
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
File: UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json)
Hash identifier: peHfaHiJYng+CHx3p1sxQwC4oFSlF3C5XusvWTfjy9k=
Subject key identifier: 94:41:1B:86:C8:5E:26:76:45:B9:20:EE:0D:4B:7C:C2:AB:70:49:C3
Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A
Certificate issuer: /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A
Certificate serial: 19BA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
Manifest number: 19BA
Signing time: Mon 02 Mar 2026 16:25:18 +0000
Manifest this update: Mon 02 Mar 2026 16:25:17 +0000
Manifest next update: Mon 09 Mar 2026 16:25:17 +0000
Files and hashes: 1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: 8jk4Qhe2abnsYMHwPu/YeBexeesbiAzEuDTaBSY9Frs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl
rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6586 (0x19ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED18, serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A
Validity
Not Before: Mar 2 16:25:17 2026 GMT
Not After : Mar 9 16:25:17 2026 GMT
Subject: CN=69a5b9ee-94c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:52:0f:7d:57:26:6a:41:6e:cd:33:ea:93:4a:
cc:45:10:ca:3e:c8:f2:3c:73:9c:e8:91:f0:23:5d:
e3:b0:f2:8d:3e:3b:6b:19:94:ab:a4:9d:7f:c0:3b:
be:85:5a:69:e7:f1:fe:ef:df:fc:55:44:fa:5d:7a:
b7:9e:fc:ca:dd:66:c6:4d:94:dd:89:31:ff:e6:c4:
f1:f2:4c:0e:8a:50:f0:3b:e3:5a:d0:a0:8a:d0:f4:
0a:3a:2a:3f:9a:17:c0:15:67:49:2c:28:c0:ce:88:
a9:ef:a1:85:f0:cd:1a:ae:1d:15:13:37:48:51:ed:
bd:92:95:2d:48:41:af:8e:71:d0:14:e3:5a:23:fd:
32:dc:ec:11:d6:73:a7:2d:78:29:de:fd:06:1e:23:
44:0a:9e:f1:e4:b3:71:d4:3c:55:ec:e5:1d:5a:b9:
31:56:0f:9c:1f:f8:d9:bc:81:39:e4:21:f4:d7:35:
ee:26:e9:b6:8e:2a:9b:ce:c6:8b:46:3d:7c:40:60:
ad:eb:ac:64:d2:41:da:67:82:73:d2:ad:2b:a3:1a:
a4:e4:72:8d:31:b7:61:40:af:99:79:fd:77:a4:b1:
64:55:e7:fb:d5:3e:95:bb:80:37:1e:08:d5:c2:aa:
88:0c:d9:54:29:ee:b0:f9:86:d2:ea:31:dc:26:07:
90:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:41:1B:86:C8:5E:26:76:45:B9:20:EE:0D:4B:7C:C2:AB:70:49:C3
X509v3 Authority Key Identifier:
keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:81:e4:0b:c5:53:40:ab:e6:64:0f:f1:bb:ff:35:c6:43:3a:
b9:b8:f5:f3:ba:ea:56:3f:d1:db:56:ed:1d:c0:aa:ef:9a:8f:
00:77:d5:3c:36:9c:5e:07:55:89:69:38:43:31:cd:9b:e5:67:
07:39:fe:21:b4:64:5f:4c:c6:b6:3b:4c:c6:20:48:5f:eb:1a:
2a:9e:8a:f7:29:d1:eb:b2:c8:5b:0f:17:39:3c:07:fa:7f:c1:
4d:ba:4c:39:f7:de:75:92:8c:c3:36:4a:40:c6:7c:70:b5:e2:
88:b7:ed:9b:d3:78:e8:e2:d5:ba:f0:05:ea:fe:4a:f0:3f:50:
93:d5:07:e4:c2:ab:45:79:f2:ee:3e:5d:16:ad:a8:01:5b:e5:
e2:8a:7b:2a:f6:ee:63:76:7c:44:c7:cd:35:bb:0d:86:b4:db:
3b:83:5c:4c:6e:46:ea:99:40:30:bc:c9:dc:eb:47:a7:1e:97:
99:4f:3d:90:9d:d7:ae:fe:4a:a8:8e:4e:d9:58:d5:79:5d:d6:
eb:3f:0b:1f:35:a5:ed:1a:cb:46:a4:34:a0:cd:9a:63:3b:ea:
b6:db:dd:dc:ae:fd:3a:5f:cb:7a:ff:67:7d:11:64:8c:0a:17:
0b:f9:e4:a2:c8:f6:1c:a8:aa:b2:65:4c:30:1d:60:e7:5e:71:
3e:02:e6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:03 2026 by rpki-client