
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
File: uH-tZU7EIXxlANDwaxm-MZ09rfc.mft (raw, json)
Hash identifier: YfopnMoOBBslDAVJN12P5ux+0Hwwfpy7w75bUCXKiNo=
Subject key identifier: 06:71:E1:D3:6E:27:BB:19:46:89:1E:0C:17:70:11:7B:18:79:6B:E8
Authority key identifier: B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
Certificate issuer: /CN=A9155725/serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
Manifest number: B7
Signing time: Sat 07 Mar 2026 06:20:44 +0000
Manifest this update: Sat 07 Mar 2026 06:20:43 +0000
Manifest next update: Sat 14 Mar 2026 06:20:43 +0000
Files and hashes: 1: uH-tZU7EIXxlANDwaxm-MZ09rfc.crl (hash: qv7R+VQD1xJRdt/TtYx5EpvTcX5S9nVLjTBEj7U4etA=)
2: 753F0588084611F08BEB2E2DC4F9AE02.roa (hash: GvdeGH0sSCGiMmyFpeTDGYKnqtnBqjejK6ik65LVhK4=)
3: 7621BEA0084611F08BEB2E2DC4F9AE02.roa (hash: ekv9lLMJowy0tTt5Vgk8NN5c2QvrR8UHcRzo+mWEFnI=)
4: 75A4B2D4084611F08BEB2E2DC4F9AE02.roa (hash: YxGLaTIXF5/4zegk0ebGTbG3KkMe3GF8/cFOY/M/JZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl
rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155725, serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
Validity
Not Before: Mar 7 06:20:43 2026 GMT
Not After : Mar 14 06:20:43 2026 GMT
Subject: CN=69abc3bc-1550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:09:ca:d7:6a:99:80:32:2f:9b:58:6c:e4:
5c:25:ba:b8:b6:db:1e:88:c3:af:b9:7e:6b:83:b0:
21:46:0f:58:ce:23:b8:ea:4e:74:1b:87:d7:f5:30:
de:4e:23:5f:9b:a4:be:90:5b:ad:9a:31:a9:aa:d0:
9c:02:0d:60:15:18:6a:d0:14:4b:04:f4:3b:46:35:
b0:45:94:31:86:34:52:8d:76:c5:47:b9:c7:2d:37:
12:6d:e5:36:f8:89:bc:0c:fd:dd:9a:11:b3:e0:6d:
ab:b9:be:7d:6a:e6:c1:34:e3:3f:cf:59:2f:a6:96:
62:53:a9:24:6f:e2:76:78:30:a2:ae:2b:4e:ee:7e:
da:0b:e2:e2:bc:08:09:55:a1:b0:e8:bb:d5:45:85:
ba:ca:88:69:18:6f:75:df:76:31:b8:22:d2:52:c0:
ef:a2:26:d1:73:90:a7:22:d5:18:1e:d4:bd:70:a5:
6d:f0:a9:ca:ae:59:4c:3a:4c:4b:e8:67:8a:c9:e7:
9c:03:f9:8d:a1:3c:3b:1b:d4:76:60:04:79:dd:dd:
be:5f:82:bf:f7:e0:13:ee:d3:90:69:c2:87:bd:dc:
ce:40:e4:62:b2:81:63:e1:23:1a:8c:e7:b0:d5:96:
a6:2e:94:c0:70:57:41:e5:32:97:fd:c0:9e:52:bc:
2e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:71:E1:D3:6E:27:BB:19:46:89:1E:0C:17:70:11:7B:18:79:6B:E8
X509v3 Authority Key Identifier:
keyid:B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4d:0a:88:c4:50:ec:c3:c4:93:1b:84:e7:19:b6:c2:50:66:
