
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
File: uHLzTVUlH6dw7MOT0mcSED1VBzc.mft (raw, json)
Hash identifier: 434T32wbmKe0Xaq+fxrQliliTBT7Wg1n76gFen7BGhk=
Subject key identifier: 52:B8:23:E0:8A:D3:55:08:AE:FC:C1:73:47:2A:6D:6F:1D:BB:B5:CB
Authority key identifier: B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
Certificate issuer: /CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737
Certificate serial: 046C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
Manifest number: 045E
Signing time: Tue 31 Mar 2026 00:05:17 +0000
Manifest this update: Tue 31 Mar 2026 00:05:16 +0000
Manifest next update: Tue 07 Apr 2026 00:05:16 +0000
Files and hashes: 1: uHLzTVUlH6dw7MOT0mcSED1VBzc.crl (hash: lJOujzRanMzv9QE1CydQ1kbQDR1SO3GoJp1C8uWKX24=)
2: 945375FAF69511EC90A47215C4F9AE02.roa (hash: zMi/iKJQrGzXvdGe1pLHWvdh1dvtB0WJqrM1vceGtKE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl
rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1132 (0x46c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C606, serialNumber=B872F34D55251FA770ECC393D26712103D550737
Validity
Not Before: Mar 31 00:05:16 2026 GMT
Not After : Apr 7 00:05:16 2026 GMT
Subject: CN=69cb0fbd-fd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:a7:4a:e3:2b:5a:10:fc:30:e6:9d:bf:77:
35:18:ff:e0:d5:7e:6e:ac:5b:17:e6:55:12:fd:ba:
30:70:8d:8e:e7:ac:e5:33:15:01:00:13:bd:1c:79:
80:60:dd:de:63:4f:ed:46:0f:20:e0:46:bf:c0:5e:
76:61:1d:e3:de:96:9f:77:62:7c:bd:ff:d3:9e:c3:
00:34:f3:8e:39:ec:ca:ba:5a:9c:8a:4f:09:f7:3f:
19:ee:b9:63:18:22:ef:8a:28:70:0d:e3:d9:10:18:
98:32:af:c0:76:83:5d:f5:f6:90:62:54:3f:95:6e:
9d:ae:ad:a5:f0:b3:91:cd:ca:52:a6:09:22:fe:fd:
70:e9:e2:93:16:03:77:1a:db:82:a0:83:54:7d:d1:
b6:70:e4:8c:ea:c9:2a:34:18:8b:17:93:c7:8f:96:
a7:0e:f0:de:a1:6c:7a:a7:c0:4c:eb:42:28:f3:05:
31:3e:bf:53:c3:cf:ce:9c:dc:b5:8c:02:b5:34:9d:
23:4a:78:95:d8:af:19:5c:3b:12:e5:37:1f:63:4f:
33:7e:df:fb:3f:f1:ba:cd:06:87:95:07:72:26:54:
1a:3a:26:f7:5d:e9:fa:a2:33:aa:30:7b:e6:7d:38:
dc:83:97:ed:57:29:a0:76:cc:03:21:b2:f8:fb:37:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B8:23:E0:8A:D3:55:08:AE:FC:C1:73:47:2A:6D:6F:1D:BB:B5:CB
X509v3 Authority Key Identifier:
keyid:B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ea:b4:ba:bc:e0:58:2d:12:c9:42:63:15:83:d9:27:45:47:
07:a6:e4:c8:a3:c7:dd:73:9c:82:d7:01:8a:fc:d6:f9:7e:a9:
d1:44:8b:82:e3:8a:e6:18:72:b9:66:2f:0b:88:86:3d:f0:37:
29:f8:46:bc:6f:ba:aa:8d:46:99:da:db:ab:bc:33:3d:ca:e8:
fe:b4:64:39:4a:f6:23:9a:2a:ea:59:61:24:0b:62:0b:b4:b4:
7d:2c:4d:f6:40:1b:a4:90:dd:7e:99:cd:7a:63:c9:ad:d8:94:
8b:72:21:13:f4:56:e2:cc:84:00:d5:96:8e:f3:bd:59:da:07:
e4:90:07:a1:6b:11:a1:ae:af:3d:f1:da:98:31:f7:16:21:10:
2b:49:51:3e:94:51:d6:18:4c:7a:ef:8b:d6:ff:a1:df:3b:52:
1a:f6:ac:8b:2b:55:63:35:5c:fd:71:4e:59:ba:e3:1e:9d:d2:
09:79:21:7c:76:5b:0e:da:24:19:6e:c2:23:c2:48:1d:d6:8f:
d1:03:b8:a3:81:e1:37:e2:ae:94:be:b4:1d:37:1f:00:f4:02:
79:e8:45:7f:bd:59:9c:33:cb:f2:0e:d6:f2:d1:93:fa:97:56:
b8:67:70:1c:c3:68:78:2c:75:f1:96:37:ea:81:33:1c:5f:c9:
dd:4c:53:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 11:55:24 2026 by rpki-client