
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
File: u9oqUrUEjxqKq79cJBcmASd8svM.mft (raw, json)
Hash identifier: MEyqhX4tAJRgb1XuXUrIZIyV1XiSHB/lyPIh4/J6XzM=
Subject key identifier: 91:67:50:DE:B3:3E:FE:D5:F1:8D:38:AB:05:FB:30:93:C3:B5:37:BE
Authority key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3
Certificate issuer: /CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
Manifest number: 0192
Signing time: Sun 05 Apr 2026 03:51:23 +0000
Manifest this update: Sun 05 Apr 2026 03:51:23 +0000
Manifest next update: Sun 12 Apr 2026 03:51:23 +0000
Files and hashes: 1: u9oqUrUEjxqKq79cJBcmASd8svM.crl (hash: At/x5gQ36eIl66G7Ole27Zln5cdQ3kxA4AhtvveePSE=)
2: 6133230CEB3311EEA75DE77DC4F9AE02.roa (hash: 0gLq+Q5VHgGBq5LnAdqM46w0wsxGeP7cSrO1IFlXD80=)
3: 32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa (hash: yu+q3f/RarO60hYfGM/lYcRRiKIl/UB8fwUek+JSESk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl
rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BA82, serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3
Validity
Not Before: Apr 5 03:51:23 2026 GMT
Not After : Apr 12 03:51:23 2026 GMT
Subject: CN=69d1dc3b-05c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:4b:2c:d0:7f:11:c2:f1:ff:83:e3:50:2c:
33:ed:cf:ae:0f:b8:b3:d5:0d:fb:bb:0e:c3:85:d4:
a5:37:be:d6:40:99:a7:27:74:6e:86:11:0c:7b:91:
21:9d:eb:c4:54:27:91:85:17:87:d8:29:a6:f0:94:
f0:dc:f9:09:09:b1:96:c1:b9:bb:45:73:0e:1e:61:
9c:94:30:ef:44:ca:72:fb:1a:6c:a6:13:13:25:af:
2a:6c:49:5f:7d:68:e6:04:78:a4:83:f2:fc:a6:f9:
61:36:4a:c9:9e:c7:bd:2f:be:8e:25:50:f0:76:6e:
8d:c6:d2:e3:6e:d8:73:76:6f:27:99:ba:4f:c0:35:
9d:8e:67:07:2c:9b:b3:01:80:6e:4f:c6:75:45:21:
d3:c3:60:f3:71:31:1e:63:f0:f1:b8:f5:ed:8b:c0:
c5:a3:b7:08:e9:6f:aa:a9:f3:6d:2c:42:34:1a:a2:
10:92:88:b9:bf:9d:41:f1:68:08:b8:1a:55:4a:77:
bd:97:bb:de:63:fe:07:59:42:1f:5a:6f:72:a9:c9:
ad:dc:4e:77:b7:07:a7:be:8d:a4:9c:26:8c:00:6a:
09:82:fd:db:4c:06:3b:a2:9e:78:09:9d:cc:a6:03:
b0:e7:29:d0:dc:10:1b:7b:6b:95:31:1e:bf:1d:1c:
38:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:67:50:DE:B3:3E:FE:D5:F1:8D:38:AB:05:FB:30:93:C3:B5:37:BE
X509v3 Authority Key Identifier:
keyid:BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6b:6a:05:3b:0b:f7:1c:5c:6f:d9:3a:64:d6:84:7b:c0:2a:
1c:1f:e6:af:68:4c:8b:78:00:45:3f:4d:a5:cf:80:3c:ff:20:
8b:10:87:65:e4:85:66:97:b3:eb:c9:ec:4d:e1:ec:31:97:df:
02:f3:84:c4:f2:d3:85:34:da:fd:df:1a:24:0d:12:16:60:bd:
5a:bd:10:81:c4:ca:bf:57:18:47:a8:fc:77:d0:b8:ca:fb:c5:
c7:cf:3e:92:6e:01:78:a7:4f:9e:25:c1:57:f5:94:f0:b9:03:
96:bf:32:0b:d4:ff:6e:9e:8e:01:0e:6f:91:b2:cf:0c:8d:1c:
2b:20:6d:b9:e8:a3:22:1f:f0:4b:df:cd:b1:30:0c:37:b9:5c:
dd:51:7a:29:4e:49:ff:c6:80:d0:1f:e4:ef:f8:eb:64:bb:60:
de:13:38:34:24:45:ae:8d:99:64:21:2e:0b:97:fb:31:54:b1:
fe:7a:9e:01:bf:f8:6a:b4:8d:d2:01:60:99:8c:a5:48:2e:a6:
2d:22:3a:6b:44:35:8d:0a:01:30:ed:60:6e:a2:98:0d:30:af:
d0:83:9f:cb:e8:72:06:f4:06:2c:c2:a0:7c:4a:d4:5a:77:ab:
17:6a:b2:4c:f4:a9:ba:45:e0:46:ab:6c:31:92:d0:bf:46:c1:
cb:33:bc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:56:58 2026 by rpki-client