
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
File: u9oqUrUEjxqKq79cJBcmASd8svM.mft (raw, json)
Hash identifier: r6tC2sP05iMbyoSh5bUMQ9mfOBddPOflJfwdBG2yruo=
Subject key identifier: A8:B2:19:15:DD:E4:35:B7:19:47:D9:3B:D2:5D:6F:99:48:92:43:20
Authority key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3
Certificate issuer: /CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
Manifest number: 01A4
Signing time: Mon 11 May 2026 04:14:28 +0000
Manifest this update: Mon 11 May 2026 04:14:28 +0000
Manifest next update: Mon 18 May 2026 04:14:28 +0000
Files and hashes: 1: u9oqUrUEjxqKq79cJBcmASd8svM.crl (hash: PlLvhXMpygOeAmWNc2++rBYEGFK8L2qe7QFvdkY4/GM=)
2: 6133230CEB3311EEA75DE77DC4F9AE02.roa (hash: 0gLq+Q5VHgGBq5LnAdqM46w0wsxGeP7cSrO1IFlXD80=)
3: 32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa (hash: yu+q3f/RarO60hYfGM/lYcRRiKIl/UB8fwUek+JSESk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl
rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BA82, serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3
Validity
Not Before: May 11 04:14:28 2026 GMT
Not After : May 18 04:14:28 2026 GMT
Subject: CN=6a0157a4-6dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6d:34:31:f4:0e:42:b0:af:aa:72:ce:6e:6a:
d4:6e:0e:e6:fb:c9:d6:81:d6:74:14:62:1c:75:16:
d8:f1:21:34:7f:30:61:11:7b:92:87:74:2f:df:c8:
37:6c:bc:a9:b3:cc:07:99:6a:5c:f8:07:c2:45:3c:
5f:63:2b:cc:47:fe:01:ac:4e:04:a2:2a:02:50:80:
3d:1a:f6:2e:c5:e7:d2:33:a7:1e:29:03:a5:a3:3f:
d8:36:c9:99:47:9d:ca:28:57:48:6a:37:c5:55:d4:
0a:7c:db:1f:66:80:60:4d:25:1e:e7:72:b1:fd:a9:
77:50:d4:ce:33:42:81:22:46:37:f5:12:39:16:ad:
dc:60:7a:d4:20:eb:24:bb:03:af:f6:31:54:f7:a5:
cd:ea:d4:a4:bf:f7:22:26:dc:8d:f7:cb:52:f2:3e:
81:32:a9:c2:12:b6:26:d3:96:6f:4a:be:54:1c:ed:
df:5d:9f:05:49:cc:10:21:9e:66:bc:e7:e9:60:12:
d6:0e:e1:5a:58:73:c4:f9:fa:f0:79:ab:ff:e1:c2:
31:17:3f:3f:7a:97:54:0a:03:93:16:4c:a7:3a:a4:
5c:7f:b6:3d:d9:bb:a3:42:1e:56:97:d3:84:75:a2:
c2:9d:76:5a:47:74:8f:41:e8:30:48:78:39:5e:a1:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B2:19:15:DD:E4:35:B7:19:47:D9:3B:D2:5D:6F:99:48:92:43:20
X509v3 Authority Key Identifier:
keyid:BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:1e:24:bb:bd:5d:9a:2a:75:13:52:6c:56:e9:ee:42:aa:78:
01:04:fd:47:ca:ee:60:dd:a0:10:95:0d:4d:09:42:c4:26:87:
d0:93:7a:b1:cf:c4:46:66:cb:38:fd:34:9b:80:a9:07:c9:40:
ab:c4:6e:ba:cd:aa:62:49:92:e6:04:eb:87:1a:f9:06:b7:a2:
0d:0a:af:de:7b:ba:1a:c3:45:71:10:36:ad:75:3d:25:ff:17:
03:f3:1e:dd:aa:56:44:fb:0a:51:df:dd:f0:cd:98:9d:35:1e:
70:69:df:0a:03:50:57:c9:20:82:5f:e7:c3:a8:eb:50:4e:73:
80:77:ae:e2:7a:3d:d1:1f:12:74:ac:1f:d1:51:4f:be:59:6f:
c2:ad:89:4a:93:41:d6:82:1a:3c:d4:a8:a1:35:24:5b:f8:9c:
1a:2f:c2:d9:da:81:49:9c:69:c1:9c:5c:3c:df:5c:d6:3f:07:
8b:5e:3a:c9:da:e3:02:f9:9a:3e:6e:1f:de:bf:8c:e9:80:d4:
ac:d5:b8:86:eb:19:22:97:6f:07:dd:6a:04:3f:18:2f:3e:9b:
11:8c:0f:65:9a:78:45:20:87:69:81:76:03:53:af:28:0a:0b:
51:65:19:87:da:9b:13:04:78:b3:76:8b:bc:05:20:00:a2:e6:
ca:c1:1b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:18:10 2026 by rpki-client