
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft
File: Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft (raw, json)
Hash identifier: JhFX985MQ8hWD8D0Ii+/zGjMZliUVYzy3woc4X5eI1c=
Subject key identifier: A4:8E:60:36:8B:A2:26:5B:1A:C1:16:4C:22:FE:03:EE:85:17:AE:8A
Authority key identifier: 52:5E:D5:31:69:81:A5:0B:DC:02:AC:5B:D3:C5:AF:D4:11:61:49:7F
Certificate issuer: /CN=A9159558/serialNumber=525ED5316981A50BDC02AC5BD3C5AFD41161497F
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft
Manifest number: 0E
Signing time: Tue 19 May 2026 08:59:44 +0000
Manifest this update: Tue 19 May 2026 08:59:43 +0000
Manifest next update: Tue 26 May 2026 08:59:43 +0000
Files and hashes: 1: Ul7VMWmBpQvcAqxb08Wv1BFhSX8.crl (hash: btRws1pnWt/VcSqtI1ZSVrRh3b9QI0+P228prHCPwgw=)
2: C8CE775E435C11F18454B6E5B6833773.roa (hash: plcT4dsgJqUos2P4lyFZDl4QJQLWQP6vKlNauLCZCuI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.crl
rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159558, serialNumber=525ED5316981A50BDC02AC5BD3C5AFD41161497F
Validity
Not Before: May 19 08:59:43 2026 GMT
Not After : May 26 08:59:43 2026 GMT
Subject: CN=6a0c267f-36be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5f:5d:70:02:3b:38:f4:d4:2b:bb:6d:96:a0:
17:f7:fa:c3:f7:36:af:ad:0b:49:f8:f2:57:85:68:
5d:a2:3a:73:12:29:1b:15:64:12:0a:49:30:c3:bf:
5d:95:5e:73:e9:2a:c5:62:2b:d2:ff:17:9a:71:c9:
63:77:50:6d:6e:c8:65:69:1c:1f:47:d3:06:8b:4e:
fd:ad:e8:a2:70:3f:4f:d4:1e:23:f4:e9:33:44:00:
e1:98:58:2b:4d:0d:3d:3c:8e:6c:1e:6d:81:cf:c4:
f6:87:e5:aa:6b:9c:48:3c:f3:a3:94:4f:3a:34:42:
e9:31:e2:9f:d3:71:13:06:a7:f4:0f:58:17:b7:a9:
7a:17:d8:fe:e6:96:87:1f:fc:e8:15:2e:80:ac:90:
1b:9f:9c:ed:cf:65:4e:da:5e:67:d4:c5:d2:22:33:
72:dc:ac:93:34:74:e4:c2:4e:d7:93:d1:d6:8a:0f:
63:39:df:ed:d1:49:2e:e7:6d:48:70:d0:da:e2:dc:
b4:47:a7:39:50:3f:00:a8:9a:6e:d0:7c:36:f5:ca:
ce:c6:43:da:e9:ed:ff:f5:02:04:3c:1b:fb:05:bc:
25:86:a6:8e:4d:72:51:1e:3a:c9:af:82:a7:dc:27:
ff:77:39:64:33:0e:4a:ca:71:ae:26:d4:5b:6a:20:
ed:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8E:60:36:8B:A2:26:5B:1A:C1:16:4C:22:FE:03:EE:85:17:AE:8A
X509v3 Authority Key Identifier:
keyid:52:5E:D5:31:69:81:A5:0B:DC:02:AC:5B:D3:C5:AF:D4:11:61:49:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3c:45:7a:9d:28:16:ad:16:8a:94:65:c0:a0:2e:81:87:cc:
89:6b:79:3b:a1:e1:5e:c3:45:73:f9:75:26:ef:17:73:ad:f5:
e7:f4:d4:24:8f:29:01:63:c8:29:3b:76:3d:0f:8f:3c:4c:bc:
d1:54:63:dd:1a:06:6a:4a:24:b4:17:2d:6a:94:fc:c1:0f:d4:
ca:31:1f:4c:b7:f6:f2:b0:4b:b1:dd:3b:11:ed:ff:92:06:48:
d5:6c:4d:99:04:41:1b:99:12:b9:df:b1:0c:72:20:41:64:d3:
af:f3:35:44:7f:a0:bc:b2:b3:df:5e:82:5d:26:f2:84:a6:52:
6f:9b:81:8f:8a:4d:f6:47:c3:9e:e2:a8:f4:c5:48:01:a7:cf:
b0:bd:7c:98:7c:6e:8f:3a:22:62:dd:58:64:93:b8:47:32:88:
8e:10:b9:91:58:ad:d9:dc:f9:d6:cf:7a:48:fe:be:bf:2a:e7:
e6:12:80:15:cf:ac:0f:9d:fc:8c:19:95:ac:63:f9:f8:09:49:
7b:f4:90:61:19:b2:3c:84:8a:0f:9d:6f:06:30:12:45:79:02:
e5:41:7d:2f:ce:a8:84:be:87:ef:d9:cf:5e:fb:9d:1c:a8:df:
c5:c6:b3:8b:b4:e0:50:8d:45:6d:5e:1d:06:b2:a8:80:5d:94:
ea:8b:a6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:29 2026 by rpki-client