1d:43:3f:89:ef:06:3e:0b:13:20:07:3c:2f:5f:00:7a:9c:18:
52:02:ab:5b:5d:4c:1e:08:e7:b8:78:d0:29:21:36:84:56:cc:
83:a6:30:6e:5d:de:0b:3b:29:6b:35:42:9e:9a:0b:ac:4d:8f:
49:36:b1:9f:01:8e:98:89:70:fb:6d:f1:93:6f:9e:c9:46:b3:
2e:64:1a:77:b5:fb:d6:ac:c6:bc:62:b5:87:45:a1:76:06:19:
b6:92:46:2b:f0:ce:0d:3b:85:d3:02:11:34:11:8b:5b:40:7b:
db:cf:a2:9d:17:4c:2a:93:83:af:bd:9c:08:1b:26:c1:da:0c:
87:53:94:f2:a2:c4:c5:b1:86:a3:3d:09:77:05:a3:c6:9d:e5:
2d:ca:a4:b4:87:a8:2d:03:50:9c:fc:7f:16:a9:5b:45:d8:3d:
6d:c9:77:0c:da:95:f8:ad:d4:6a:1d:ea:b5:85:ba:7b:9a:f2:
2e:31:09:a3:af:f0:3d:cd:d7:0f:7a:41:9c:2b:be:db:c9:9e:
86:7a:52:e9:ab:21:4e:91:db:eb:52:f4:7f:62:76:16:6e:86:
d8:11:56:51:c9:cd:80:bb:6c:93:ad:67:bf:f6:36:60:09:79:
f6:a8:b8:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU3MjUxMTAvBgNVBAUTKEI4N0ZBRDY1NEVDNDIxN0M2NTAwRDBGMDZCMTlCRTMx
OUQzREFERjcwHhcNMjYwMzA3MDYyMDQzWhcNMjYwMzE0MDYyMDQzWjAYMRYwFAYD
VQQDEw02OWFiYzNiYy0xNTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz68JytdqmYAyL5tYbORcJbq4ttseiMOvuX5rg7AhRg9YziO46k50G4fX9TDe
TiNfm6S+kFutmjGpqtCcAg1gFRhq0BRLBPQ7RjWwRZQxhjRSjXbFR7nHLTcSbeU2
+Im8DP3dmhGz4G2rub59aubBNOM/z1kvppZiU6kkb+J2eDCiritO7n7aC+LivAgJ
VaGw6LvVRYW6yohpGG9133YxuCLSUsDvoibRc5CnItUYHtS9cKVt8KnKrllMOkxL
6GeKyeecA/mNoTw7G9R2YAR53d2+X4K/9+AT7tOQacKHvdzOQORisoFj4SMajOew
1ZamLpTAcFdB5TKX/cCeUrwu8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZx4dNu
J7sZRokeDBdwEXsYeWvoMB8GA1UdIwQYMBaAFLh/rWVOxCF8ZQDQ8GsZvjGdPa33
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTcyNS84MDFCQ0FBNjA4
M0ExMUYwOUZGMUQwNzRDNEY5QUUwMi91SC10WlU3RUlYeGxBTkR3YXhtLU1aMDly
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3VILXRaVTdFSVh4bEFORHdheG0tTVowOXJmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTcyNS84MDFCQ0FBNjA4M0ExMUYwOUZGMUQwNzRDNEY5QUUwMi91SC10WlU3RUlY
eGxBTkR3YXhtLU1aMDlyZmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe00KiMRQ7MPEkxuE5xm2wlBmHUM/ie8GPgsTIAc8L18AepwYUgKrW11MHgjn
uHjQKSE2hFbMg6Ywbl3eCzspazVCnpoLrE2PSTaxnwGOmIlw+23xk2+eyUazLmQa
d7X71qzGvGK1h0WhdgYZtpJGK/DODTuF0wIRNBGLW0B728+inRdMKpODr72cCBsm
wdoMh1OU8qLExbGGoz0JdwWjxp3lLcqktIeoLQNQnPx/FqlbRdg9bcl3DNqV+K3U
ah3qtYW6e5ryLjEJo6/wPc3XD3pBnCu+28mehnpS6ashTpHb61L0f2J2Fm6G2BFW
UcnNgLtsk61nv/Y2YAl59qi4iw==
-----END CERTIFICATE-----
Generated at Sat Mar 7 14:37:15 2026 by rpki-client