:08:89:51:ee:
ea:21:3a:16:6f:39:f8:7f:35:a1:b6:80:46:2b:5b:68:53:33:
1a:f6:00:a7:27:f1:6b:2b:88:f3:a5:cc:e4:3a:78:69:b6:e1:
40:ca:fe:3b:f1:73:30:4b:d5:a9:56:f5:52:2a:4a:a1:c7:89:
a7:f4:60:63:6e:14:b8:f2:5b:53:21:0c:77:9d:7e:5d:c7:41:
a4:ff:90:b4:99:c1:ad:84:52:0d:aa:c5:f1:43:51:a6:ef:f3:
47:47:23:51:6f:1f:5d:be:32:e1:08:cc:33:af:ec:08:7b:01:
81:f5:11:e4:56:34:51:eb:3a:8b:08:81:03:2a:e0:ca:c9:6f:
3b:02:d6:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUYyREYxMTAvBgNVBAUTKEI4NEMyMzk2OUVENzlDMEUzMUMxM0MxNDUwMDEyRTIy
NDZEM0Y5NEQwHhcNMjYwOTAzMDQxNzU3WhcNMjYwOTEwMDQxNzU3WjAYMRYwFAYD
VQQDEw02YTk4ZjRmNS1hYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvHBoixCDll2z4p6xk67nfh72NiFSgXKQnS24SdMPErNZmQgQ3SdXRLwmtUxv
vxFIOfLFLBNTcFqTWXmh8d25Ffqbu6DAreIEDTJjcJM7gXMycyD0m1klmB9yBw/9
uNQIviQ2xPBcqVC2ajp25Q20WrP7qf3RiDj+oji9UrdbsLaKYlSocEnwfYZ6hAeE
+C9TQgrMfeN3hg7zG+5iF601jcDcpwt75Jz6S/yJQcxmpxx2Wc/oy1V2LdXljUHK
ObZPqijM5pY95zPYoRPr0m5X6UTJPM94nQyO6v9aiOg8UzozgpNzj+p7QdhQCqMO
OJXJoyQgLcUnQ4uJfsJgLqWAOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOcCLFNu
nBv5Sg+ctkiulderett8MB8GA1UdIwQYMBaAFLhMI5ae15wOMcE8FFABLiJG0/lN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wMDUwMUZEMjIz
QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi91RXdqbHA3WG5BNHh3VHdVVUFFdUlrYlQt
VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3VFd2pscDdYbkE0eHdUd1VVQUV1SWtiVC1VMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjJERi8wMDUwMUZEMjIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi91RXdqbHA3WG5B
NHh3VHdVVUFFdUlrYlQtVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsCA2mu20GAeWY3E4uYw2380vuVwPRuyoHNkNpkdeHweQPFTmrnS3UOgXyn1e
3gHkhP4P2ZlEf+5U2MbyvcUgxO2b+sHawyo+13JbSHImUt4BMsOrOKXM+m/+rbZZ
5bpe0YN18vOGCX6MRNx/WSmqaw3ewnPBo33RZ68IiVHu6iE6Fm85+H81obaARitb
aFMzGvYApyfxayuI86XM5Dp4abbhQMr+O/FzMEvVqVb1UipKoceJp/RgY24UuPJb
UyEMd51+XcdBpP+QtJnBrYRSDarF8UNRpu/zR0cjUW8fXb4y4QjMM6/sCHsBgfUR
5FY0Ues6iwiBAyrgyslvOwLW1g==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:48:00 2026 by rpki-client