
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
File: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft (raw, json)
Hash identifier: IFamOIC/hGCAvyLlQ9vG0d+MM+t6TwFHbFpke7fKPpo=
Subject key identifier: 63:C6:05:D0:2B:CB:4B:45:E9:21:68:91:3A:5F:54:6A:92:FE:83:80
Authority key identifier: 52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78
Certificate issuer: /CN=A9136D7D/serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78
Certificate serial: 02E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
Manifest number: 02DC
Signing time: Sun 05 Apr 2026 01:06:11 +0000
Manifest this update: Sun 05 Apr 2026 01:06:10 +0000
Manifest next update: Sun 12 Apr 2026 01:06:10 +0000
Files and hashes: 1: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl (hash: l6ZZZGhTimC3qgN8IiAeRJudEKXNnhmORLPf/cR16B4=)
2: A9E3A5041C3411EFBF05095BC4F9AE02.roa (hash: +F1FZtsTrw14W4WmmJaPNvqLxkx0Lf//1RCLaJV77j0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl
rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 744 (0x2e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136D7D, serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78
Validity
Not Before: Apr 5 01:06:10 2026 GMT
Not After : Apr 12 01:06:10 2026 GMT
Subject: CN=69d1b583-f64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9c:80:fe:63:ac:c6:3e:02:d7:41:aa:91:63:
07:c7:bc:c7:fb:99:25:4a:19:f5:93:28:c3:f4:e4:
1c:e4:62:c2:6a:ce:3f:b0:ee:40:60:62:59:8c:e8:
d6:7d:0a:c2:c6:0e:36:e6:8a:6c:93:4c:ba:64:08:
3d:7c:ae:ee:ae:65:c4:97:85:16:eb:43:3f:f7:ad:
d4:c5:29:e0:b1:b9:c5:04:df:39:43:78:e6:a9:a2:
25:66:e5:c2:e1:51:c4:5a:80:8d:56:b8:35:23:ee:
f8:2f:c6:d4:d9:58:c9:c1:f0:93:20:5f:e3:58:06:
b0:d6:23:76:52:05:da:6e:f3:12:0f:5d:b6:78:0f:
8e:1d:52:76:ae:c1:7a:87:a3:54:0b:1e:e6:f7:5a:
b7:37:6c:c2:74:30:a9:02:53:61:c1:70:86:89:53:
e6:7b:0e:03:ec:13:38:93:13:94:f2:6a:ae:fe:48:
0e:86:9f:9c:1c:83:42:72:6a:35:c8:68:30:e1:23:
5a:d0:80:20:b4:dd:df:d6:6c:30:95:d2:42:db:f2:
36:11:64:4d:6f:73:cd:2c:68:23:17:c1:3a:c0:57:
53:0e:58:9b:db:08:3e:c1:42:4e:bf:d9:26:80:fb:
48:61:3f:61:8e:e4:85:85:c2:7e:41:c5:9a:4e:61:
8b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C6:05:D0:2B:CB:4B:45:E9:21:68:91:3A:5F:54:6A:92:FE:83:80
X509v3 Authority Key Identifier:
keyid:52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a7:f7:91:1e:93:15:06:42:32:5e:32:a9:87:be:45:c1:16:
0c:b7:fe:18:5e:a2:47:43:aa:5a:35:d1:f5:4a:7c:e5:59:7b:
60:ae:42:6f:7d:58:66:ea:94:af:47:67:0e:26:eb:16:25:3d:
fc:ac:73:59:b2:b8:1b:dc:e6:53:b0:54:37:dc:37:ac:dd:c5:
02:76:20:9d:09:0c:fd:05:6a:b9:77:2a:98:25:b8:92:16:b5:
5c:58:37:88:f7:2c:44:26:a2:63:7b:31:7e:13:6b:f7:d2:fb:
f6:3a:c4:e5:24:a6:d0:d6:3f:40:36:b9:9b:86:04:45:45:4e:
41:ca:79:8e:ed:32:33:43:f0:11:ab:b6:20:18:db:eb:6d:d2:
c2:41:0d:fb:78:a9:e1:8f:78:19:4f:6e:21:6f:57:06:7f:c5:
60:81:4b:82:2d:de:b4:57:22:f8:2d:9b:15:ef:79:93:d4:63:
2a:00:7f:25:a8:1f:06:65:ad:d2:d2:a0:4d:32:41:f1:7e:17:
a1:0f:e5:a0:79:7d:e0:f2:b1:1d:81:be:e0:50:4f:e6:9c:09:
f1:46:12:12:7e:b4:8c:92:6e:3a:16:44:d8:ef:b8:bd:04:a5:
90:9e:a0:70:36:36:71:1c:9a:ee:08:a0:9c:ee:08:ca:20:0b:
89:22:1b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:16 2026 by rpki-client