
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft
File: Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft (raw, json)
Hash identifier: 0Oe4qUtK95Vgamcn+uBj3OMfN+k1wnEwxBjd0SyN0CA=
Subject key identifier: 46:C9:8A:24:23:93:87:91:87:1A:90:C0:DA:71:69:A0:55:DA:B3:09
Authority key identifier: 53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A
Certificate issuer: /CN=A9149ACD/serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft
Manifest number: A8
Signing time: Fri 17 Jul 2026 08:26:09 +0000
Manifest this update: Fri 17 Jul 2026 08:26:09 +0000
Manifest next update: Fri 24 Jul 2026 08:26:09 +0000
Files and hashes: 1: Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl (hash: a7xx9Mk/c/raZYGBmxe8y8EUva+CV4Ne78yAtDYybtM=)
2: 286C872684B011F08D2ED42CC4F9AE02.roa (hash: WVobOagpEAd84RigRT5lqEkEZLi28lRSUvzP7/VjaVk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl
rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:26:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149ACD, serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A
Validity
Not Before: Jul 17 08:26:09 2026 GMT
Not After : Jul 24 08:26:09 2026 GMT
Subject: CN=6a59e721-2d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:96:6f:b7:00:45:d0:64:5a:f5:34:0f:75:79:
f1:48:b7:31:f6:0b:fa:6a:70:fc:0e:12:14:c4:e8:
8f:0e:40:71:ea:43:41:1c:77:1f:c6:ed:d7:34:c4:
a4:c7:cf:64:b5:8b:c7:f4:ba:68:c8:c0:10:cd:cf:
a6:23:fe:16:23:8f:35:86:5a:b4:76:2a:78:29:31:
33:37:00:47:5c:50:67:47:63:98:31:09:d6:25:78:
d5:79:3a:f8:0f:b9:0e:06:db:b2:1f:04:c4:4b:75:
cf:3d:1f:67:a0:47:39:e7:37:d4:10:c2:a4:a3:0f:
9a:ca:12:9f:4f:cb:49:a7:10:9a:fa:3f:e9:45:cf:
93:c1:5a:8c:01:3b:5b:e6:27:05:f2:9f:4a:28:a1:
11:74:e6:02:e4:8d:13:19:6b:1e:83:c0:f4:bf:b6:
d4:22:e3:ee:7a:9b:04:2d:f2:42:73:e8:c9:b2:e3:
46:57:de:1d:65:69:d4:b8:f1:88:9b:e9:2f:f1:0b:
7b:7e:53:fe:6a:ad:42:df:b3:9d:d0:f7:00:f9:13:
a5:f6:30:0f:b0:a3:12:35:73:bc:9e:b1:0e:13:b4:
65:59:4d:15:ee:0e:a7:98:ea:c3:99:fb:e8:68:1b:
2d:80:22:72:7a:59:b5:28:8c:6c:ce:32:a8:31:e7:
96:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C9:8A:24:23:93:87:91:87:1A:90:C0:DA:71:69:A0:55:DA:B3:09
X509v3 Authority Key Identifier:
keyid:53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:20:f7:25:d5:ee:5b:63:fe:4d:07:12:18:fd:54:f0:46:a7:
e8:c4:da:5c:16:6d:4c:e3:35:7a:86:9d:d6:fb:61:f3:a4:b1:
d5:b6:f8:ed:95:a5:9f:2d:f2:48:1f:fc:c0:7e:15:02:59:09:
af:4f:89:db:0b:b8:24:5c:e5:3c:be:60:74:31:a9:ea:76:40:
9e:1d:5c:e4:9c:6b:d5:f9:19:aa:82:5e:2a:4b:8d:cd:d7:e5:
18:d5:97:0b:fe:67:46:14:28:f3:68:66:c3:f1:9a:04:1d:e6:
78:36:2e:e8:2d:28:ec:d8:56:b5:f3:81:71:80:05:81:4c:2a:
5c:14:ea:2e:03:5d:5a:25:be:18:4e:b1:06:89:1b:71:54:9e:
8d:fb:dd:25:0d:40:62:f6:69:15:ad:ed:ff:90:33:76:e5:ae:
7a:38:19:ac:93:60:76:3e:5f:39:ce:42:29:e0:63:17:03:67:
a0:a6:43:4f:71:7b:08:df:25:8f:12:20:eb:4c:da:ff:e9:d8:
4b:2f:f4:ac:1d:01:e6:6b:ba:c8:76:f0:53:d6:1e:37:b9:69:
b4:8c:a0:c8:0c:77:dc:1c:2f:c4:44:0d:ab:4b:ae:7d:8b:21:
c0:bd:66:b0:17:6d:17:d3:32:3a:dc:ba:a3:17:b9:69:60:97:
16:ae:43:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlBQ0QxMTAvBgNVBAUTKDUzMkU3MDU0QzQ3MUJGRjJFRDdBNkExODhFRDM3MzYz
NjVFNDYwOEEwHhcNMjYwNzE3MDgyNjA5WhcNMjYwNzI0MDgyNjA5WjAYMRYwFAYD
VQQDEw02YTU5ZTcyMS0yZDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4JZvtwBF0GRa9TQPdXnxSLcx9gv6anD8DhIUxOiPDkBx6kNBHHcfxu3XNMSk
x89ktYvH9LpoyMAQzc+mI/4WI481hlq0dip4KTEzNwBHXFBnR2OYMQnWJXjVeTr4
D7kOBtuyHwTES3XPPR9noEc55zfUEMKkow+ayhKfT8tJpxCa+j/pRc+TwVqMATtb
5icF8p9KKKERdOYC5I0TGWseg8D0v7bUIuPuepsELfJCc+jJsuNGV94dZWnUuPGI
m+kv8Qt7flP+aq1C37Od0PcA+ROl9jAPsKMSNXO8nrEOE7RlWU0V7g6nmOrDmfvo
aBstgCJyelm1KIxszjKoMeeWOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEbJiiQj
k4eRhxqQwNpxaaBV2rMJMB8GA1UdIwQYMBaAFFMucFTEcb/y7XpqGI7Tc2Nl5GCK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUFDRC9EODM1QTkwRTg0
QUYxMUYwQUQ3Q0RFMkJDNEY5QUUwMi9VeTV3Vk1SeHZfTHRlbW9ZanROelkyWGtZ
SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V5NXdWTVJ4dl9MdGVtb1lqdE56WTJYa1lJby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OUFDRC9EODM1QTkwRTg0QUYxMUYwQUQ3Q0RFMkJDNEY5QUUwMi9VeTV3Vk1SeHZf
THRlbW9ZanROelkyWGtZSW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHCD3JdXuW2P+TQcSGP1U8Ean6MTaXBZtTOM1eoad1vth86Sx1bb47ZWlny3y
SB/8wH4VAlkJr0+J2wu4JFzlPL5gdDGp6nZAnh1c5Jxr1fkZqoJeKkuNzdflGNWX
C/5nRhQo82hmw/GaBB3meDYu6C0o7NhWtfOBcYAFgUwqXBTqLgNdWiW+GE6xBokb
cVSejfvdJQ1AYvZpFa3t/5AzduWuejgZrJNgdj5fOc5CKeBjFwNnoKZDT3F7CN8l
jxIg60za/+nYSy/0rB0B5mu6yHbwU9YeN7lptIygyAx33BwvxEQNq0uufYshwL1m
sBdtF9MyOty6oxe5aWCXFq5DtA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 08:13:38 2026 by rpki-client