
$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
File: Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft (raw, json)
Hash identifier: T5BJNY+lO40q8m5xrd53WFBU6aCtYcc2gVr2PAqiiKY=
Subject key identifier: 89:FE:FF:E5:07:ED:E3:48:6E:90:61:20:D2:35:20:66:56:48:40:A4
Authority key identifier: 52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4
Certificate issuer: /CN=A918549C/serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
Certificate serial: 0183
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
Manifest number: 016A
Signing time: Thu 21 May 2026 05:08:35 +0000
Manifest this update: Thu 21 May 2026 05:08:35 +0000
Manifest next update: Thu 28 May 2026 05:08:35 +0000
Files and hashes: 1: Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl (hash: KzW205guEItIv7DmTRktjBl9MmlmZ0dqFEM31YXNpvQ=)
2: 84EA927E542E11F1841CD3D09E833773.roa (hash: H6+hiH0Wf4LtBHz+j6wt18MVM3Bzc1hOF2RIT8Bfs7c=)
3: 627CDAE66FE011EF937A9931C4F9AE02.roa (hash: FIYhkWhliZfmaNdyiwyu/uICwO2OD8M+gfP485RLdMw=)
4: AC038F18740611F0B304387CC4F9AE02.roa (hash: bY/B4JU6Y1TEwNQXXEFLMC1cB/ayUFqxvBrD5wkPK/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl
rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918549C, serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
Validity
Not Before: May 21 05:08:35 2026 GMT
Not After : May 28 05:08:35 2026 GMT
Subject: CN=6a0e9353-a1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0d:ed:23:b4:e5:1c:f4:0c:99:62:7b:87:01:
9c:fb:62:29:02:e8:3e:a4:4a:c1:12:1c:4f:82:60:
a1:e4:0f:e4:63:9d:4d:56:1c:d8:56:e4:f8:eb:13:
f6:b1:61:fb:92:2d:25:73:06:c4:c6:d9:30:41:b8:
f2:78:9e:89:37:16:ca:5c:18:bc:fc:a6:af:1a:b2:
1a:b2:d4:f1:55:0e:4b:b8:ff:94:64:17:1e:4e:57:
35:67:18:dc:ee:ad:2c:d2:f3:e2:fc:e7:fc:78:e5:
26:52:89:3b:2a:04:f6:c8:22:d9:c7:6c:0d:e7:de:
e6:30:da:92:7e:a4:97:ab:45:ca:fa:e8:07:f1:8f:
1a:93:7d:4b:db:98:51:8d:45:a6:f0:74:cc:f6:a0:
5d:03:56:55:28:a9:4c:d7:cb:d2:71:03:8c:ff:43:
d0:6f:46:c6:c8:7e:25:79:bc:bf:ab:51:c5:ea:19:
77:b5:03:ff:29:3a:fe:b4:0a:fc:a7:5d:67:75:b9:
0e:7c:91:ed:4a:39:cf:7b:90:4d:5b:43:6d:86:20:
3d:4e:30:12:de:4c:e0:cb:13:09:4b:10:12:a9:2c:
ae:c8:8e:c3:d8:bb:9f:a6:9c:d2:c8:95:a1:19:19:
f5:19:3d:89:41:6b:64:f8:79:d2:34:b8:6f:04:0a:
52:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FE:FF:E5:07:ED:E3:48:6E:90:61:20:D2:35:20:66:56:48:40:A4
X509v3 Authority Key Identifier:
keyid:52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:54:81:53:33:30:ee:49:39:47:13:83:e3:3e:f3:14:10:bd:
36:7e:60:74:8b:d8:fe:71:b8:89:a7:5b:c1:18:05:8d:fc:f9:
9d:41:d0:f3:d7:74:da:a7:3a:eb:57:ee:cc:63:4e:8d:a3:dd:
84:f3:07:c1:ad:87:fc:20:5d:c7:ee:ce:7c:74:70:4b:ae:2c:
98:fc:fe:d3:f7:2a:36:ad:75:c1:fa:82:f7:2e:d2:07:3e:40:
a5:5b:cb:a9:17:77:d9:f8:80:13:0a:dc:d1:ce:5c:f3:1b:a6:
c3:10:84:40:d4:e4:59:e5:65:71:39:66:f9:ba:87:ea:a2:44:
10:47:2d:f9:cf:c2:a9:92:c4:09:b0:76:18:a5:3d:15:e6:b8:
d1:35:55:13:4c:a6:6d:74:08:e2:d0:50:2c:cb:3e:64:f1:6b:
56:dc:9e:5a:36:aa:21:be:8b:ba:a7:53:7e:3d:69:90:85:22:
ba:7a:9a:4d:6f:0b:96:e3:4f:1c:a6:51:33:f2:7a:76:2a:9e:
8f:9b:7d:96:5a:83:cd:ae:ab:87:a7:3d:aa:98:ee:9e:d5:8f:
7e:93:d5:9d:fb:28:4d:b1:1a:a8:82:09:77:4d:e0:3c:5c:e5:
c2:b3:56:e8:8b:87:38:cf:aa:fb:cf:d0:75:ce:ba:1e:65:6d:
da:d4:36:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:39:58 2026 by rpki-client