
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
File: UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json)
Hash identifier: iSI52PJEwf/FPHdD37n5zkyP6/Jk5YVr063cPDUBVWo=
Subject key identifier: 55:A8:70:24:4D:B7:B9:42:D4:7E:1B:3C:46:A3:26:38:59:AE:E1:77
Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13
Certificate issuer: /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13
Certificate serial: 0C7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
Manifest number: 0C71
Signing time: Thu 24 Sep 2026 18:37:28 +0000
Manifest this update: Thu 24 Sep 2026 18:37:28 +0000
Manifest next update: Thu 01 Oct 2026 18:37:28 +0000
Files and hashes: 1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: bT4CCZUCckRPO05fB1TRHrKt9aEyLecOSQsmgXyYfZc=)
2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: HVSrkMHkZUPuPigIBAFRqYkv/0wRB+c6OCpvUKZ3fUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl
rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3195 (0xc7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117754, serialNumber=531749095E449FD82AA1DB50DA834017230BDD13
Validity
Not Before: Sep 24 18:37:28 2026 GMT
Not After : Oct 1 18:37:28 2026 GMT
Subject: CN=6ab56de8-9b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:21:67:46:e5:9b:1f:59:87:3a:25:b7:7e:
52:87:0b:ba:2d:01:b1:51:a4:65:3e:8c:da:fd:12:
4b:25:f2:16:d5:54:5f:a1:14:3d:03:54:76:fb:c8:
2b:c4:70:b1:15:2e:74:e5:1d:ac:11:2b:c3:b2:74:
60:50:30:41:52:8c:35:ee:41:d6:df:c8:3a:1e:26:
14:5e:1b:7f:f8:da:ba:87:78:f4:aa:eb:55:2b:70:
43:cc:cd:ac:bd:11:ba:6f:ff:32:bb:11:c1:f6:03:
4d:e5:3a:0b:c4:46:d3:fb:6d:58:fb:ee:69:8a:c6:
53:4d:76:86:5e:36:c8:33:9a:f9:e0:89:c4:b3:58:
f6:51:fc:b4:60:62:96:8b:71:98:ea:80:90:42:8b:
1a:c0:8d:56:0d:b4:d9:98:00:99:29:09:ab:9f:8e:
0d:e1:7e:73:81:74:c2:ea:9f:75:5c:c4:dc:2b:40:
50:78:94:61:91:4c:41:d2:09:e0:62:70:da:a8:3f:
b8:f5:41:58:9a:96:22:2f:2b:68:ba:d0:6f:3e:61:
aa:33:2a:8d:95:40:b5:f1:56:59:94:71:9a:35:0e:
fb:a0:80:70:b2:cd:cb:9a:0d:c0:c8:36:b9:22:04:
c1:d9:12:99:69:70:0c:08:c9:47:14:4b:76:43:fd:
e4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A8:70:24:4D:B7:B9:42:D4:7E:1B:3C:46:A3:26:38:59:AE:E1:77
X509v3 Authority Key Identifier:
keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:be:a6:45:40:6b:71:e0:90:f7:7d:90:41:46:de:ef:c9:6f:
08:12:dc:18:e8:99:9f:02:a4:1b:fc:66:7f:c8:64:0e:c0:67:
20:ba:b7:01:b1:dc:6c:7f:99:ef:88:70:b3:ac:32:a4:e8:83:
9b:32:72:49:5c:96:54:85:ce:87:71:dc:88:77:73:db:b1:6d:
c1:41:32:c1:6e:04:95:0d:0e:1b:9a:55:f0:d9:ac:ca:8b:36:
b1:25:fe:59:1f:e1:34:9e:5d:66:98:9d:2e:db:03:e0:7e:99:
bc:79:44:e6:93:fc:59:14:ba:7d:7b:dd:ce:5d:38:39:25:8f:
d2:1c:6c:63:1e:5c:d9:1d:74:47:60:2c:4e:95:55:5c:22:52:
7d:3d:05:55:46:cf:2c:93:df:03:3d:60:36:11:63:dc:c7:1e:
bd:3b:b6:83:0f:4f:b9:77:ed:6f:33:4a:26:3c:12:7a:36:2f:
e3:33:5d:ed:fe:0c:17:d3:8d:47:a1:36:a6:3c:15:5b:60:90:
94:a3:e9:1a:97:61:65:73:06:20:75:9f:b2:76:0b:f4:79:d4:
a9:05:e9:b3:51:41:7f:9d:30:fe:77:b0:d9:ee:f1:1c:a2:54:
c2:60:4c:9a:77:41:9c:03:69:c2:fd:05:ca:75:c3:d6:5d:27:
a7:28:15:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:42:05 2026 by rpki-client