
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
File: uH-tZU7EIXxlANDwaxm-MZ09rfc.mft (raw, json)
Hash identifier: 6onystFNFlII/vbgDk3f5PLKiixmyXYZ7Agx4n99co4=
Subject key identifier: FE:83:43:E2:35:F9:1D:67:1B:C6:5C:51:99:1B:90:10:A3:5A:DD:63
Authority key identifier: B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
Certificate issuer: /CN=A9155725/serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
Manifest number: CE
Signing time: Tue 21 Apr 2026 06:36:59 +0000
Manifest this update: Tue 21 Apr 2026 06:36:59 +0000
Manifest next update: Tue 28 Apr 2026 06:36:59 +0000
Files and hashes: 1: uH-tZU7EIXxlANDwaxm-MZ09rfc.crl (hash: h0sWiniDB6JFCKDnUTMgx+r/HISvmSXfPDHRW7XUcLY=)
2: 75A4B2D4084611F08BEB2E2DC4F9AE02.roa (hash: YxGLaTIXF5/4zegk0ebGTbG3KkMe3GF8/cFOY/M/JZM=)
3: 7621BEA0084611F08BEB2E2DC4F9AE02.roa (hash: ekv9lLMJowy0tTt5Vgk8NN5c2QvrR8UHcRzo+mWEFnI=)
4: 753F0588084611F08BEB2E2DC4F9AE02.roa (hash: GvdeGH0sSCGiMmyFpeTDGYKnqtnBqjejK6ik65LVhK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl
rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155725, serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
Validity
Not Before: Apr 21 06:36:59 2026 GMT
Not After : Apr 28 06:36:59 2026 GMT
Subject: CN=69e71b0b-5be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:9e:ef:3b:3e:35:d8:47:56:7e:01:f2:6e:
50:8f:5e:4c:24:b5:13:e4:50:31:87:1a:e6:1d:2f:
65:e1:2a:b1:1b:81:36:3e:92:d1:54:89:e1:83:2e:
b7:d8:65:97:ef:fa:29:ad:32:03:b0:e2:8f:41:17:
a9:93:a9:64:21:3d:31:0b:cc:97:89:ab:d5:bb:5d:
6c:ff:30:87:ec:a8:51:06:12:9e:b2:6d:bf:f5:18:
d6:87:56:5e:33:58:d5:2b:5e:ba:41:e8:d6:0c:16:
bb:1c:86:56:eb:a5:20:b8:14:16:d9:b2:0b:96:fa:
f5:c5:8d:9c:1a:f6:b3:d4:02:35:48:26:ce:a5:93:
ed:2d:68:ba:a0:5e:68:25:d8:93:db:b3:0f:ed:31:
6a:85:9b:2c:6f:a7:54:d5:64:45:7d:c0:7f:7b:99:
6a:2d:4c:ef:9e:d8:c3:e1:d2:9d:1f:02:26:da:eb:
ac:04:3b:3a:2f:3c:94:39:8c:ec:e7:bb:0c:d6:e9:
95:fe:5f:01:38:ec:f0:b9:03:fe:66:ff:ff:1e:2f:
bc:18:4c:e4:ec:07:86:49:24:75:68:11:c7:a3:94:
3e:0a:c1:64:2a:de:61:0e:11:14:2e:fe:d8:8c:8f:
3a:05:66:43:b8:32:14:09:ab:f8:d0:a7:8c:8b:55:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:83:43:E2:35:F9:1D:67:1B:C6:5C:51:99:1B:90:10:A3:5A:DD:63
X509v3 Authority Key Identifier:
keyid:B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:1d:d9:94:62:67:26:3f:6d:29:76:58:ac:76:28:b5:e7:e3:
ff:08:46:17:69:b3:7a:06:2a:9d:29:61:94:6e:98:39:29:30:
d9:f2:7b:5a:72:2c:81:39:96:a6:c7:8c:3d:ff:cc:76:19:7b:
96:48:0b:3c:78:ab:8c:9e:7b:98:71:0b:47:2d:f8:0b:5b:55:
83:ad:bb:55:06:1f:cc:2f:11:cf:d5:31:c9:c5:0c:13:cf:0c:
9a:9d:cf:4f:84:d6:3c:0d:0e:1e:2e:da:95:e2:f5:80:b3:08:
51:e4:05:3c:a1:d6:1f:b5:9a:31:b9:34:74:a6:51:68:c8:d9:
76:4c:ae:fb:8e:66:f4:1c:6f:d3:9e:64:cc:91:bf:85:b7:35:
2d:88:9f:16:0e:a6:06:c0:9c:46:9c:0f:7c:34:4b:94:02:3b:
27:75:df:5b:6d:2d:73:4c:e1:c4:68:54:00:fa:cb:aa:72:e2:
11:97:34:3e:0c:99:9f:e2:4d:86:49:d0:1d:3c:38:b7:e3:26:
dc:da:07:2a:75:35:00:52:e7:26:59:2f:4a:13:7c:22:a4:54:
ff:32:8b:26:64:35:3f:46:ec:f2:dc:cf:11:a3:34:fd:cc:89:
9d:8b:ea:53:f7:6c:44:3a:e4:1b:2a:ed:e9:72:62:44:d0:09:
42:53:77:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:39:06 2026 by rpki-client