
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft
File: ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft (raw, json)
Hash identifier: xtDUsI8CT3G6WIfqsOkZ4ojUh9fGRIkIGWEMBles8PY=
Subject key identifier: 98:3B:E8:94:C0:E8:00:02:8E:44:AE:88:4A:5B:BF:22:94:A6:1E:64
Authority key identifier: B9:FC:5C:14:B2:D2:75:29:D5:0E:6E:59:3D:A8:CB:0A:A8:7D:65:10
Certificate issuer: /CN=A911F587/serialNumber=B9FC5C14B2D27529D50E6E593DA8CB0AA87D6510
Certificate serial: 7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft
Manifest number: 74
Signing time: Wed 23 Sep 2026 07:42:34 +0000
Manifest this update: Wed 23 Sep 2026 07:42:33 +0000
Manifest next update: Wed 30 Sep 2026 07:42:33 +0000
Files and hashes: 1: ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl (hash: EEbjSAKF6NnP035U27ZVOd03/k/ECAsyX4FdT5bcNnM=)
2: CE3E7CF6136F11F1982A4804323D8C67.roa (hash: UQRfzo1c/HYpw7uRcuRbUI8vrLw5R69JNp0rwuqqffU=)
3: 2579DD2AA4E911F18E8000426A11F970.roa (hash: iULh2mhtbyN6/itGQQ04mR1L5lTg6b6a6WlOrWiAyQE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl
rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:42:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F587, serialNumber=B9FC5C14B2D27529D50E6E593DA8CB0AA87D6510
Validity
Not Before: Sep 23 07:42:33 2026 GMT
Not After : Sep 30 07:42:33 2026 GMT
Subject: CN=6ab382ea-acad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:7e:6b:b7:39:1c:fc:4c:e6:e9:e1:10:27:
0c:dd:69:a2:a5:63:3a:ac:52:57:d6:cf:b8:da:04:
e6:65:ef:fd:47:b3:2c:fc:68:44:4c:14:35:0d:fb:
af:c0:a1:20:24:4c:ab:11:ac:be:21:84:a6:14:2f:
4e:52:69:4a:6a:97:b4:8b:1a:8a:91:72:cc:09:36:
17:65:f9:71:8e:93:e2:f0:a4:6d:ff:1a:b7:a1:e1:
3e:ee:0b:1e:3a:cc:9d:a5:a9:7e:a3:85:6b:d5:b3:
2d:a6:df:89:d8:52:49:b6:42:96:8d:a2:e2:9e:4d:
87:94:c2:3f:ed:3f:07:9a:c7:1c:ff:26:d4:38:e6:
d0:3e:1c:ce:87:8d:4f:5a:8e:cd:38:2f:df:01:0a:
9d:7e:e0:b7:0b:34:71:21:01:2e:7c:9c:f0:56:bf:
13:80:8e:81:67:c1:49:dc:02:78:b3:e5:34:5f:18:
0b:b5:85:a0:3e:5e:9d:29:19:89:56:69:b6:a8:2b:
3c:91:38:98:0e:49:4b:db:00:e7:81:cc:47:a2:fc:
34:9b:e9:86:b8:bc:74:31:73:5a:c0:8f:0b:20:33:
92:dc:1b:3c:02:37:e5:35:b4:b8:44:04:cb:36:0e:
8f:26:54:f9:2b:df:d5:48:18:1d:13:e9:fe:ba:fa:
2b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3B:E8:94:C0:E8:00:02:8E:44:AE:88:4A:5B:BF:22:94:A6:1E:64
X509v3 Authority Key Identifier:
keyid:B9:FC:5C:14:B2:D2:75:29:D5:0E:6E:59:3D:A8:CB:0A:A8:7D:65:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:d2:83:43:75:d9:6b:a7:63:f4:80:54:89:08:17:53:ad:7a:
e5:d5:24:30:67:69:a7:dc:52:a1:ee:39:95:6c:0a:69:3f:47:
9d:87:92:19:51:53:28:2d:56:4c:e5:96:a4:ba:6d:e8:5e:e5:
5f:e2:f9:b2:ca:97:8f:8a:f1:0b:92:04:38:6d:0b:8a:a9:6e:
b8:bc:c9:98:44:f0:9e:b1:1e:87:34:2a:3f:97:f1:07:f6:ea:
5d:f2:4e:f9:98:d4:8b:e5:ae:05:55:c0:dc:8b:fd:35:c6:96:
48:ca:2a:87:96:e9:21:9d:ac:91:67:65:64:49:d7:b1:41:39:
ff:2b:b9:44:54:cb:a4:30:80:3a:19:e2:99:41:ed:75:0c:ff:
ff:30:17:2a:13:5a:33:6f:de:60:4a:f2:1c:94:1b:a5:bb:9b:
76:5f:83:7a:00:37:6c:f3:24:b2:f3:c0:27:56:44:65:14:7b:
34:4b:3a:9f:36:b4:72:63:24:c1:81:c6:07:e0:b1:6f:c6:a3:
80:29:b9:d4:b4:d0:a0:9f:5a:08:07:53:f1:88:95:26:92:a9:
b1:c4:b6:2b:aa:2d:4c:b9:31:40:92:93:a4:28:3b:9d:0f:34:
cc:0f:04:17:f9:f7:0c:0a:6a:4e:9f:98:90:d7:ed:d7:a4:7e:
1b:9e:d7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:59:28 2026 by rpki-client