
$ rpki-client -vvf rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
File: 01UDTjnACz53K-oBQambzhQnrfQ.mft (raw, json)
Hash identifier: LrCFPKuF0OpNFYv92OBn0bbCU7imgrPA9YpruBP/4k0=
Subject key identifier: 99:FB:AA:61:C8:87:2B:77:77:9C:7C:0D:9B:E3:F0:65:87:1C:10:FE
Authority key identifier: D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4
Certificate issuer: /CN=A916537A/serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
Manifest number: 26
Signing time: Thu 21 May 2026 09:02:30 +0000
Manifest this update: Thu 21 May 2026 09:02:29 +0000
Manifest next update: Thu 28 May 2026 09:02:29 +0000
Files and hashes: 1: 01UDTjnACz53K-oBQambzhQnrfQ.crl (hash: 3prUwcnsChHleWtDE6k/BiCIycLg7RYCvfZhTY2M7Sw=)
2: 58EE9E1227E311F1A1CB4281AA833773.roa (hash: yPIdqNt/dpH6aJ38rvENnZ/i7R2Mb/uLxcqBp1Vco0I=)
3: B32ED56A27EB11F1BCE516B1AC833773.roa (hash: Z+wnvZGdyya/p79JNqeHLnyos7VD9XGeNRtgVLhtA0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.crl
rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 09:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916537A, serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
Validity
Not Before: May 21 09:02:29 2026 GMT
Not After : May 28 09:02:29 2026 GMT
Subject: CN=6a0eca25-ea87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:92:d1:b0:23:6d:0c:b0:c5:14:48:d5:cd:13:
66:4a:f1:cd:25:01:ad:6e:d4:96:8b:bf:9c:63:e5:
25:24:92:f2:82:74:bc:bd:2a:45:24:72:81:1c:e6:
cc:04:9d:1a:c1:e3:5a:62:7f:88:19:46:9d:18:fe:
a7:2a:cd:c7:68:af:72:1f:84:33:17:b1:52:7c:18:
0f:c1:35:c9:e6:3b:a6:76:ba:78:e3:3a:81:24:fb:
24:5d:66:e8:89:b3:64:b2:57:37:b2:35:45:a4:40:
3b:17:08:6a:1f:a1:dd:60:b8:35:4a:65:5d:07:eb:
88:8d:fb:84:48:c6:45:40:27:fa:58:2e:4e:a0:67:
e1:73:d5:6e:a3:2d:ef:ac:63:42:2c:e6:05:79:7b:
77:01:9f:d1:71:be:64:b4:e5:73:4c:7e:80:18:e2:
29:c3:5e:87:1b:db:2a:d7:06:d8:b4:60:1f:2d:a9:
a5:54:50:7b:ca:99:01:87:a3:ae:45:57:e2:2c:b5:
40:d1:c0:f4:fa:2c:00:1d:98:ba:0c:d3:15:7c:5e:
0a:b6:8b:07:8f:32:9f:7e:08:ae:28:d9:4a:f0:c2:
ac:40:b5:0e:84:08:08:4a:5a:5a:21:eb:54:ee:e0:
b8:b0:15:c9:6d:39:ac:e8:e7:3d:00:27:7d:05:b6:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FB:AA:61:C8:87:2B:77:77:9C:7C:0D:9B:E3:F0:65:87:1C:10:FE
X509v3 Authority Key Identifier:
keyid:D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:85:64:69:d6:b8:89:47:33:f3:89:76:52:fa:43:d9:b1:70:
27:c4:10:5d:28:fd:7a:41:2d:44:a5:df:da:d2:7b:43:6e:19:
12:d0:06:b2:a6:d9:10:ba:72:b2:36:96:fd:8d:f3:42:4f:a3:
1e:b2:f8:5b:fe:a5:26:ec:bb:63:a2:74:64:1d:4d:d4:2f:ff:
64:39:9c:a7:ba:4e:f5:95:88:ae:77:a2:df:a9:8f:d1:34:82:
8e:45:e1:4e:f5:91:59:fe:19:dd:c9:3e:82:70:45:75:d9:a4:
c1:3d:43:4e:9f:5f:ed:53:71:de:7a:59:be:fc:7c:12:cd:71:
65:b6:cf:a2:80:36:71:00:52:77:e5:66:ba:bb:8d:be:6b:d0:
b1:44:9e:3e:ca:c8:cd:b6:96:1b:b9:a9:05:33:84:24:f5:e6:
44:b0:4d:09:00:65:58:b1:72:1e:e1:62:83:7d:45:b0:9d:b8:
e0:a8:25:15:8f:66:b6:8f:d3:65:5f:2a:f2:1b:92:cc:7c:79:
63:75:ea:1b:52:cd:99:cd:86:17:2c:95:e8:a8:8e:e1:de:71:
82:4b:0b:0b:88:aa:c6:fa:4a:a2:4b:1f:83:d0:d1:6e:9a:d0:
32:58:57:c0:24:0d:59:dd:f3:b6:86:26:ca:53:08:2f:e0:64:
67:f9:29:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 13:24:43 2026 by rpki-client