
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
File: Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft (raw, json)
Hash identifier: b/PRhf0roDf5pSza6HkkzhTec+wh89+BdFlqw2X158o=
Subject key identifier: FA:36:3B:BD:EC:BE:F9:29:C5:DC:F3:69:6D:6B:12:7B:CE:33:50:04
Authority key identifier: 51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98
Certificate issuer: /CN=A9183B33/serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798
Certificate serial: 0758
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
Manifest number: 074D
Signing time: Thu 22 Oct 2026 22:00:22 +0000
Manifest this update: Thu 22 Oct 2026 22:00:22 +0000
Manifest next update: Thu 29 Oct 2026 22:00:22 +0000
Files and hashes: 1: Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl (hash: vsyS8ahGYxhp1JA5rv8x/SroH5j3t+B44er8rEMU0uE=)
2: 59018DEE340611ED9C72786AC4F9AE02.roa (hash: 7UDwHDZ3X7GHUQ2fV389Pi1SQYF3Qm8coRADgJTI7xI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl
rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1880 (0x758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183B33, serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798
Validity
Not Before: Oct 22 22:00:22 2026 GMT
Not After : Oct 29 22:00:22 2026 GMT
Subject: CN=6ada8776-3dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9c:17:cd:a4:99:73:37:6c:2b:af:fd:ba:97:
ef:0b:ef:fc:d5:c2:fa:b0:c2:16:a3:32:f7:8c:95:
5f:8d:d7:07:f5:88:b1:fd:77:56:1c:25:78:e8:e4:
1f:a6:49:5b:f0:42:80:db:a4:fe:50:ee:eb:e5:11:
02:72:87:25:71:5a:9a:35:b1:38:f9:5a:11:d8:21:
d1:88:ff:09:33:15:a8:84:4b:ee:e2:71:35:12:4a:
9c:1c:e6:02:29:b5:f9:50:d8:44:1e:b4:df:28:30:
cb:72:7e:88:9e:83:53:b7:b3:e3:e1:98:e4:70:f1:
5f:5f:c9:52:95:06:a6:58:62:ea:e0:a3:15:1f:ac:
d7:17:6e:76:93:eb:a2:be:fb:cc:dd:cd:5c:b6:ae:
52:e1:6b:71:5d:fe:81:f9:8e:fd:88:bb:88:4f:b6:
df:31:f3:87:7b:f5:73:60:1a:32:b8:c0:05:74:97:
2a:1a:cf:2d:c5:cd:51:8b:78:a4:c7:02:cc:9f:b4:
86:78:54:5f:df:14:d9:58:b8:cc:ba:9b:df:53:da:
6e:36:24:da:29:ac:82:e9:1d:5b:83:ef:18:21:37:
11:43:db:b7:b9:5d:c7:f1:46:c0:45:4a:f1:7c:f3:
a7:63:15:16:5e:01:ac:ac:9e:13:fe:da:3c:23:e0:
42:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:36:3B:BD:EC:BE:F9:29:C5:DC:F3:69:6D:6B:12:7B:CE:33:50:04
X509v3 Authority Key Identifier:
keyid:51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:f4:ed:c3:d9:3a:77:3e:d8:22:24:dd:d0:47:e0:d8:f7:06:
5d:ea:f1:c6:44:9a:80:8b:66:00:41:2c:95:83:38:50:87:a5:
85:f1:7e:20:fe:2d:3e:47:32:fc:ae:0e:c3:eb:d7:b0:2e:a5:
b7:1d:75:01:cf:69:3c:68:08:cf:4c:b7:f3:98:8f:5c:24:ec:
49:73:5a:88:6c:fd:7b:57:e2:2b:cd:87:21:af:a4:e4:a1:c2:
d2:56:fb:9c:69:5b:d3:bc:84:19:3f:39:c7:9c:5d:5b:95:ee:
eb:04:50:d3:7a:d0:c5:89:bb:4b:34:53:b1:2d:b5:e4:d6:cc:
6d:5b:15:05:e4:01:44:cd:74:db:46:ae:84:17:8d:fe:79:6a:
36:b8:19:7d:b5:15:23:a1:f4:16:1b:c7:68:cf:70:e5:6d:53:
01:78:da:3a:42:4c:84:bb:6d:8a:18:67:65:9f:b9:9f:33:86:
da:75:05:a6:5b:c1:d2:c3:39:a6:12:e4:7b:10:a9:17:94:22:
12:a3:74:9a:80:47:1a:c1:76:7e:6f:de:0c:15:c2:90:92:cb:
7f:16:4b:41:ca:d7:3e:ef:fa:fd:0a:80:a4:d7:23:7a:2e:84:
59:0a:e3:ad:1d:77:ca:f8:20:c5:fb:74:41:26:cc:fc:12:4d:
e6:23:44:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:17:46 2026 by rpki-client