
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
File: uH-tZU7EIXxlANDwaxm-MZ09rfc.mft (raw, json)
Hash identifier: BygTFsVYB01gUaMyrx+liJ+AC/aW+mtbeTj0UtCeEoY=
Subject key identifier: D7:AB:D6:2F:58:E1:C3:10:19:A7:55:F0:52:A9:AE:7E:82:7D:2F:BA
Authority key identifier: B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
Certificate issuer: /CN=A9155725/serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
Manifest number: 0112
Signing time: Thu 03 Sep 2026 06:10:50 +0000
Manifest this update: Thu 03 Sep 2026 06:10:50 +0000
Manifest next update: Thu 10 Sep 2026 06:10:50 +0000
Files and hashes: 1: uH-tZU7EIXxlANDwaxm-MZ09rfc.crl (hash: twF8Coo+8SkZ93wO1iHCXuFqvKDWRQ5AcVlp97s/5Mk=)
2: 7621BEA0084611F08BEB2E2DC4F9AE02.roa (hash: ekv9lLMJowy0tTt5Vgk8NN5c2QvrR8UHcRzo+mWEFnI=)
3: 753F0588084611F08BEB2E2DC4F9AE02.roa (hash: GvdeGH0sSCGiMmyFpeTDGYKnqtnBqjejK6ik65LVhK4=)
4: 75A4B2D4084611F08BEB2E2DC4F9AE02.roa (hash: YxGLaTIXF5/4zegk0ebGTbG3KkMe3GF8/cFOY/M/JZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl
rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 06:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155725, serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
Validity
Not Before: Sep 3 06:10:50 2026 GMT
Not After : Sep 10 06:10:50 2026 GMT
Subject: CN=6a990f6a-cd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:04:b4:66:ef:66:8b:6b:44:f1:c0:32:8a:7a:
d0:0d:2b:fc:e4:f6:1b:77:cf:d9:e0:ae:89:b4:d1:
c7:1f:fc:16:0d:10:8e:28:1a:d4:c6:95:94:36:5e:
7c:ee:a0:37:cf:29:a1:48:5e:94:47:a7:d0:29:e5:
64:31:b2:88:c3:77:1c:06:44:95:1f:33:27:cd:81:
1d:e3:fd:da:53:92:d7:17:6a:12:4a:a6:0d:f2:b3:
69:b5:6a:81:a8:05:64:ad:06:8c:9e:16:2b:25:b8:
5b:6b:f0:ab:96:8a:64:2d:85:fd:22:8d:63:31:78:
f7:d2:e0:e8:01:2f:13:e9:22:c9:a6:70:78:8c:ee:
43:5e:48:18:39:83:79:2b:24:09:92:94:09:87:42:
b3:bb:4e:f6:ab:27:ff:1c:fb:4d:73:7f:32:39:2c:
ac:7b:13:3a:04:ed:e5:97:2e:d8:02:08:17:ed:c7:
fd:11:a5:ee:d1:8b:8d:98:85:8b:d4:6d:58:74:3d:
ee:84:b2:f1:8c:ad:48:6f:a6:b9:61:ae:1a:70:aa:
00:3f:37:84:62:47:01:2f:28:ba:c5:44:ff:0d:95:
0e:8f:84:da:17:2b:3a:90:15:ec:b8:88:58:d6:bb:
35:61:7f:38:41:ce:5a:15:85:2a:45:40:6e:cc:e0:
6b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AB:D6:2F:58:E1:C3:10:19:A7:55:F0:52:A9:AE:7E:82:7D:2F:BA
X509v3 Authority Key Identifier:
keyid:B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8c:57:93:0c:91:43:cd:c2:45:fe:8d:5f:7c:90:e5:7d:e3:
32:d3:96:f3:8b:f7:b2:d5:eb:ad:fa:84:86:8a:bd:f7:01:ad:
41:ad:71:6d:f0:30:dd:bb:85:ec:fc:c1:a1:c4:11:92:d4:a8:
c3:48:88:ee:8a:fe:00:bb:1b:c2:99:bf:50:7d:e4:76:27:3d:
b3:33:c3:94:2d:c0:15:f2:d9:94:04:73:2e:b5:30:4d:3f:dd:
2b:ea:e4:58:53:e6:26:da:99:52:6f:95:72:28:93:73:7c:2f:
fd:28:3c:12:e2:03:f0:d0:3d:e3:d2:2f:a6:16:4f:e6:d1:96:
c7:78:c4:3e:64:a1:19:ab:89:ec:4f:8a:9c:72:a6:78:3f:26:
6d:07:0c:3e:2f:f2:9c:f0:ce:4b:e5:c7:23:18:4e:1b:d1:6c:
f0:e8:37:e1:ae:3c:e3:60:60:60:8b:b8:dd:a8:f3:d7:39:54:
60:d5:c5:cd:4b:2c:99:4f:d2:94:d8:16:73:fd:75:5c:ad:5c:
e1:85:c0:f4:7c:d6:46:bf:52:27:b8:33:ce:14:d3:5c:2b:4f:
5c:f0:75:39:16:cb:4c:d3:ed:be:14:93:20:54:21:ce:80:20:
44:95:a9:8b:99:a6:cf:b5:c5:a2:b8:37:bf:54:de:e4:6c:32:
3e:84:4a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:33:24 2026 by rpki-client