
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
File: UZQtJe28pR36Vs4J7TYet6JtvSU.mft (raw, json)
Hash identifier: EbGGNhAKfcExJ+W19fOJH1jOSS4zPc7p25k8Fq1R7vw=
Subject key identifier: 87:FD:8D:94:65:B6:3D:17:89:CD:1F:65:C9:3A:2C:58:53:71:CD:98
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial: 0A40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
Manifest number: 09FB
Signing time: Tue 12 May 2026 20:01:52 +0000
Manifest this update: Tue 12 May 2026 20:01:52 +0000
Manifest next update: Tue 19 May 2026 20:01:52 +0000
Files and hashes: 1: UZQtJe28pR36Vs4J7TYet6JtvSU.crl (hash: lDpGNGl4iil9J0JMjYFZ7CHdIP6yPqVgzbcsSx0YPkg=)
2: C1D6AD981EA111F1B2DD47B2123D8C67.roa (hash: t7Va3DBJIf7NqIYUpRn9OjFokUb0h7zcGhor8Wmv+E4=)
3: 4729B9CC10B011F19AF5FC353C3D8C67.roa (hash: XieuBOApj93vMX/PSd4DPB5YCJHLqVArIOgws7wb0zA=)
4: C37BD92A1EA111F1B2DD47B2123D8C67.roa (hash: ATlrZQLMN1i/u5Bq0wuL1/pAApfhNtO3TRUif4rFqr0=)
5: A476C8C41EA011F187B67505113D8C67.roa (hash: W8WqvCmfqjbYm/Nsa9FcNN92lO+HROWGL8GeAXxnfuk=)
6: A837ACBA072311F1857499832B3D8C67.roa (hash: kLIQMU/1+OWEQ00tXB9bahteZuevt4BTHzYh2B2K2I0=)
7: E2891A621EA111F1917EDCD9123D8C67.roa (hash: gEX8Atz/LLQf1n/y8rRUMSuwdmjVhyMahE2Jamzx/nI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2624 (0xa40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Validity
Not Before: May 12 20:01:52 2026 GMT
Not After : May 19 20:01:52 2026 GMT
Subject: CN=6a038730-d0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b8:a7:a1:8d:a8:d3:7e:66:6b:92:31:8b:39:
51:cc:49:99:64:e3:fa:8a:e3:ba:13:dd:95:56:17:
34:e9:1a:8f:d7:df:c2:ee:eb:51:5d:2d:cf:e5:56:
be:ce:8b:8b:a1:40:21:63:73:a1:14:d0:d3:7a:2c:
47:0a:04:2b:14:ab:a8:98:1c:75:fe:65:e7:d7:11:
32:e4:28:8b:84:8d:2e:ec:49:88:5e:15:c0:e5:b9:
ac:ea:d3:8e:41:04:00:1c:6f:ef:a6:a9:82:b7:4c:
0c:00:ea:ac:c1:ad:9f:9a:de:ff:f2:3a:0d:0d:5a:
0c:39:4a:06:ed:6e:81:81:70:ef:dd:06:45:75:db:
f8:43:7a:03:cf:8d:d0:78:82:4a:1b:21:eb:5a:b6:
7f:95:4d:07:65:4b:d4:ef:eb:b3:0a:02:1f:c9:d6:
68:57:b8:ac:df:77:d0:29:06:41:ee:26:d8:a7:67:
a3:af:b1:e8:20:ca:5a:aa:a6:5c:2d:43:b2:c4:cc:
ed:18:7d:1e:f1:4f:2d:21:78:99:81:5a:fd:f4:de:
c0:20:e0:f9:6d:f7:b3:ad:f8:02:19:fb:4b:21:28:
20:91:a6:30:22:98:b2:26:1a:2d:66:fb:ab:de:b6:
bf:79:c7:92:22:a1:86:27:76:21:83:45:ed:93:ad:
49:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FD:8D:94:65:B6:3D:17:89:CD:1F:65:C9:3A:2C:58:53:71:CD:98
X509v3 Authority Key Identifier:
keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:66:39:a5:d2:f3:ff:aa:2d:f0:a7:98:07:3a:f6:5e:6f:39:
ca:50:ad:e9:62:5e:15:ed:6f:ca:fd:9d:ac:03:ee:ea:ac:d7:
ee:79:2e:4d:03:a3:c2:84:b0:39:fb:d0:21:d0:25:c7:be:3f:
3c:f9:92:e8:11:9a:ae:b4:98:54:92:54:b3:39:35:cf:9e:d6:
0e:87:2d:f6:21:7e:ec:a1:e4:e2:b0:56:f2:d6:5b:c4:ba:3b:
a2:f7:d6:b1:bc:7c:3b:79:ab:cd:58:95:d0:48:4a:84:75:1d:
97:d1:fa:e9:4b:4c:57:0d:47:c9:c4:1e:43:fd:a9:62:8e:7a:
31:7a:a6:d2:63:00:02:f1:32:9a:25:92:c4:ba:58:80:6d:23:
c0:34:22:5a:27:cb:00:ea:9d:26:f0:fb:27:23:70:4a:d0:cc:
48:f2:6f:47:d6:e0:a4:f8:11:0c:f6:d7:a7:15:b1:45:04:44:
5f:4e:4b:1d:3d:87:14:6b:62:64:46:57:0d:e6:c2:81:b7:d7:
a4:61:94:a8:ba:8e:53:02:8c:53:54:51:34:d3:0e:56:9b:0c:
f1:08:ec:0b:5d:15:0b:c7:5c:c8:29:75:62:50:0e:5f:46:ef:
ed:35:93:20:71:ad:a8:31:36:c1:de:78:f6:08:15:be:4a:72:
75:c8:e9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:16:26 2026 by rpki-client