
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.mft
File: UYdFx6LySigtdUZZUC_WYh3HYYQ.mft (raw, json)
Hash identifier: 9f6YTcd8aYE2dwdttmLt/ONW8XvIMgM1gnpoVfo+6/8=
Subject key identifier: 67:1F:66:E6:F3:CE:91:B5:D7:38:54:05:D7:17:C5:3E:C3:53:07:C4
Authority key identifier: 51:87:45:C7:A2:F2:4A:28:2D:75:46:59:50:2F:D6:62:1D:C7:61:84
Certificate issuer: /CN=A915FE2E/serialNumber=518745C7A2F24A282D754659502FD6621DC76184
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UYdFx6LySigtdUZZUC_WYh3HYYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.mft
Manifest number: 05
Signing time: Mon 31 Aug 2026 09:38:22 +0000
Manifest this update: Mon 31 Aug 2026 09:38:21 +0000
Manifest next update: Mon 07 Sep 2026 09:38:21 +0000
Files and hashes: 1: UYdFx6LySigtdUZZUC_WYh3HYYQ.crl (hash: DlP2TVUXwm5mnxs97pxbuJCFNa+w2pc8q8dQ78qUi2c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.crl
rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UYdFx6LySigtdUZZUC_WYh3HYYQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 09:38:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FE2E, serialNumber=518745C7A2F24A282D754659502FD6621DC76184
Validity
Not Before: Aug 31 09:38:21 2026 GMT
Not After : Sep 7 09:38:21 2026 GMT
Subject: CN=6a954b8d-e110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:df:3a:85:0e:ed:57:dc:cb:f2:89:88:58:fc:
4d:c6:04:d9:60:5c:11:94:69:11:f3:58:68:54:41:
7f:46:bb:b7:94:41:c6:18:19:b4:49:17:f9:21:ed:
b6:b3:e2:e1:c4:8b:83:09:d2:6d:d1:10:bf:f1:5e:
63:a9:8d:a8:45:56:11:33:92:66:79:2a:3f:92:39:
8c:67:6e:a5:b4:2d:8a:5e:20:55:87:d8:0f:3e:a8:
0b:cf:56:55:16:ba:a4:55:8f:90:f6:35:c5:f9:ed:
01:82:3f:c0:1a:05:36:bd:57:c7:26:01:c9:f9:d1:
28:94:99:7e:43:d9:37:b1:bb:3b:5e:a9:a9:92:9f:
51:2d:88:03:35:12:70:2a:01:2c:ed:82:60:44:43:
60:be:8d:4d:2a:03:15:b1:73:73:37:7b:d3:7b:a6:
c4:e3:00:27:16:af:9a:3c:dc:b5:0d:2a:54:6b:a0:
50:42:8a:43:20:89:41:37:ba:20:95:48:93:bd:7b:
37:45:6d:4d:6e:57:6e:d7:a0:d6:7b:ae:2e:f7:fd:
ec:7f:0d:fa:1d:5d:99:49:a0:af:75:ec:ea:80:3a:
48:61:ee:4e:d2:ac:0c:67:ed:2d:50:50:f2:21:51:
1a:bc:19:f6:07:82:2c:fd:10:25:66:37:4f:c4:3f:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1F:66:E6:F3:CE:91:B5:D7:38:54:05:D7:17:C5:3E:C3:53:07:C4
X509v3 Authority Key Identifier:
keyid:51:87:45:C7:A2:F2:4A:28:2D:75:46:59:50:2F:D6:62:1D:C7:61:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UYdFx6LySigtdUZZUC_WYh3HYYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:be:c6:d7:48:25:e7:99:b6:e4:9a:dd:19:4f:48:f2:4e:66:
b9:95:41:3b:b7:f8:b4:fd:22:5a:e3:1f:54:43:5f:13:9f:2f:
0e:67:31:95:6b:fc:63:44:61:15:ae:41:ed:f2:b7:90:d0:11:
32:09:16:41:dc:c7:d1:1d:42:6d:a6:d9:05:49:5e:65:9c:0f:
68:d9:b0:f0:5d:1b:9b:cd:2d:89:34:e6:b6:d1:44:de:7b:c7:
2e:7c:11:42:d1:c6:f5:70:27:92:10:b8:6b:10:18:13:3e:cd:
45:32:ab:e4:a6:7d:d1:30:22:9a:8e:b3:fb:ae:a3:79:80:a8:
5f:aa:4a:1b:67:ea:0c:32:82:d5:75:8d:fb:98:dc:0f:d0:d0:
d4:20:71:80:91:e8:14:87:cc:27:6c:04:4e:d5:17:49:ef:2f:
d8:28:d1:14:f4:14:28:dd:a2:a0:f3:66:97:4e:ac:f6:48:53:
68:82:65:d6:a9:ce:b9:7a:17:0e:30:d0:16:6d:44:0b:14:0c:
5e:c6:67:5f:b6:c7:05:f9:d7:43:a0:4f:e7:b9:f3:11:87:d5:
9c:3d:1f:78:30:69:f4:fb:0f:80:31:d9:0f:7a:91:a0:25:5e:
45:fa:62:d8:93:2c:46:b4:4e:9e:1b:f5:f1:29:39:5c:91:27:
9a:b5:d4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:29:58 2026 by rpki-client