
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
File: UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft (raw, json)
Hash identifier: I39chz80t1QG2Z3bxUaiUqBV81mOU8iAMYn0Uvn0Zxg=
Subject key identifier: C8:52:E0:15:82:B3:C7:E7:AF:E6:EB:32:B1:0B:28:16:3C:9E:A9:1F
Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2
Certificate issuer: /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
Manifest number: 0152
Signing time: Sun 05 Apr 2026 04:32:54 +0000
Manifest this update: Sun 05 Apr 2026 04:32:54 +0000
Manifest next update: Sun 12 Apr 2026 04:32:54 +0000
Files and hashes: 1: UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl (hash: YDF0eCYScl6u1B6g7FnOtgJZb1crV1NLwa60MDRkJ+g=)
2: 8B584EC2337D11EF9D71B72DC4F9AE02.roa (hash: nfE8MGXIYFcpCfytRVSLiKAP+7q0/XusaPqqsGF/aVU=)
3: AE977DF8337E11EFB3CCD72FC4F9AE02.roa (hash: GEFeKy8aH4tDYzifQsBwM7koyveNQSqrhuOkOUK426I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl
rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:32:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139A90, serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
Validity
Not Before: Apr 5 04:32:54 2026 GMT
Not After : Apr 12 04:32:54 2026 GMT
Subject: CN=69d1e5f6-02ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:95:ef:82:c8:20:9e:72:c1:7c:b0:c5:88:
29:3d:da:9b:41:6c:e8:a5:48:2a:50:3b:69:9c:f9:
81:ae:9e:ed:c8:df:5f:90:e4:a5:cf:8c:18:e0:98:
e5:8a:b8:f8:df:27:60:f5:fa:c2:80:f8:b8:81:cd:
13:f4:87:c9:fe:ac:5e:42:5f:75:1f:f3:f3:51:20:
ab:64:88:91:ec:e8:ba:63:20:99:87:15:fa:2d:d8:
39:ec:c3:5b:bb:f7:f9:ff:b9:8d:9d:d8:3a:22:f5:
48:75:da:40:f1:d1:78:54:22:77:4b:95:18:75:8b:
d2:75:cc:4f:1e:29:f1:f2:91:d1:58:29:f7:b4:b9:
32:ea:6c:98:71:53:3c:e9:0e:44:fa:77:c2:b0:b6:
8b:08:b7:c4:f5:fb:9a:d0:7a:f0:ec:58:3f:61:54:
5a:36:53:46:b1:15:b1:06:49:4f:fa:f2:f3:67:2e:
60:0d:42:21:cd:96:7e:a7:79:e8:b7:cc:0a:a0:a3:
bf:a2:79:76:77:2b:ac:2a:3e:ed:4c:6a:2c:19:fd:
ed:e0:42:da:89:d1:73:80:cb:3c:4d:28:f6:e2:d6:
62:a9:67:a7:13:ec:8a:af:bd:57:48:1a:aa:da:4d:
e1:17:e6:d1:5c:8b:59:b4:dc:f3:75:6c:b5:18:cc:
50:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:52:E0:15:82:B3:C7:E7:AF:E6:EB:32:B1:0B:28:16:3C:9E:A9:1F
X509v3 Authority Key Identifier:
keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ac:2c:a5:1f:e0:61:75:f3:2a:11:e2:2d:9c:76:e1:c6:78:
5c:99:0f:83:5e:90:5a:64:3f:6a:33:5a:cc:15:d3:89:2e:37:
2f:88:a9:77:24:47:c7:74:d7:31:c3:f1:80:6b:58:82:99:b8:
1f:e6:62:a8:32:4b:35:6f:ce:09:c7:d9:ca:28:4b:9f:8c:cb:
a3:2d:fc:90:63:a0:46:10:c2:39:50:14:f9:1a:5e:69:90:37:
ee:7b:19:13:41:c6:49:a7:8c:77:23:31:0b:97:08:d6:a3:e4:
3e:40:5b:40:33:48:ef:ec:a2:84:3b:76:e6:0f:31:2c:ea:d3:
fe:18:61:91:66:0e:07:b0:9c:4f:b7:40:48:84:a0:b5:5d:ba:
b5:41:8e:6c:c5:de:5b:79:df:ff:98:d5:b8:ee:b5:0b:55:22:
72:7a:03:a7:61:f9:d8:4d:a7:bd:ef:04:0c:ed:3e:86:91:35:
c3:aa:8a:81:34:e3:ba:52:b1:ad:77:6d:bc:1d:a0:31:92:44:
98:0f:d1:d2:57:d1:f2:36:99:65:f2:3a:b1:58:9c:0b:4c:fa:
15:32:98:b9:a7:d8:0d:65:44:ef:91:bd:3d:c9:19:77:aa:98:
63:6e:af:71:83:37:67:d0:6f:61:97:0d:ff:62:a4:fa:86:ce:
16:bc:85:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:22 2026 by rpki-client