
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft
File: uftCI-sDug7mzge0ZgIXr69xbV0.mft (raw, json)
Hash identifier: ZxdTlPh67GcHpo6X/wZe6PSY3sZelibzBJJJq7VlFi0=
Subject key identifier: 7E:CB:B8:6A:2E:F8:33:30:A3:84:2D:84:B8:CC:AF:C8:6B:6C:CB:B2
Authority key identifier: B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D
Certificate issuer: /CN=A916D5A2/serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D
Certificate serial: 072B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft
Manifest number: 0722
Signing time: Wed 20 May 2026 21:57:02 +0000
Manifest this update: Wed 20 May 2026 21:57:01 +0000
Manifest next update: Wed 27 May 2026 21:57:01 +0000
Files and hashes: 1: uftCI-sDug7mzge0ZgIXr69xbV0.crl (hash: vykIXO0A0LDFPW2ptu1Mo8X7Mt7dghZ3osnpOOuTYRk=)
2: F5250AEAB57011F0A97B9E77C4F9AE02.roa (hash: cJ6ClHoJnIBJ/+Oi+qhInxZPrOApd8f0+KJb59HyFQU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl
rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1835 (0x72b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D5A2, serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D
Validity
Not Before: May 20 21:57:01 2026 GMT
Not After : May 27 21:57:01 2026 GMT
Subject: CN=6a0e2e2e-c9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:24:1d:c5:b3:4a:28:36:52:80:a6:76:31:
bb:58:4f:08:d3:49:db:83:5b:4f:5c:a4:78:47:b8:
67:a2:fc:79:f5:d7:c7:4c:9f:03:c4:b1:cf:80:b3:
8f:b3:2f:84:9d:38:04:71:54:1e:73:65:61:21:0f:
ec:b4:0e:5a:63:75:14:84:a6:34:f0:be:b8:5c:7c:
b0:9a:dd:d1:bb:bc:f6:15:c9:60:61:9e:0d:87:af:
51:2d:31:89:76:a1:a8:e5:8e:ba:3a:10:cd:8b:77:
80:d1:b1:fc:20:14:e6:47:96:44:1a:24:e6:d1:ea:
6e:4c:cb:e3:e1:d6:ae:60:2f:3c:17:de:24:97:2d:
e4:dc:a1:d8:83:ac:eb:9d:81:47:f6:6b:77:25:51:
77:a6:a9:ea:d9:e5:58:b2:f0:61:ff:34:5a:55:02:
30:08:d8:50:9f:76:74:de:0e:2f:d3:10:d5:cf:87:
8d:ae:2a:21:25:cb:66:11:4c:96:36:99:bb:31:e3:
5a:dc:e3:83:95:09:3b:81:dc:05:db:84:58:50:f2:
da:fd:70:96:87:0c:ec:c8:7a:d5:4e:dc:8e:80:cd:
cf:db:06:aa:05:a9:c2:b0:12:34:ac:fe:2c:16:cd:
88:40:7e:6a:14:dd:02:d8:22:0a:57:6b:bf:7a:e5:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CB:B8:6A:2E:F8:33:30:A3:84:2D:84:B8:CC:AF:C8:6B:6C:CB:B2
X509v3 Authority Key Identifier:
keyid:B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:af:d9:c4:7d:4d:40:7f:ae:a7:a6:9f:d9:30:32:6f:cb:18:
8b:bb:93:5b:07:79:a8:35:02:b5:c2:68:6d:85:a0:92:fb:96:
36:f5:68:de:94:33:a9:41:72:92:bc:92:46:b7:cb:86:a8:7f:
34:18:cb:ff:24:66:e9:37:22:20:4f:eb:c3:04:da:e9:35:7c:
07:01:79:7d:58:11:7d:1b:a9:8d:4b:60:22:1f:fb:53:5d:92:
e2:c1:65:49:56:67:fb:de:4b:9d:84:f9:7e:b3:76:6b:c6:02:
f9:28:40:18:9f:6b:ea:84:f2:a7:8f:14:82:86:c0:35:a9:f8:
41:a1:a1:3b:4f:ab:43:1e:25:28:1b:43:d3:77:39:53:a4:a9:
0b:01:51:be:9f:26:a9:b5:c9:da:40:1f:16:b8:99:35:14:03:
b6:40:3a:7d:2e:df:21:0f:a6:73:c5:af:f0:10:bb:31:c6:8a:
bc:00:43:e3:4c:a6:29:84:25:5e:08:c0:ed:08:0d:f5:bc:8b:
a6:b2:eb:e3:40:0f:3b:54:76:2e:95:20:c3:60:ee:71:09:60:
4c:28:20:fd:cb:b4:50:07:d3:d7:87:e2:7b:e8:97:d2:59:1f:
79:17:dd:10:b0:1c:3d:7a:2b:fa:30:40:c2:07:d1:a1:ee:0a:
01:5d:86:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:08 2026 by rpki-client