
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft
File: rU1lO4NcTh3pjsZjdoiamoN2SwI.mft (raw, json)
Hash identifier: loFwBwUdvytFrVL5/GkcS/4Ykweyv8MK5uuVsZxsnW0=
Subject key identifier: D2:DD:EC:D5:0D:E7:96:19:43:C5:85:86:DD:53:AA:F6:83:EC:7A:CA
Authority key identifier: AD:4D:65:3B:83:5C:4E:1D:E9:8E:C6:63:76:88:9A:9A:83:76:4B:02
Certificate issuer: /CN=A914B669/serialNumber=AD4D653B835C4E1DE98EC66376889A9A83764B02
Certificate serial: 353B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft
Manifest number: 353B
Signing time: Wed 20 May 2026 14:45:23 +0000
Manifest this update: Wed 20 May 2026 14:45:22 +0000
Manifest next update: Wed 27 May 2026 14:45:22 +0000
Files and hashes: 1: rU1lO4NcTh3pjsZjdoiamoN2SwI.crl (hash: q7T2SQYo3X2rQ3N+UlugSPYjbAxm8Sb1ZJtpS/ugsw4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.crl
rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 14:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13627 (0x353b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B669, serialNumber=AD4D653B835C4E1DE98EC66376889A9A83764B02
Validity
Not Before: May 20 14:45:22 2026 GMT
Not After : May 27 14:45:22 2026 GMT
Subject: CN=6a0dc903-5cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:cf:e6:74:b7:84:d6:3d:70:d7:9e:a6:13:
65:50:c1:26:29:44:ca:77:4e:bb:39:db:cb:0f:d3:
76:60:bd:67:66:65:11:f8:04:30:0f:9a:ad:a9:c9:
db:4a:f4:f2:cd:7d:81:29:69:53:a7:ca:b7:16:79:
85:e8:04:59:47:a8:93:3d:8f:99:50:b9:80:4d:be:
6f:dd:e7:f3:53:93:9c:84:fe:8a:b7:ee:67:07:e5:
b8:bb:f6:6e:d0:1e:65:f3:76:4b:38:02:4b:de:2c:
06:93:7b:e9:38:77:83:be:86:3e:7d:00:24:5c:50:
da:56:60:83:66:42:f4:62:7b:bf:c5:9a:4d:4d:b3:
52:a5:da:92:0a:b3:cc:bd:e0:36:31:77:f0:64:f6:
d6:f4:c3:68:72:49:d1:7e:d2:f9:59:a0:01:3c:ff:
74:d6:71:19:dc:10:21:0b:89:1e:6a:14:d7:00:37:
b4:af:57:7e:b8:0e:c8:35:f7:1a:89:a7:17:b1:0f:
6e:0f:1d:02:44:a8:f1:03:8c:6b:0e:06:50:6a:16:
9e:06:a8:be:83:82:18:2b:60:7c:70:aa:c1:41:a2:
ee:7a:31:a2:ac:56:2f:d6:91:6b:16:ad:97:11:41:
71:8d:34:d5:a4:71:6c:bd:53:25:30:0e:f0:ea:5b:
60:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DD:EC:D5:0D:E7:96:19:43:C5:85:86:DD:53:AA:F6:83:EC:7A:CA
X509v3 Authority Key Identifier:
keyid:AD:4D:65:3B:83:5C:4E:1D:E9:8E:C6:63:76:88:9A:9A:83:76:4B:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:e4:ff:5d:e2:23:3f:e9:fc:9e:24:35:68:8f:79:2d:d7:1e:
ab:5b:7e:04:17:e5:7e:83:dd:1f:90:ac:15:71:8f:2d:13:42:
37:a9:81:e1:d2:18:60:9b:2a:f2:de:c0:ed:62:6b:52:4f:f6:
5d:70:99:20:53:32:27:f1:3f:3c:eb:7b:1b:7a:f5:f9:ca:2f:
78:65:4f:23:3e:de:a1:5f:90:01:13:c3:cd:28:c1:7b:ab:61:
7f:ca:1d:49:ee:7d:54:41:2a:ce:0f:34:3e:48:76:45:f3:80:
1f:c1:17:43:99:f3:1f:d9:55:1a:d3:fa:e0:57:f3:29:3c:b0:
80:33:d7:02:77:93:27:dd:92:c6:fe:ba:97:78:17:b9:e0:4a:
bc:09:bb:41:6b:e9:2d:2d:d0:eb:a6:7d:b1:a7:43:ec:90:ae:
4f:2c:f6:ed:7a:cc:c4:91:67:9b:4a:45:5a:eb:19:6f:12:dc:
e4:e9:13:33:cc:ad:2a:72:d5:4f:85:9b:a1:74:30:b7:49:4f:
79:75:e2:2d:6c:bd:d5:12:1c:1f:2c:ab:c7:33:cf:56:47:20:
15:00:dd:e8:1d:2c:c6:17:16:63:eb:62:c8:45:ea:e7:05:2e:
4f:01:f7:4f:25:a0:e0:bc:e4:91:5d:e2:16:c3:ce:ce:79:69:
00:9a:23:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:04 2026 by rpki-client