
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft
File: UzfctqkbQdUhGkTCFqljq6zH4rA.mft (raw, json)
Hash identifier: Ofahr2u7b9nUhU0X6aZ9w56Sovk8Cn4xpJN3TvAe6Xc=
Subject key identifier: 92:67:2D:E3:87:15:98:E4:B2:99:A7:FF:BC:DB:07:2C:D8:C6:EB:78
Authority key identifier: 53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0
Certificate issuer: /CN=A9197FBC/serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0
Certificate serial: 3595
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft
Manifest number: 357C
Signing time: Tue 18 Aug 2026 14:47:02 +0000
Manifest this update: Tue 18 Aug 2026 14:47:02 +0000
Manifest next update: Tue 25 Aug 2026 14:47:02 +0000
Files and hashes: 1: UzfctqkbQdUhGkTCFqljq6zH4rA.crl (hash: Cpkx2XGBJD6inrOEWo6WW90yD0BqljLxljQe2b2U6mM=)
2: 8DFE2984EAD811ECA1ED8915C4F9AE02.roa (hash: p/2uNWrvsoQCe3Fz5EtEFh3Vm41+SYB3tWpnLf8PUUk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl
rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 14:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13717 (0x3595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197FBC, serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0
Validity
Not Before: Aug 18 14:47:02 2026 GMT
Not After : Aug 25 14:47:02 2026 GMT
Subject: CN=6a847066-02db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:23:c3:b0:89:93:d6:f3:db:ad:94:da:c3:8e:
e5:cd:5d:79:ec:b9:53:a9:c1:86:08:67:f8:38:55:
e7:a9:98:4c:ba:77:3d:27:c0:05:5c:20:4b:bd:73:
18:5b:cb:a2:e7:7e:2e:26:9b:8e:9b:19:46:35:28:
9f:cf:bc:dc:4b:02:2e:07:f1:ad:b9:ed:b1:1c:fb:
d8:e8:92:e3:99:f8:1d:fd:d1:38:49:1c:8e:7e:94:
55:5c:68:bd:42:e1:22:19:5c:91:a4:4b:70:fa:37:
e9:5a:b1:2e:c6:23:3a:a2:22:f4:20:f6:18:cb:b9:
ed:dd:3e:0a:22:b6:6e:3f:cd:de:3a:21:f4:a4:0f:
1e:97:64:60:00:58:eb:dc:6d:d2:96:69:60:4a:f9:
c4:5f:76:29:52:11:ee:7e:e9:31:c0:37:01:cb:e5:
19:f4:75:db:4a:2b:0f:da:cb:aa:55:94:2b:c4:b9:
f5:12:58:c8:c9:41:58:64:8a:8f:3e:3b:ff:b5:e6:
12:4b:b3:2f:4a:2e:0e:91:26:49:0b:3b:6a:2b:ab:
bb:10:0a:19:b5:ad:7d:03:81:47:ec:b3:39:8f:37:
1f:73:3a:8a:4d:df:a1:58:36:5f:87:56:d3:bc:ba:
1e:02:ff:82:38:ea:8e:5f:de:ee:b6:0b:b2:13:f5:
01:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:67:2D:E3:87:15:98:E4:B2:99:A7:FF:BC:DB:07:2C:D8:C6:EB:78
X509v3 Authority Key Identifier:
keyid:53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:c8:7e:f1:e1:31:fd:d7:86:8b:46:f1:a4:c8:0a:21:05:4e:
4a:5c:9d:f5:2c:f8:e8:2c:83:84:9d:9b:1b:2a:d3:05:b3:17:
37:cd:b0:e4:e4:f2:70:45:6c:99:a7:0c:80:64:80:34:ae:8d:
44:8f:49:aa:cf:a3:42:df:9b:d9:a0:a1:de:c9:aa:d1:51:03:
e8:4b:b9:0c:fc:e8:cf:fd:73:43:83:2d:2d:cc:2f:37:a5:f9:
af:76:63:50:af:eb:7e:5d:37:b0:fd:da:b3:ab:2e:99:7b:90:
7a:83:30:f6:a9:98:19:00:61:bc:1f:4e:3f:55:b1:2e:dd:03:
6b:ba:2f:3b:27:01:f2:d2:a6:c2:9c:47:dc:75:a8:8a:bf:e4:
db:55:98:df:6c:67:cf:8f:ec:f2:1f:a6:ba:27:7c:5c:d6:f4:
31:4d:ba:3d:a0:56:10:b5:81:77:aa:ae:68:28:a0:c1:ad:65:
a5:3f:ba:40:fb:27:f8:8f:6b:02:8a:12:ad:81:42:c9:b5:64:
da:42:27:83:85:40:26:eb:15:ce:ce:b3:50:be:38:0d:e9:cd:
a5:a3:9d:e1:9b:95:19:d0:d9:bd:08:d5:77:26:5b:73:f3:48:
d9:cb:18:44:ba:95:7f:2b:fd:f6:a5:33:14:52:1b:cc:ce:77:
4d:ac:e1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:38 2026 by rpki-client