
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
File: uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft (raw, json)
Hash identifier: 4MhlYxEFMp/qTcRKkpXmGdeokbvAOPWnBwVHqCV/4Ak=
Subject key identifier: 0B:A0:CE:98:2A:F1:98:C3:C5:B3:FE:CA:CD:79:00:79:3D:8B:96:62
Authority key identifier: B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B
Certificate issuer: /CN=A919D88F/serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
Manifest number: 0119
Signing time: Sun 05 Apr 2026 05:19:45 +0000
Manifest this update: Sun 05 Apr 2026 05:19:45 +0000
Manifest next update: Sun 12 Apr 2026 05:19:45 +0000
Files and hashes: 1: uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl (hash: H777Jg9CvF0kzCDvz3sa1JeFqx2CD2SDzmWph3L2AKM=)
2: 17613044905F11EF8B4BC46BC4F9AE02.roa (hash: CHWaj2FyJMKWSBZ+2E7O8yNYSlqC+2eBltmle+urUy8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl
rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:19:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D88F, serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
Validity
Not Before: Apr 5 05:19:45 2026 GMT
Not After : Apr 12 05:19:45 2026 GMT
Subject: CN=69d1f0f1-e093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:bf:d5:2c:1e:85:0c:50:2d:d6:75:cd:ff:
83:31:de:1a:99:1e:65:c0:44:4c:1f:d5:b8:7a:32:
98:3e:ef:d9:5f:d5:fd:18:28:92:52:0d:9a:39:ef:
d2:31:ae:9c:15:d1:3c:1f:d3:71:72:49:e9:cf:de:
e3:19:5a:53:2d:74:d9:b4:73:79:79:98:0c:f0:33:
a9:32:9b:0f:39:41:4d:ad:75:58:17:e7:5b:31:88:
14:fa:42:25:47:10:40:49:79:82:2b:e6:de:30:f2:
95:5c:f3:d3:f8:e3:5b:91:f5:50:fb:6b:c4:1d:83:
e1:ea:55:00:3d:df:7f:62:0d:b1:0e:84:dc:ce:da:
37:4a:89:12:c9:03:48:11:f9:1f:9c:cc:66:54:8d:
a3:a6:2d:db:d5:01:ba:62:94:41:b4:f3:76:52:41:
42:06:50:93:c4:51:d4:cc:56:8f:42:84:2c:a8:dc:
b9:47:a6:50:db:e9:54:17:1e:3e:f1:13:ef:79:7e:
a7:cb:2c:8a:e4:d2:cf:5f:b8:95:e1:44:67:b9:bc:
0d:8b:c5:7f:9f:f0:11:a5:60:d3:5c:46:90:47:10:
8d:d1:f4:df:60:3c:c8:f7:28:0b:4e:7e:4d:04:2d:
10:57:52:9d:9c:92:51:c0:03:b3:c3:bb:85:83:31:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A0:CE:98:2A:F1:98:C3:C5:B3:FE:CA:CD:79:00:79:3D:8B:96:62
X509v3 Authority Key Identifier:
keyid:B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:33:fa:46:43:83:5a:c8:31:95:86:8f:32:8e:5e:ab:4b:36:
26:d2:e9:18:08:6a:50:ad:55:ed:0e:c8:22:1c:ac:93:82:36:
5c:cf:c2:3b:34:ed:4b:b2:7a:02:bf:8e:97:b0:1c:f6:63:5f:
63:ab:8e:28:b0:dd:53:ff:dc:8f:da:cd:b4:e3:e1:bd:1c:54:
17:f7:aa:24:d5:88:89:0b:b0:5f:ec:da:ad:a3:7c:57:b9:a9:
c4:20:d6:e5:b6:9d:d5:b3:8c:ad:ff:44:a3:67:01:91:82:e7:
11:be:b9:29:bf:b5:55:71:6c:f9:82:9d:9b:91:26:76:b4:10:
b4:16:29:a6:6b:33:b6:1f:77:1c:81:c4:84:cd:7d:b8:58:7a:
60:a5:9c:c0:b8:0d:6a:4e:7d:8d:0d:da:b6:49:26:91:dc:ba:
80:7e:52:0e:7d:d1:10:a0:f4:ea:e7:78:93:f2:b1:89:b5:6b:
44:c1:65:ec:86:2c:6d:ff:a6:fc:03:a5:7e:3f:ca:0c:7a:35:
43:bd:d0:73:1e:77:92:0c:af:8c:cf:56:df:25:51:c0:11:9d:
86:d9:f8:1e:60:bd:e6:b7:34:d6:f4:60:c5:8d:95:90:31:72:
01:fe:82:be:90:1c:e9:97:50:71:bb:2b:12:dc:1b:a2:53:f6:
90:fd:3f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:37:04 2026 by rpki-client