
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.mft
File: uwftRksoDVf6dxhB939S6n1QeSc.mft (raw, json)
Hash identifier: jKzDB833sSfzayIGzr2/9OWa+GTqJFGEQfLTxHf1pZs=
Subject key identifier: 47:DD:9F:6E:C5:DB:7D:B4:83:C1:50:E3:4A:9B:86:59:B7:1D:1B:76
Authority key identifier: BB:07:ED:46:4B:28:0D:57:FA:77:18:41:F7:7F:52:EA:7D:50:79:27
Certificate issuer: /CN=A9193D85/serialNumber=BB07ED464B280D57FA771841F77F52EA7D507927
Certificate serial: 10FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwftRksoDVf6dxhB939S6n1QeSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.mft
Manifest number: 10DD
Signing time: Sat 04 Apr 2026 17:12:41 +0000
Manifest this update: Sat 04 Apr 2026 17:12:41 +0000
Manifest next update: Sat 11 Apr 2026 17:12:41 +0000
Files and hashes: 1: uwftRksoDVf6dxhB939S6n1QeSc.crl (hash: +lbUUl50Rnz108ChFbRJkQORnI/7VVaoYv60/gkiQ1U=)
2: 52138B923FCA11E9AB28853CC4F9AE02.roa (hash: ytoLJQxhbuD3d+mCzd+m3gOAm3/jBypiMni3/VxJwlU=)
3: AB2D69A4217A11EA9AB7211BC4F9AE02.roa (hash: YBbb1T4yGjr4zKoDIDL1a6qpliyvnkdM4IyeoY9geO0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.crl
rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwftRksoDVf6dxhB939S6n1QeSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:12:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4351 (0x10ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193D85, serialNumber=BB07ED464B280D57FA771841F77F52EA7D507927
Validity
Not Before: Apr 4 17:12:41 2026 GMT
Not After : Apr 11 17:12:41 2026 GMT
Subject: CN=69d14689-22c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:61:57:9b:f0:30:63:fd:2e:a6:61:a0:ec:
d0:9b:61:f4:e0:97:12:e4:d1:d5:12:68:3d:fe:3c:
d4:0d:b1:11:c9:fe:02:08:e2:1a:13:a2:42:c4:62:
5b:5d:b8:a1:b1:02:12:5f:e1:8b:d5:c0:a4:81:3d:
64:81:8a:70:53:e1:e0:e6:44:62:c4:6f:08:d1:fe:
ef:be:e3:e4:9d:35:55:5c:52:6c:73:26:0e:b3:92:
60:70:b3:ec:e7:fa:65:62:40:ca:7e:35:ef:77:3f:
16:c7:ce:52:5f:43:89:f2:c3:76:4a:64:d5:e9:60:
2c:aa:ae:c1:98:e2:12:eb:2f:6c:a5:e8:44:19:34:
9a:9e:f6:35:85:ed:e6:b2:97:4a:4e:30:85:95:e1:
e9:8d:e5:ff:fb:c7:02:55:9b:a2:c8:f2:c5:6c:14:
a3:f3:90:9c:dd:45:1b:2e:a9:47:f4:32:19:b7:3d:
0d:ca:58:af:1e:7e:e8:fc:af:90:18:c5:3f:72:b2:
13:93:50:c0:f7:ba:32:73:e4:81:6f:83:73:74:88:
98:d4:7f:b6:ee:76:78:a5:aa:11:56:4e:82:00:9a:
31:69:fc:de:b7:0c:9e:cd:16:41:2f:22:47:68:9b:
40:77:2c:75:5b:8e:f8:31:67:07:78:b4:37:f4:1a:
38:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DD:9F:6E:C5:DB:7D:B4:83:C1:50:E3:4A:9B:86:59:B7:1D:1B:76
X509v3 Authority Key Identifier:
keyid:BB:07:ED:46:4B:28:0D:57:FA:77:18:41:F7:7F:52:EA:7D:50:79:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwftRksoDVf6dxhB939S6n1QeSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:e5:48:f2:c5:6b:55:d7:b4:0c:83:ea:77:50:c6:5f:a6:ed:
fc:cb:fd:13:93:7c:a4:ad:23:6f:b6:6e:62:0d:e8:56:10:8b:
a8:54:2c:67:ce:fd:82:af:56:e7:cd:58:2b:d0:d5:92:99:3e:
4c:ce:ba:60:d4:c3:9a:7d:07:c3:dd:ac:eb:72:40:3f:64:87:
65:2b:d6:15:49:5d:0f:65:f2:5d:3d:99:af:a8:23:a9:bc:d9:
9c:af:54:5a:2b:05:b5:ba:27:79:a1:33:97:19:0c:5a:fd:42:
e4:6d:04:8d:a5:53:56:8f:10:69:3c:ee:fd:30:ec:5b:9c:21:
86:85:53:1f:4a:4c:a6:a0:f8:47:f8:e7:fd:c6:97:ae:ad:54:
56:3f:36:60:27:26:39:e9:31:0d:ae:a0:a5:d8:d7:e9:78:44:
6d:c1:10:e8:25:f9:c8:8f:89:12:1c:a3:1c:d8:e3:08:7e:7c:
aa:09:13:c0:14:f9:6f:60:4e:f5:c5:c6:f4:43:ca:00:2e:5a:
91:d7:e7:13:e1:00:9f:f7:f1:98:46:52:cc:df:4a:83:63:c7:
45:ca:02:d7:17:27:23:9e:7e:8c:b7:84:a7:e1:de:70:95:07:
99:d5:da:cc:db:0e:62:cf:e0:68:ed:a6:18:ec:77:9e:22:73:
90:29:bc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:20:58 2026 by rpki-client