
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
File: UxLzmab36w3c1RwDn4P3t6R6Xwk.mft (raw, json)
Hash identifier: hZfuYTwd/0L8R2ZmQKML/A0WI3uD4gBpb+zxGCCmX8I=
Subject key identifier: AE:22:D4:3C:C7:BE:2C:81:B5:64:BA:75:25:C9:27:69:C7:65:70:08
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial: 3689
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
Manifest number: 35C0
Signing time: Fri 04 Sep 2026 15:16:45 +0000
Manifest this update: Fri 04 Sep 2026 15:16:45 +0000
Manifest next update: Fri 11 Sep 2026 15:16:45 +0000
Files and hashes: 1: UxLzmab36w3c1RwDn4P3t6R6Xwk.crl (hash: MxoSUXcGjvukESGGuLqrqXngDJwtFCTnS9KwHnuuk5k=)
2: E367308E8D8811EDB3C13D6CC4F9AE02.roa (hash: a063z56fhF465bYqQMqQ/VS6+YD1pprAbiKfQKP6c7Q=)
3: 7350B2AE2BB011EEBF8C0962C4F9AE02.roa (hash: Sp7dFq3oB3/SLpjiNzPQXEcyYCMfjU6YoLN7YWBMCYw=)
4: C2F17AB22DCE11EEA2884670C4F9AE02.roa (hash: effeuvJ8l3AUehdgLEWM2HD3kmQlAIDMK+QRL0CUES8=)
5: 5C3C24DA7C3A11F19502E96961A30FBC.roa (hash: T7NOwWvyJhEbpJwEubb2URocPtjhrATKrc8a51jyrd8=)
6: jGeEsr3Scy-u-lvsXacp5GgDJXc.asa (hash: 9DABc/OQt8c0UyjghiubtHyjKdEmu/HKbGQ1HK15ZjI=)
7: E474AF108D8811EDB3C13D6CC4F9AE02.roa (hash: noBQw864/f72VFx3andbpjd4W9nv+2EjSEATcB2fGbI=)
8: mdkUMDTCA-liMHWCGVOq1Lzr5m4.asa (hash: FPNURNp+gUbhptz+zBLiwR+ImVB1S60HEJTDn5RAzgs=)
9: 2F20ECAE554211EF82D40732C4F9AE02.roa (hash: FzGV2az77P99aPOesIkUJNX6Xr/vF/iE5jAQGK/lwCE=)
10: 56C4FAF42D4511EAB70F247AC4F9AE02.roa (hash: YRii0Zo0Ii/RPFSSaW2DmXwDsKKvPuXOrEkEJHdLhV0=)
11: R_P5k-5B764bv47XFseokAlkqG0.asa (hash: ateVzh5V6xrwsxAggbV6DsQXxNriblWnTGRdO8wPLF0=)
12: 03C522BA8CF211ED8699F014C4F9AE02.roa (hash: hZnSGa5sJglM36JrWPW33FVeXKbAkLzdvimEBvYGRK0=)
13: A6Yd3OnHW9dYg9W2ztPlcF88rF4.asa (hash: SGnS2QMul3e/ra8VZGJLEa8Q+Y/cerpYPT5AgVCOERo=)
14: EB3FE1C61B6411ECAAB1D328C4F9AE02.roa (hash: QN6urrq0/MRPBsyVwW06hj5Hgqfql2xPz8BmJ6v46LI=)
15: 95B5C59E2DCE11EEB652B16FC4F9AE02.roa (hash: d6iO9u2ih9RRm7pMd+vjg8OegUnNhTtH4LrmCu5pQ4M=)
16: xdNDl9oThQGQt80rlduj1V1tbfI.asa (hash: xMk8biZet32LKJBleH1mwt15jmbpJoV9DR54WeTxXjw=)
17: 8D6973CE77C311EE90D4BD46C4F9AE02.roa (hash: kH5XvLgwYNGVU4SNZtJIVKDH6abpZgZgif4ntA/Uq98=)
18: EF1D0466455311E98FA31F68C4F9AE02.roa (hash: WNcYetTPqeiv/gJdhSaTlqe8oWCCpgSvbxYX4ELwCGg=)
