
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft
File: U2uRsXtuG7FjjINYoPpepdDr77c.mft (raw, json)
Hash identifier: nDPrWdEuLjJjM4atUVfMW0cpqb0aJPD6mPIGjFOnMJ4=
Subject key identifier: 6C:9F:64:62:70:A1:13:EC:5F:19:10:66:0A:21:27:74:B6:FC:E0:D7
Authority key identifier: 53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7
Certificate issuer: /CN=A9125C3D/serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7
Certificate serial: 0285
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft
Manifest number: 027D
Signing time: Tue 22 Sep 2026 23:43:07 +0000
Manifest this update: Tue 22 Sep 2026 23:43:06 +0000
Manifest next update: Tue 29 Sep 2026 23:43:06 +0000
Files and hashes: 1: U2uRsXtuG7FjjINYoPpepdDr77c.crl (hash: RQyXg8qeIUyJxziy4+9G3kxDCZqvqnMM4qtKUNVZHCE=)
2: 234074FA00DD11EE95AF6F7CC4F9AE02.roa (hash: E/3+zHRb9cigB2So9gcmcEr9UWMt8OA7wew5j990xKY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl
rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 645 (0x285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125C3D, serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7
Validity
Not Before: Sep 22 23:43:06 2026 GMT
Not After : Sep 29 23:43:06 2026 GMT
Subject: CN=6ab3128a-32af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:67:5f:d5:4d:c0:78:fb:c7:f2:3d:16:e8:
60:23:53:d7:c0:a1:22:fe:89:d5:5c:64:86:c5:0f:
3c:40:60:bb:49:f2:c8:95:60:85:d7:fe:5b:4e:88:
70:5e:18:21:1c:68:15:ec:b9:3a:98:04:21:8e:cb:
bd:65:c7:7d:53:cf:ec:6d:e8:98:29:3e:c5:1f:80:
ac:b7:f0:5d:14:52:dd:13:b4:70:38:82:ff:af:9e:
94:37:61:b7:df:3a:86:d7:ef:fe:81:2b:a1:89:0b:
60:d8:4c:74:a9:e3:20:d3:e0:34:0d:03:d9:e6:0c:
14:a9:63:fd:e5:5c:c1:ee:ab:8e:0c:14:6b:de:7c:
aa:43:c6:10:6d:23:92:00:15:0e:b2:c8:c3:e4:b3:
28:a8:06:ea:a0:fe:46:88:bc:55:08:e9:21:ce:37:
2b:be:2d:3c:c9:b2:29:5a:7a:1a:a0:fb:3d:9f:53:
c4:28:08:df:6e:11:80:32:cf:69:68:41:27:27:ad:
be:ff:dd:86:31:3e:27:14:c0:d3:f3:cf:8e:cf:a2:
62:04:a8:ea:95:6f:c6:e6:aa:f6:4d:d5:a6:4e:09:
4f:02:6d:92:96:d0:f0:c3:60:7b:5b:b9:ae:2b:b8:
0a:39:b1:8e:7a:71:25:2b:23:29:d9:51:ed:1d:f2:
e0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9F:64:62:70:A1:13:EC:5F:19:10:66:0A:21:27:74:B6:FC:E0:D7
X509v3 Authority Key Identifier:
keyid:53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:d2:2c:a4:89:ae:71:fe:87:78:ff:49:da:32:e1:0d:5c:a5:
bf:fd:d9:20:79:6b:0c:24:a2:e8:e5:1e:f9:1a:51:93:4c:76:
f5:d2:b6:09:73:6a:55:17:33:84:c5:95:0b:e5:bb:98:09:49:
b8:e1:d5:1f:4b:f6:8c:33:8c:d1:97:0b:a8:22:cb:81:68:b9:
67:b5:89:41:26:a4:52:68:2d:fd:5a:0a:d1:30:9c:54:87:ac:
29:97:a2:b5:02:ac:59:fa:39:68:eb:72:81:c9:8c:9e:06:d1:
36:ba:60:5d:28:9b:17:f0:31:fb:3b:fc:4e:17:55:df:77:21:
5f:fe:2b:d8:65:73:61:c6:70:dd:65:b3:62:1b:d1:48:80:32:
68:cb:a9:2b:0f:3f:ca:6e:12:a2:f7:e8:c4:99:24:93:f1:d9:
af:4b:c4:68:a6:3e:79:8f:c3:b5:0f:c9:be:fc:19:5a:cf:54:
5a:42:8f:96:14:56:52:f9:36:1b:b3:e4:f1:7d:4b:a0:7e:6f:
ee:16:2a:65:b9:7c:a6:09:2f:e8:1d:96:c8:7e:cf:9d:be:85:
8f:87:ca:52:0e:d1:db:81:cb:cf:75:b6:94:a8:aa:9e:42:c4:
61:29:b2:e2:28:ea:0d:a3:28:48:18:a6:7e:07:44:14:8c:f5:
f3:9b:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:14:29 2026 by rpki-client