
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json)
Hash identifier: ErelZQzkEG+WliU9Ypy//S+70xGUMVDcllMiKOmeVbc=
Subject key identifier: EC:61:44:A1:8B:E4:E5:45:99:50:92:4D:B0:0F:7D:C2:0B:91:09:E1
Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17
Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517
Certificate serial: 09D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
Manifest number: 09BE
Signing time: Tue 06 Oct 2026 20:02:36 +0000
Manifest this update: Tue 06 Oct 2026 20:02:35 +0000
Manifest next update: Tue 13 Oct 2026 20:02:35 +0000
Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: e3w/817tuUc/d2mD30Ti5ms57v7ZAGyGxFBAtAf3x+4=)
2: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: ChWEYoSwPWyO7zRK4VL3WyQc574q+WUYB0OYthzNWRg=)
3: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: oLP/jKOtL4Ffh6w6dK/dJZMBr+6GxoUP/Gc5UVj8ghc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl
rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2512 (0x9d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919123C, serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517
Validity
Not Before: Oct 6 20:02:35 2026 GMT
Not After : Oct 13 20:02:35 2026 GMT
Subject: CN=6ac553db-5ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:72:b0:5a:4e:4f:51:1d:4d:ca:f8:9f:08:f1:
3e:54:6c:3e:2f:80:f1:3a:8a:57:7d:be:c0:c8:46:
d5:ce:fb:20:0b:6c:e1:53:67:a3:57:21:14:d5:b4:
7b:c7:e9:a6:17:27:12:de:c5:bd:ad:4d:b7:d6:43:
c9:8f:1c:5e:fa:79:88:9a:b1:a6:6a:59:fe:38:6e:
86:be:ca:2e:c0:24:7d:ab:31:90:47:be:4e:a6:e2:
82:51:cb:d1:20:ba:3e:e9:d2:3c:04:7b:9f:2c:cf:
c5:a9:15:fb:3f:b0:d1:c7:67:2d:c8:fb:b4:ea:4e:
46:f4:d1:56:a8:06:d0:99:73:16:f8:ad:c7:dd:fa:
ef:cd:64:3c:74:16:19:53:6b:db:3b:05:e4:f4:a1:
61:c7:a6:2f:df:18:dd:bb:5d:76:37:40:f3:ed:48:
e7:81:90:f6:56:8f:41:3b:86:e5:c5:b8:ca:58:ec:
d9:72:26:03:c1:d8:7a:8c:50:43:8e:6c:23:94:ba:
df:d3:d1:00:b7:95:68:34:a8:a5:f4:39:81:03:53:
c6:01:e5:d1:59:b2:b0:71:47:96:17:b3:ea:f0:19:
b4:2e:69:97:52:3c:d1:8f:84:ff:b4:2f:8d:9b:1b:
a9:71:3a:72:0f:ae:89:af:c4:6e:57:e3:dd:c6:61:
55:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:61:44:A1:8B:E4:E5:45:99:50:92:4D:B0:0F:7D:C2:0B:91:09:E1
X509v3 Authority Key Identifier:
keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a1:22:b8:cd:95:bc:08:6f:77:8d:42:92:5d:e6:85:1f:47:
22:58:39:dc:22:db:80:31:83:fb:1d:b9:ab:7e:b7:3e:21:7d:
16:5c:cb:84:d6:a4:17:57:1d:70:2d:49:ef:80:dc:d7:76:86:
53:32:80:44:f5:39:35:31:b0:e0:42:8d:ee:ad:43:ec:cf:be:
8f:61:57:da:e6:32:45:42:c1:87:33:19:e0:dc:b4:07:9f:4f:
f9:5a:b9:8a:e1:27:76:44:c2:cc:4d:32:c2:bf:3f:d2:73:ee:
72:20:7e:e8:cb:df:d8:44:53:fc:d1:66:0f:df:df:e9:45:41:
ca:fe:99:58:4a:cb:45:6f:d2:7b:a6:c6:ed:39:9c:d9:87:98:
a9:0b:18:6c:a2:c4:1f:0f:49:a4:15:d2:f2:35:00:57:f9:9f:
80:58:8f:7c:37:e6:db:8a:f2:40:a0:e6:9d:69:c6:9c:72:ab:
96:e2:d3:3f:51:8c:87:3a:63:24:35:d6:78:26:bb:b8:2d:7b:
c9:7f:12:ce:f5:c1:88:15:d0:67:20:83:65:0d:b6:9c:09:df:
61:d4:61:fc:ee:13:62:2e:23:c0:70:78:9f:9b:53:c0:53:01:
1e:58:4d:51:2d:f5:40:9f:b0:0d:1a:13:c9:80:9e:69:3d:b9:
84:b4:32:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:39:51 2026 by rpki-client