
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
File: UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft (raw, json)
Hash identifier: 0bUS13dEFU05vJosTYUtNWYlbrp/1RhCB9yFn4/Rzr4=
Subject key identifier: 83:89:5A:56:CE:08:03:25:32:94:21:E4:4E:9E:5D:29:4A:53:62:45
Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56
Certificate issuer: /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656
Certificate serial: 0323
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
Manifest number: 030D
Signing time: Sun 27 Sep 2026 01:12:06 +0000
Manifest this update: Sun 27 Sep 2026 01:12:06 +0000
Manifest next update: Sun 04 Oct 2026 01:12:06 +0000
Files and hashes: 1: UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl (hash: wVcQjZ/tPFZCDYScCe8+T/YYX1z+qFpfTGfC+72dDac=)
2: B288EC9C870811F0A371DD81C4F9AE02.roa (hash: 0BOrDnShuL/QhrZ0gDHGyMtGSNIca2cAczupvc+0+QU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl
rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 01:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 803 (0x323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BAD6, serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656
Validity
Not Before: Sep 27 01:12:06 2026 GMT
Not After : Oct 4 01:12:06 2026 GMT
Subject: CN=6ab86d66-5269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:f8:5b:da:44:5c:9e:0b:3a:c1:a6:80:b6:
b4:87:61:d4:3d:9c:f3:4a:8a:50:d7:f4:a0:7f:3f:
0e:ce:3e:09:f9:07:64:3d:df:09:a9:4b:06:14:0a:
26:a6:17:8c:66:1b:95:64:ff:de:3f:3f:86:75:cc:
38:ca:09:5a:d3:41:97:bb:2c:1a:79:9e:e8:27:22:
e8:4e:72:db:14:34:51:75:56:5b:1f:1c:1a:ee:b9:
5a:c0:d2:a0:53:74:11:6b:1a:c9:71:18:8a:01:c3:
48:46:d2:b5:48:52:68:48:46:77:4e:34:86:7e:d6:
df:6c:07:3a:8a:37:41:d2:37:3f:cb:64:53:d9:d4:
9d:38:aa:53:9d:16:22:d3:a1:28:1a:f9:8e:60:41:
8a:ee:41:4e:4a:44:11:61:fd:2b:8b:38:f5:55:c0:
3a:eb:d2:7a:c4:2e:fe:b0:7f:64:99:8d:e5:ea:ed:
fe:25:59:09:ab:57:2a:1e:c5:0a:54:58:67:97:3d:
a4:7c:82:8e:7e:78:2d:44:c3:81:f7:f9:48:c1:a2:
9e:65:d8:22:a7:7c:62:87:d8:0b:c6:e1:f4:71:47:
dd:3f:5c:92:2a:5d:1f:31:47:dd:29:0d:05:4f:f4:
7a:e3:69:29:f5:04:e6:5a:2a:5d:c9:ee:01:a9:78:
99:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:89:5A:56:CE:08:03:25:32:94:21:E4:4E:9E:5D:29:4A:53:62:45
X509v3 Authority Key Identifier:
keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:7e:57:ca:04:78:0b:51:4a:2c:e4:5b:dd:dd:1a:2b:4c:95:
d8:93:9c:0d:bd:e9:70:31:cb:13:13:44:70:4c:9e:7f:b0:72:
c1:53:1b:8a:43:59:da:41:79:f5:f6:49:50:65:a5:37:71:03:
e8:ea:b0:ee:95:ee:8c:d5:29:be:84:02:ae:86:a6:4c:ea:d7:
8a:ec:d0:9a:47:6e:31:ca:1e:da:62:2b:59:7c:29:ed:f2:3e:
21:ff:22:a0:a9:4c:c9:69:dc:8d:16:cd:cc:c3:6d:b7:e8:3e:
74:b6:25:d9:0b:53:c3:10:57:71:17:3e:23:ca:d7:9e:a3:7f:
ca:e2:4e:ee:d8:c9:74:d3:bd:dc:df:39:63:07:74:b7:1d:37:
ca:0a:59:8f:e0:05:c4:de:c1:ea:28:18:62:58:4b:fb:e7:c9:
af:03:83:aa:d6:91:c8:fe:f6:6f:84:65:70:90:13:68:e0:5a:
8c:24:d2:59:5f:6e:f4:7f:95:d4:4e:0e:1b:6e:18:d4:db:0c:
c4:30:47:d2:e2:5b:df:0a:5e:76:0e:7b:93:2b:45:64:13:09:
a7:67:92:05:7b:36:73:3b:97:67:48:08:50:d8:7d:8e:28:8a:
4a:7a:45:20:9b:50:b0:5d:cc:09:16:a8:4f:42:7b:e5:9c:13:
38:69:56:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:47:39 2026 by rpki-client