
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
File: UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft (raw, json)
Hash identifier: chXPY5cHKAfyZc+j4jPNJaoSNqTwC1FOwKQ/k6ilU2E=
Subject key identifier: 47:01:7E:E9:22:51:EB:50:06:F8:C1:47:56:66:AD:D3:18:3F:81:33
Authority key identifier: 51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4
Certificate issuer: /CN=A9160DDD/serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
Manifest number: C5
Signing time: Sun 25 Oct 2026 07:17:58 +0000
Manifest this update: Sun 25 Oct 2026 07:17:57 +0000
Manifest next update: Sun 01 Nov 2026 07:17:57 +0000
Files and hashes: 1: UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl (hash: akkhdtlBKUxelRhVjKpn6cZI9RkORUKNVbaE+HUAKaE=)
2: 6AF2E1BE2DAF11F19CE413ADA5833773.roa (hash: 6znwPc6Gl9kggv35BnsusiOFNa88rVLXL3l4po9MopM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl
rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 07:17:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160DDD, serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4
Validity
Not Before: Oct 25 07:17:57 2026 GMT
Not After : Nov 1 07:17:57 2026 GMT
Subject: CN=6addad25-280d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:60:e3:5a:bd:fd:81:70:ba:3f:fd:60:e3:90:
f4:44:cd:c6:d4:d3:c0:36:d1:44:f3:dd:a2:3c:c5:
91:4f:81:7a:29:fc:4b:61:62:84:d2:b9:f8:29:f9:
05:4a:2f:47:69:44:81:52:13:90:d3:b8:f0:cd:ed:
94:d1:9c:72:2b:90:ff:bd:ba:fb:e2:fd:6e:32:dd:
4e:36:a3:a9:c0:0a:c7:c5:db:2a:59:27:d8:ca:61:
98:fa:95:39:f0:50:a6:8b:99:13:83:ae:aa:c5:88:
40:4e:26:dc:bf:27:86:e9:d6:58:6b:6a:ef:92:aa:
fb:3b:ef:c9:d2:d8:e9:21:9a:70:bb:78:ab:4b:d5:
15:ba:eb:68:b2:d6:7b:e8:0a:d0:84:75:62:54:8e:
ca:2d:52:dd:4d:5d:64:a7:07:e5:9b:1f:38:51:be:
80:86:7d:a5:02:79:6d:ed:c3:10:11:36:a9:91:30:
53:94:9e:d5:55:99:88:e4:90:56:97:65:2a:e0:43:
04:bc:77:b6:a9:53:8d:85:79:f8:11:31:89:4d:ef:
74:4a:ff:f5:0b:6c:6c:94:b5:d2:46:e5:71:b6:a9:
2d:40:6a:4c:6d:70:8b:6a:86:a4:85:1f:46:3f:31:
73:a7:f7:c9:d2:ec:3f:23:2e:ae:73:8c:67:a8:d4:
cb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:01:7E:E9:22:51:EB:50:06:F8:C1:47:56:66:AD:D3:18:3F:81:33
X509v3 Authority Key Identifier:
keyid:51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:94:74:a1:10:74:73:f6:c2:7b:a8:ae:fd:79:73:9a:12:9c:
29:e1:de:5f:38:a0:db:37:ab:01:0c:b6:d6:e0:f4:88:b2:05:
41:7c:cf:06:d0:8e:db:33:03:51:29:8f:74:2c:19:26:6c:cd:
7a:b2:1b:dd:7f:55:fc:d7:2e:0f:19:77:61:b5:30:74:d5:77:
1e:1a:80:db:75:34:98:01:22:0a:09:e5:d5:58:46:82:70:81:
ef:38:7b:25:e1:ba:8d:ab:79:1a:ad:18:6f:0a:4d:f4:92:e8:
0e:31:f6:66:ee:d4:bf:e2:7d:1f:83:09:26:34:30:1f:74:85:
bd:d0:55:97:65:84:5b:f3:83:f4:db:60:59:f2:2f:d6:ea:3e:
f2:fd:c0:f1:48:c1:fc:46:63:dc:e0:8b:1d:50:af:f3:d8:aa:
1f:d5:ff:b5:08:96:fc:04:6a:c4:22:db:83:80:af:e5:4b:61:
82:93:9a:5f:82:ce:67:11:d9:d8:c8:97:b6:9d:88:10:a0:f4:
3a:a1:74:2a:af:06:76:a3:e6:6d:91:45:c9:1a:09:8e:34:57:
1f:d9:21:23:68:f8:f9:7e:8c:1f:51:4f:b5:f2:c2:a2:72:e4:
ea:5f:9c:68:5a:f4:4a:75:1f:51:6e:6e:fb:6b:96:d4:a2:6b:
ef:13:99:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:03:55 2026 by rpki-client