
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
File: uxh7m1B2e7e7wih3IL02wLjQaJY.mft (raw, json)
Hash identifier: TXNSnobAdiaif+0w6Yqpx7GY9PgBcZHSkXvsC7mkW9M=
Subject key identifier: 4A:C2:13:D8:43:A0:C5:AA:A0:AB:49:AF:22:A5:42:E5:8F:D2:47:C7
Authority key identifier: BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96
Certificate issuer: /CN=A9191E43/serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896
Certificate serial: 03E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
Manifest number: 03E4
Signing time: Mon 05 Oct 2026 00:29:19 +0000
Manifest this update: Mon 05 Oct 2026 00:29:19 +0000
Manifest next update: Mon 12 Oct 2026 00:29:19 +0000
Files and hashes: 1: uxh7m1B2e7e7wih3IL02wLjQaJY.crl (hash: 24izEDQs4DIvV2AzMfc5oTi+dPRGmMS2mpq+zI04/MA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl
rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 00:29:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 996 (0x3e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191E43, serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896
Validity
Not Before: Oct 5 00:29:19 2026 GMT
Not After : Oct 12 00:29:19 2026 GMT
Subject: CN=6ac2ef5f-2b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:75:e7:3c:08:76:4c:05:19:d0:64:f1:66:1b:
f7:f4:bd:ac:71:ba:68:69:bb:32:0f:15:25:f2:2f:
2a:5d:64:7f:6e:69:90:20:fe:c1:8a:ba:ea:89:97:
6f:09:3f:6c:60:f9:c9:f3:81:30:bd:26:3d:82:bd:
34:db:be:de:06:e0:b6:cb:f0:35:1b:d9:cc:7c:66:
b4:29:d0:11:cd:74:0f:95:60:14:d9:37:dd:2b:30:
ab:8a:12:34:47:0e:71:b3:af:ad:e0:a8:59:91:cb:
1f:7a:ae:a4:3e:e5:44:90:e1:ab:9b:85:eb:34:1b:
46:58:e6:19:5d:ae:06:6e:83:a4:de:d4:c5:75:d0:
02:f8:df:e3:0e:38:9e:ca:c1:dc:46:ba:51:d7:ab:
51:27:b2:f1:d4:3b:59:66:6b:a5:2b:4c:f2:ba:c1:
db:a4:44:fc:de:33:d6:42:1d:a5:e2:53:f7:b9:16:
7f:3f:11:2a:46:37:5d:7f:f7:e2:50:d7:75:64:e0:
54:8c:58:e8:a0:20:1c:64:bc:b0:c1:57:48:12:48:
da:78:48:d7:d2:f7:c5:0c:ce:fb:05:b5:6b:e0:ff:
44:f8:2e:db:96:86:33:56:b3:d7:63:d8:58:5e:f7:
17:fe:0f:96:c4:84:86:fc:e8:18:7e:93:ba:bb:d0:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C2:13:D8:43:A0:C5:AA:A0:AB:49:AF:22:A5:42:E5:8F:D2:47:C7
X509v3 Authority Key Identifier:
keyid:BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:07:a0:f0:44:f5:8f:67:fe:8a:1a:4f:d4:fc:4b:9d:82:c4:
de:c7:ee:53:f2:f2:5a:a4:c3:bf:54:44:ce:fa:7b:fb:4f:92:
fa:dc:02:bc:cb:e7:89:46:92:29:18:30:1e:ee:d1:2e:3f:05:
15:c7:7e:46:e4:3e:3c:5b:69:1e:a9:42:08:8f:2a:36:cb:56:
90:98:92:f4:9a:89:bb:2f:b9:3d:e3:d9:ba:5b:bb:aa:0f:52:
6d:7e:c2:0b:a0:84:cf:70:e0:df:7a:9a:17:24:68:72:35:05:
d4:e6:c2:5c:c8:2d:2b:71:bb:37:6d:55:6c:b1:ac:39:1f:99:
84:b9:09:fe:54:39:62:a1:95:15:6d:74:71:9f:f7:7a:e9:b8:
34:34:9e:c6:43:be:d0:96:ee:bf:fd:22:15:be:c6:70:85:67:
33:13:ca:20:25:3a:55:2f:ff:5a:60:11:43:d2:38:57:4d:4a:
29:56:53:20:cd:6f:ae:31:ef:81:08:7a:7b:cf:68:af:e7:23:
65:44:f5:55:46:4d:7f:b7:4a:3d:95:f8:c8:12:b0:d9:f0:23:
76:49:68:93:bc:6e:7c:19:af:eb:e9:d2:ef:8a:69:4f:07:d4:
e2:b6:ba:f0:5c:bb:69:b6:16:29:b8:58:d1:9c:ca:71:f7:25:
ea:cc:eb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:32:12 2026 by rpki-client