19: PmYyOwrCJyk4N6NoGsdjVAW1qZM.asa (hash: jksPtcTJhW2kt75ED3ht10HUrvaY97+MubnMQ4MlQP0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:16:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13961 (0x3689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Validity
Not Before: Sep 4 15:16:45 2026 GMT
Not After : Sep 11 15:16:45 2026 GMT
Subject: CN=6a9ae0dd-cbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ca:54:ea:99:64:ba:f0:c0:f8:29:31:39:5d:
6e:ae:67:6f:fa:02:8c:d3:45:34:91:64:49:98:de:
03:0f:48:bc:58:10:98:c8:2a:47:d5:48:45:49:e2:
bc:ed:88:6a:70:bb:78:2a:59:5f:33:3d:3f:56:7e:
db:55:ef:18:c5:6e:fb:ae:32:79:c0:45:48:82:b3:
4f:3b:d3:ba:b8:f0:b6:77:fb:b0:19:c9:46:92:57:
08:e6:21:5c:6e:1c:44:78:d1:da:85:75:e3:cd:10:
12:18:bc:c4:a8:0b:f6:20:9f:78:87:b7:b6:7d:97:
f1:8f:d7:fe:d1:9f:f7:77:97:9f:77:3d:5c:d4:be:
8f:4e:e7:60:6f:c5:da:b9:1a:b2:4b:d0:7f:91:e4:
c5:67:0b:8c:98:09:cd:b1:fb:0f:6a:96:31:d1:b2:
87:0d:55:ac:88:ad:b6:ff:c7:c0:84:0b:a1:70:4d:
9a:16:6f:bb:0b:72:93:45:b9:07:61:c9:36:86:a4:
c9:10:54:f3:dc:5f:1e:dc:9e:47:0b:cf:d4:fa:e3:
97:42:96:e4:88:b5:c1:46:89:c1:aa:2f:ec:67:f6:
01:64:9a:68:d1:64:7e:53:b6:71:f7:85:bb:c4:fc:
46:b5:aa:a7:51:72:64:33:e5:55:4e:8c:26:1c:06:
5b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:22:D4:3C:C7:BE:2C:81:B5:64:BA:75:25:C9:27:69:C7:65:70:08
X509v3 Authority Key Identifier:
keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:34:b4:ef:08:9d:b2:51:0a:2c:b8:a9:23:c1:f1:27:3b:bc:
46:44:bc:1e:55:2f:20:42:ca:e9:b7:3a:49:11:b7:10:5c:8e:
de:13:14:01:b5:8f:90:d5:54:27:f1:a6:8b:ca:62:14:0a:cc:
1a:09:1e:de:7e:d7:b2:7e:03:8a:f2:45:fe:28:9a:84:c8:a6:
d9:c3:56:71:c6:67:a3:f6:0d:93:4d:4e:9e:b1:93:01:52:dd:
65:ce:3d:7b:aa:2d:34:7e:13:b4:ba:74:79:34:e2:92:47:25:
50:b4:84:58:e6:76:c5:a4:25:b0:d5:1d:68:89:6e:53:65:52:
6b:36:1c:15:04:6c:90:53:ab:a5:67:04:c7:3a:ac:b6:f5:be:
bc:1c:09:ed:f2:b9:b3:c6:cd:ca:b0:32:b4:54:24:61:7f:c4:
bd:dc:ff:a1:20:94:5c:c5:31:c1:94:6b:c7:58:f4:4f:9b:39:
11:fe:bd:7d:f4:98:95:da:fe:59:52:3a:d4:9a:dd:8f:fc:69:
82:8f:e1:0d:b9:50:e8:1a:04:6d:7c:8b:80:52:d4:0a:de:41:
04:00:98:ea:c5:ee:b1:1c:2b:76:3b:a1:3c:fe:8d:79:2d:70:
50:0c:59:6e:13:d6:be:f0:29:de:3d:f1:a0:93:9f:6d:3c:26:
e9:aa:00:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:44:14 2026 by rpki-client