
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft
File: uf67oJzxCyh-7SzlZyKzyaDvEv8.mft (raw, json)
Hash identifier: 13bXQNNkO/GHN/rLlQJwNQpVH01gircupsN8f7BHSXE=
Subject key identifier: A9:C7:8C:83:94:BE:90:B6:EA:53:E9:3A:63:42:D9:99:91:FD:24:35
Authority key identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF
Certificate issuer: /CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF
Certificate serial: 0A43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft
Manifest number: 0A3A
Signing time: Wed 20 May 2026 19:44:56 +0000
Manifest this update: Wed 20 May 2026 19:44:56 +0000
Manifest next update: Wed 27 May 2026 19:44:56 +0000
Files and hashes: 1: uf67oJzxCyh-7SzlZyKzyaDvEv8.crl (hash: Ai0LIUrrxrukjM1VuA3YEHGhGfGAxVEjLYavFJx1rR4=)
2: 27030ADA8EB211EA9D09090FC4F9AE02.roa (hash: 6oS7uBHh39uRWMxaLN591g4ue4626lq3N/zDrAaQzFc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl
rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:44:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2627 (0xa43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BB7A, serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF
Validity
Not Before: May 20 19:44:56 2026 GMT
Not After : May 27 19:44:56 2026 GMT
Subject: CN=6a0e0f38-e39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:6d:12:7d:d0:24:96:56:23:15:49:4a:b6:
55:ce:44:0a:c1:c0:31:ec:6e:10:14:85:e8:71:a4:
16:74:43:9d:08:b4:fe:c5:49:7d:c4:99:bf:5f:3c:
94:47:2b:94:d3:5e:b8:86:9b:af:b9:c1:23:fc:41:
2e:d8:58:33:c4:af:79:f0:b4:91:4d:8a:dc:27:8e:
6b:f4:df:98:7f:ee:2c:43:42:82:b3:ca:d2:a0:c0:
28:81:2b:3e:44:0a:e5:51:c0:e6:0c:96:69:91:7a:
a6:be:d5:b0:cc:f4:1b:27:2c:bd:2e:1c:e4:61:f3:
f9:a9:11:d3:c2:0a:c0:63:ec:f6:81:ef:b3:54:6b:
30:92:a1:cf:24:b6:2c:5f:a2:0d:77:4f:06:15:b3:
f4:01:94:92:e6:d8:d6:1c:a0:64:c1:89:96:6a:39:
d5:a0:79:b1:15:9e:73:fc:2d:a5:22:a5:19:3a:b5:
c7:eb:0c:76:f0:2a:ab:f5:6a:e5:9f:20:d8:3d:05:
a4:ab:be:28:08:e7:70:43:59:ed:f5:2e:88:f4:11:
3c:55:cd:dc:ba:7e:20:79:f0:f6:9a:62:05:ce:f1:
a0:06:7c:05:ce:90:c8:ba:ee:4e:85:26:03:c1:d4:
8e:38:69:83:1c:b2:f6:ea:39:d6:54:87:c2:5c:de:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C7:8C:83:94:BE:90:B6:EA:53:E9:3A:63:42:D9:99:91:FD:24:35
X509v3 Authority Key Identifier:
keyid:B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:7c:dd:a5:2a:f5:c2:49:38:fb:4b:f9:58:3a:bb:be:8e:95:
7d:fd:b7:f9:23:f2:10:cf:8a:8b:66:9f:49:4d:95:a6:2a:3a:
99:be:ac:ad:0f:53:8d:33:5a:cb:22:73:83:6b:dd:cb:cd:0f:
0c:7a:4c:3a:2e:1a:7c:e8:06:aa:2e:a3:46:22:6a:d3:c9:19:
97:7e:f2:81:1f:f4:d4:ae:98:4f:1c:2d:43:e9:70:d4:c8:46:
f9:95:bd:8e:e6:ad:14:b7:60:aa:4d:13:6e:f2:08:41:7a:b0:
b8:38:99:cd:cb:4d:00:c2:c1:a4:3f:88:c8:28:5c:0d:8f:8f:
7b:37:ed:6a:fa:98:d0:d5:7d:c6:02:91:1b:42:66:de:4b:1b:
96:d2:6f:b9:34:b9:1c:a4:4f:61:80:de:37:5b:91:07:8e:9a:
8d:b0:5d:32:09:e9:2f:6d:de:c4:02:10:72:a3:67:2e:9f:2e:
92:d2:0c:c3:ec:7b:3d:4e:f3:76:50:8c:5e:2e:dc:59:3a:a3:
cf:b6:ea:6f:5d:e9:de:81:1f:89:d1:10:3c:5b:77:28:cc:3d:
d7:c8:6b:64:19:6a:d3:7d:87:ac:92:1b:ef:be:72:1f:16:19:
77:a5:00:91:30:d4:cc:e5:c8:ca:8c:c2:6a:32:8e:7e:a7:57:
2e:41:c3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:39:31 2026 by rpki-client