
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft
File: ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft (raw, json)
Hash identifier: Yxg625rvT0hKoWfHRCtEHPwDG3Iv321ASb9u4TZHnlA=
Subject key identifier: 06:13:A7:44:F7:9C:B0:9B:94:26:8F:44:D2:29:EB:A5:9A:06:C6:19
Authority key identifier: B9:FC:5C:14:B2:D2:75:29:D5:0E:6E:59:3D:A8:CB:0A:A8:7D:65:10
Certificate issuer: /CN=A911F587/serialNumber=B9FC5C14B2D27529D50E6E593DA8CB0AA87D6510
Certificate serial: 59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft
Manifest number: 51
Signing time: Thu 23 Jul 2026 10:19:57 +0000
Manifest this update: Thu 23 Jul 2026 10:19:56 +0000
Manifest next update: Thu 30 Jul 2026 10:19:56 +0000
Files and hashes: 1: ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl (hash: SFZS2m7IBMNKH+DAjVplK4cgaE0uCrAZB8xP8itmHHM=)
2: CE3E7CF6136F11F1982A4804323D8C67.roa (hash: 433GVnEHsEmqM+RA2zhP/NFczVjY5LHUX58RsvVfVKM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl
rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F587, serialNumber=B9FC5C14B2D27529D50E6E593DA8CB0AA87D6510
Validity
Not Before: Jul 23 10:19:56 2026 GMT
Not After : Jul 30 10:19:56 2026 GMT
Subject: CN=6a61eacd-ea10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:49:46:b0:30:85:2d:24:ca:7b:09:fe:ee:72:
29:e0:5c:5b:26:fe:0b:de:1f:75:53:30:f8:da:09:
38:be:df:cc:bc:c5:20:77:75:ba:e9:4e:e9:80:93:
0f:a5:fa:da:23:a5:29:cf:d2:d2:7e:e8:d1:0e:0f:
ba:31:33:79:17:3a:b6:e6:57:95:50:69:17:16:3f:
79:20:91:c8:77:81:60:e7:72:9a:5d:06:83:98:38:
d2:8a:b1:be:8c:41:14:13:e7:cf:90:2e:8f:38:5f:
69:7c:64:60:2f:0a:e9:c3:56:0f:6e:7f:47:5c:f0:
67:e5:21:d5:fc:b5:06:af:a3:e5:69:33:98:8b:ff:
37:a6:b9:82:af:d9:44:d2:e1:5a:5e:1d:37:1b:ba:
91:90:ea:4d:08:9b:c5:ad:61:8d:c6:7c:9b:7a:98:
64:0c:0b:a3:79:06:9b:52:09:e2:be:85:cd:91:aa:
ad:a4:97:18:5d:8e:de:6c:6c:f0:69:ed:56:22:6a:
0a:14:d9:04:e9:9b:56:5a:d0:97:28:73:5a:be:1e:
f5:32:71:77:5b:ca:4b:86:66:8a:22:bb:ee:d4:39:
c9:b4:cf:c3:e9:3e:29:47:21:dd:54:76:ff:07:b1:
b1:de:fc:7b:29:d1:63:93:fa:5d:c8:f7:8f:a5:66:
52:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:13:A7:44:F7:9C:B0:9B:94:26:8F:44:D2:29:EB:A5:9A:06:C6:19
X509v3 Authority Key Identifier:
keyid:B9:FC:5C:14:B2:D2:75:29:D5:0E:6E:59:3D:A8:CB:0A:A8:7D:65:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:48:16:e2:11:b0:64:9c:65:2a:50:9d:6f:3e:85:6b:4a:18:
4e:66:be:bb:d1:5b:29:90:4e:a4:ce:b4:98:02:63:0b:f7:0f:
4e:53:2b:1f:f8:83:79:96:9e:1e:f5:e1:ef:af:f0:c8:e2:e1:
e4:7b:29:04:de:a6:72:f6:d1:62:e6:30:a7:e0:46:37:f5:d6:
b6:0c:32:1f:1d:1f:e5:68:46:f1:9d:47:fa:4d:1d:08:12:0a:
1d:84:a4:12:43:7a:b8:41:b7:e2:ff:11:ef:dc:96:85:c6:b1:
97:39:b3:d5:bf:27:cb:18:42:f3:89:92:6c:6d:d9:d0:64:33:
05:60:b7:81:76:54:55:54:53:98:48:3e:f8:e8:e4:bc:7b:a5:
99:56:f1:38:8f:6e:07:da:cf:74:5f:29:b4:ce:c1:f5:70:93:
de:84:fa:90:c0:b2:0b:f1:a9:38:fd:0f:45:3b:15:93:36:52:
43:50:53:81:a6:3c:6b:ca:a7:e9:ab:d0:41:9c:d3:c9:3c:aa:
48:05:cb:1b:79:01:3f:5c:48:5e:ca:6b:8f:3b:5f:b7:13:ff:
a1:e2:51:6f:0a:ba:a0:2f:1b:a1:d8:c0:c2:ab:2a:0e:2f:b1:
ee:8a:80:4b:75:36:45:8e:f0:b4:f3:d9:84:61:78:25:0e:ec:
3c:f5:24:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:53:50 2026 by rpki-client