
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
File: uCqc9vnMgDxqa3BmLYB-xR2C290.mft (raw, json)
Hash identifier: FdypZk4FY3RmAa6yofPA1Bh1uuvWYuBZ2V1d+wJPcRU=
Subject key identifier: 01:E0:EC:67:C4:6A:19:55:EB:D5:7D:CB:BB:AF:C0:BB:B0:05:4C:BF
Authority key identifier: B8:2A:9C:F6:F9:CC:80:3C:6A:6B:70:66:2D:80:7E:C5:1D:82:DB:DD
Certificate issuer: /CN=A911F92A/serialNumber=B82A9CF6F9CC803C6A6B70662D807EC51D82DBDD
Certificate serial: CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
Manifest number: C9
Signing time: Fri 25 Sep 2026 06:51:58 +0000
Manifest this update: Fri 25 Sep 2026 06:51:57 +0000
Manifest next update: Fri 02 Oct 2026 06:51:57 +0000
Files and hashes: 1: uCqc9vnMgDxqa3BmLYB-xR2C290.crl (hash: VAm1st6UZMrquwVLhxntKenNfjP+ObXmrgYHhFNqF1E=)
2: g6DHXrlJXe3q9MNuk5wgOJdu924.asa (hash: jVNvIdmd8liSKDub1o5nyaepFI6kyX0CiEMe0Amf6vQ=)
3: B3DED21C86C911F0BAF28043C4F9AE02.roa (hash: /PEfcsPOZLF1b+5hUz53HClo8QR/oPzgzlje9Rn4Axc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.crl
rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:45:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F92A, serialNumber=B82A9CF6F9CC803C6A6B70662D807EC51D82DBDD
Validity
Not Before: Sep 25 06:51:57 2026 GMT
Not After : Oct 2 06:51:57 2026 GMT
Subject: CN=6ab61a0d-7e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:6b:8b:3c:a8:e9:80:0b:2d:22:b4:eb:d3:
2a:22:9d:fb:0c:27:b6:f2:d9:d2:2d:d3:56:ad:58:
0a:fe:be:d8:f9:c0:4f:fe:4d:dc:f4:a5:e5:36:ff:
dd:d1:b4:29:01:f1:79:09:90:54:3c:9e:ed:c6:36:
d1:1b:00:40:31:e6:99:87:ae:a3:fd:b1:6a:74:81:
44:4d:40:6d:e7:58:33:d1:67:7a:38:fc:15:6a:6b:
fa:0f:e8:9b:2b:bb:ee:f2:c9:87:53:7a:62:a0:d1:
24:7b:28:b1:b6:6d:72:3c:2d:2e:bf:20:5d:cf:f4:
1a:f3:39:9d:84:5e:4f:86:2d:a5:30:37:7f:7c:ee:
f0:88:fd:89:7a:23:6a:b6:61:17:98:9f:40:40:c7:
d3:42:40:d2:95:de:3c:75:f4:06:86:b3:47:28:fc:
33:b3:c2:06:70:00:d4:12:fb:4a:85:e6:88:14:5d:
ab:e0:d6:69:5c:b4:32:45:0b:5d:7b:43:94:81:59:
19:d7:00:45:ec:a6:cd:52:d4:6c:83:ef:84:fb:fb:
b6:1c:d0:69:26:6a:be:5b:35:a6:56:df:84:82:ac:
77:90:b6:73:d3:24:71:bb:94:bb:5c:5a:95:b0:87:
aa:40:ec:50:a3:8a:ab:2d:b6:09:6f:4d:7d:9e:41:
38:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E0:EC:67:C4:6A:19:55:EB:D5:7D:CB:BB:AF:C0:BB:B0:05:4C:BF
X509v3 Authority Key Identifier:
keyid:B8:2A:9C:F6:F9:CC:80:3C:6A:6B:70:66:2D:80:7E:C5:1D:82:DB:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6e:f2:62:bd:23:46:f1:49:c3:e8:74:53:d0:65:32:15:07:
e8:c2:74:7f:e3:11:5d:45:17:f9:db:ce:7a:1a:73:54:05:64:
c9:3e:86:ea:36:b9:2e:f3:90:f4:c9:70:f3:bd:c6:b8:9a:ee:
ad:f1:f5:04:a4:90:10:1e:62:be:1e:be:ce:25:4e:e8:b3:5c:
c1:7f:fb:79:76:5c:27:00:6f:6a:2d:99:bf:b3:b7:65:c2:2f:
10:2a:7d:45:11:fd:e6:1e:75:ed:01:50:09:2e:a4:a7:80:a5:
22:4a:fa:b3:db:b8:1f:ff:c2:fd:32:a4:a2:68:6f:0a:ea:2b:
bb:fe:e9:3a:da:3a:91:ee:be:28:d2:d8:5f:44:43:74:57:d2:
4f:d8:b1:2d:50:33:1b:16:02:80:dc:4d:ab:4d:d7:b1:8c:d4:
63:ae:a8:f7:4e:8b:f5:55:de:6b:b7:23:ec:9c:1c:d3:c6:43:
57:ce:87:6e:54:a2:f3:fc:29:b5:6e:d3:8b:2b:a3:3b:a2:2f:
05:d5:3d:29:f1:b5:ad:f6:69:e2:55:46:2b:98:98:b1:1c:95:
5f:17:b9:b9:7d:5a:3e:06:fc:5d:25:82:77:60:88:0d:c7:df:
23:8a:f8:f2:38:54:a0:c1:09:d9:7c:5a:cb:4f:db:02:31:f0:
71:0a:59:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:43:56 2026 by rpki-client