
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
File: UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft (raw, json)
Hash identifier: WCxnQWbGaayMMJidIxa1+8xAB+D9Z1/WIFF14YP+vHY=
Subject key identifier: E5:58:26:3F:D2:26:2B:E3:82:22:5F:60:74:DA:9E:33:72:0B:60:9B
Authority key identifier: 51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4
Certificate issuer: /CN=A9160DDD/serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
Manifest number: C4
Signing time: Fri 23 Oct 2026 07:30:24 +0000
Manifest this update: Fri 23 Oct 2026 07:30:23 +0000
Manifest next update: Fri 30 Oct 2026 07:30:23 +0000
Files and hashes: 1: UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl (hash: 9n66WAkGHHBzTbAgM2e/NlTtnkymnu63qaCands9r0c=)
2: 6AF2E1BE2DAF11F19CE413ADA5833773.roa (hash: 6znwPc6Gl9kggv35BnsusiOFNa88rVLXL3l4po9MopM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl
rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 07:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160DDD, serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4
Validity
Not Before: Oct 23 07:30:23 2026 GMT
Not After : Oct 30 07:30:23 2026 GMT
Subject: CN=6adb0d0f-b1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1b:a4:6d:d4:46:f4:d3:f1:18:9c:c7:5e:5b:
52:17:64:de:a7:64:be:ef:1a:d4:7c:cc:4d:26:a6:
1a:fa:08:46:02:26:7d:1d:8e:02:d6:3b:48:1b:10:
d1:3a:bd:53:f2:34:93:85:a7:33:8d:5b:45:d3:92:
48:f5:40:a0:eb:4b:43:ea:33:1f:04:d3:6c:1a:ab:
41:4f:01:89:64:0d:b7:05:eb:63:96:2e:75:b1:19:
21:6b:13:23:e8:23:d1:07:83:d0:33:12:80:dd:1e:
0f:f3:30:41:e2:dd:ab:eb:e6:eb:cb:dc:48:35:df:
af:dc:03:f2:bb:4d:2b:65:12:20:13:c3:ff:d5:71:
c9:bb:b8:31:7a:fc:f2:fe:75:d5:e9:9c:ad:c4:33:
31:27:a3:82:25:61:72:19:93:50:2d:89:7b:e6:60:
1c:b4:f8:0c:10:d7:75:88:89:6a:03:41:75:77:f1:
d0:ea:c1:d2:9f:8f:46:fd:5e:20:1f:e3:5e:ad:21:
35:8b:89:98:f8:ef:6f:17:02:fb:07:32:bc:e4:14:
5b:c8:10:48:5b:0d:90:7e:a8:85:92:78:0d:cc:e4:
b6:2f:1a:69:73:26:bc:93:ac:ee:c0:aa:c6:34:38:
cc:d4:35:67:19:d8:be:71:35:9a:d1:ee:d5:a3:69:
1f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:58:26:3F:D2:26:2B:E3:82:22:5F:60:74:DA:9E:33:72:0B:60:9B
X509v3 Authority Key Identifier:
keyid:51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
df:55:67:e4:f4:05:71:11:10:38:e6:dc:fe:14:ec:89:e5:1f:
7c:b8:7a:48:f0:2f:a7:a1:4a:83:cf:1f:ee:00:a0:23:dd:6e:
94:52:e3:79:fa:b0:53:4e:ab:4d:ae:c2:77:e9:3a:eb:0a:b2:
3b:f5:a3:0b:69:7e:8b:6e:96:5e:f2:c5:af:d3:ff:b1:4d:40:
6f:6b:8a:e4:88:64:69:99:64:bc:83:db:99:ad:25:bf:9c:7f:
13:f6:12:36:ad:e6:c4:55:fd:0e:be:85:5c:88:88:5b:45:8a:
7a:a5:8a:3d:79:22:01:8c:33:9b:cf:e2:e6:86:ba:b9:e9:be:
5a:39:95:6f:83:88:4e:cb:8d:02:bb:40:30:3f:6f:e7:d9:ea:
13:4b:ad:69:91:52:06:48:71:ba:58:24:2b:2b:62:16:3e:0a:
3d:fe:89:03:7c:68:28:aa:e7:19:d1:92:7a:b7:ea:89:28:89:
8a:af:13:fb:8b:0d:5d:1d:d2:d7:84:c9:9b:10:bd:81:f0:26:
45:ba:e0:17:27:51:08:df:0d:a9:57:6e:3e:a7:23:bf:b1:b1:
1b:f1:26:90:41:34:4a:6f:0c:b5:13:a9:43:ef:c1:62:8a:f6:
36:15:65:02:78:57:fb:f9:80:ab:8e:b0:e1:de:35:03:14:35:
6d:3c:a3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:50:06 2026 by rpki-client