
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
File: uRokzwRxERfIw7omSjM5Xad_kbQ.mft (raw, json)
Hash identifier: rG2p3HbjpyNRQztHxh25igYny5Tv0pKKsmJt1GzDj2o=
Subject key identifier: BD:AC:70:52:4C:5C:87:F1:B6:D6:FD:BC:90:66:F3:B2:7D:BE:CE:A0
Authority key identifier: B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4
Certificate issuer: /CN=A9133BB0/serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4
Certificate serial: 0140
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
Manifest number: 0138
Signing time: Sun 05 Apr 2026 04:48:01 +0000
Manifest this update: Sun 05 Apr 2026 04:48:00 +0000
Manifest next update: Sun 12 Apr 2026 04:48:00 +0000
Files and hashes: 1: uRokzwRxERfIw7omSjM5Xad_kbQ.crl (hash: RRkoAZbOO4yKrWUJ6hkP2tFPDCYXRI13OkwZqVzd5Ow=)
2: 27995372566911EF9D53B517C4F9AE02.roa (hash: DeSR6K4bPK/5yIQimeD5bS9czMTEXaccQNS0PK5i+zY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl
rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133BB0, serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4
Validity
Not Before: Apr 5 04:48:00 2026 GMT
Not After : Apr 12 04:48:00 2026 GMT
Subject: CN=69d1e981-090a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e8:d5:bc:6f:2b:2d:2b:7c:be:d9:80:7d:6d:
1e:34:4c:8d:02:7e:37:01:52:d5:dd:32:32:7a:0b:
85:91:9f:46:99:bb:01:f5:67:74:02:f9:4d:69:cb:
8f:8b:da:14:54:f5:a2:4a:7d:89:a9:97:b2:30:e4:
a1:01:05:fd:98:2e:2c:eb:d7:04:8b:06:c6:c9:b8:
e5:20:f5:65:bd:ef:16:fa:62:96:e9:f9:43:11:26:
fd:2a:99:72:67:6a:3a:25:4f:40:db:18:d3:22:17:
1f:39:57:4f:97:c8:53:a2:7c:d6:4c:59:1a:9b:26:
79:af:47:17:77:39:88:81:70:f9:40:4a:36:ae:3d:
4f:cf:fc:85:df:c9:17:b6:f5:3d:5b:cf:14:8c:cb:
8d:11:cb:bf:2d:8b:03:ff:0b:73:33:29:85:a5:3b:
c0:f1:ff:9b:44:0a:02:f7:59:2e:67:64:95:9f:dd:
41:75:bd:17:5d:33:7c:d6:3f:e5:9d:d6:ef:be:53:
84:a2:38:da:b9:01:2e:83:68:d8:e9:79:9c:41:b8:
61:f2:83:42:e4:f3:3a:a2:6b:0b:0b:fe:13:6d:c0:
12:07:5f:1d:7c:08:f2:8d:b9:4e:0e:86:ca:26:68:
6d:c2:c1:a9:36:c5:7b:78:d5:17:ab:5b:c5:75:11:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AC:70:52:4C:5C:87:F1:B6:D6:FD:BC:90:66:F3:B2:7D:BE:CE:A0
X509v3 Authority Key Identifier:
keyid:B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5f:82:5e:03:3c:be:0b:ee:a4:7a:0f:14:d0:37:b0:e9:37:
ec:5d:84:25:95:74:f8:82:29:0c:51:d3:b6:96:29:dd:15:df:
6a:41:44:79:0c:e6:8e:00:39:80:a6:7d:29:b7:02:a4:25:3d:
b7:10:ba:bb:7c:60:e0:f6:33:31:03:59:9d:53:ec:98:1e:dc:
dd:e6:b2:ff:b3:ef:79:fc:2e:a0:8d:f8:66:36:45:00:41:05:
63:05:c0:90:72:cb:cf:09:1b:da:17:8c:41:53:21:1f:01:d8:
18:80:e8:5a:93:6b:02:61:57:a6:11:2b:8e:50:42:4b:19:5c:
a2:52:43:08:92:35:3d:03:35:50:cf:94:e5:c6:26:59:03:5b:
cd:f5:03:e1:d2:aa:95:58:c2:82:27:9f:44:f1:b6:00:78:b7:
e2:85:43:6e:84:01:08:d3:a2:e1:a8:b4:7b:2f:39:59:20:c6:
1c:18:17:09:e1:a4:65:ac:0c:ab:84:6c:fa:86:0d:d9:b7:7a:
8c:9c:56:53:e4:d2:24:72:bb:73:99:59:d0:a3:30:b2:e3:48:
42:a3:7a:9c:f0:1e:ed:ed:0c:7e:66:60:2b:95:be:96:db:19:
cb:4f:62:fa:b2:4c:f1:90:ce:1c:85:fa:9f:88:57:58:8c:4c:
cd:1d:c0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:00:39 2026 by rpki-client