
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft
File: uDIFubLHQGPjdvNxFYOXBe277Ng.mft (raw, json)
Hash identifier: 8OZ6ghwfbfUqyX69Sk8hR6z7xW/9y6M3cjzRP1XsA/I=
Subject key identifier: F7:1B:16:72:AB:EE:5B:BE:A1:10:6C:84:3F:C3:05:84:68:7E:5B:F5
Authority key identifier: B8:32:05:B9:B2:C7:40:63:E3:76:F3:71:15:83:97:05:ED:BB:EC:D8
Certificate issuer: /CN=A9130138/serialNumber=B83205B9B2C74063E376F37115839705EDBBECD8
Certificate serial: 03D9
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft
Manifest number: 03CE
Signing time: Wed 25 Mar 2026 00:14:26 +0000
Manifest this update: Wed 25 Mar 2026 00:14:26 +0000
Manifest next update: Wed 01 Apr 2026 00:14:26 +0000
Files and hashes: 1: uDIFubLHQGPjdvNxFYOXBe277Ng.crl (hash: FeKGzvdDrPpmNR8UryvzUfF/z0njPn7iGpy8tpAVHpc=)
2: A7DEA0DAC47D11ECB544A26DC4F9AE02.roa (hash: v0duyXrCqBjTImOPXg/jRu5Eda4FNDXKiiyW1J3+wcs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.crl
rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:14:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 985 (0x3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130138, serialNumber=B83205B9B2C74063E376F37115839705EDBBECD8
Validity
Not Before: Mar 25 00:14:26 2026 GMT
Not After : Apr 1 00:14:26 2026 GMT
Subject: CN=69c328e2-e6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:2e:b9:38:7f:cf:cf:ac:39:a8:fe:8e:b2:
af:a0:2c:8c:57:73:71:9f:36:f9:de:cf:b7:de:39:
ac:63:d6:5f:ba:f7:8f:31:35:ed:31:5f:97:4b:be:
50:7e:cd:37:b3:4f:4d:55:41:58:bf:c6:8e:ea:a8:
fb:57:af:ac:93:ff:09:41:e8:0e:ff:48:2e:64:9f:
cd:f2:1b:13:ba:d2:d4:5d:45:ee:58:c0:1c:fa:e9:
2a:b9:9e:99:6c:1d:9e:40:7a:2f:06:2e:3a:08:97:
73:6d:de:c1:6e:1e:cd:1c:01:b9:bb:c1:d1:e8:38:
db:21:16:c7:b5:db:a2:0d:18:3f:87:fd:37:4b:78:
c7:11:d2:97:49:51:ea:25:bc:24:39:af:f3:e5:d7:
71:88:28:32:0b:a9:43:5c:70:6f:07:92:42:34:77:
c0:c8:29:90:6d:27:66:2a:0c:d0:27:27:26:d1:1a:
d8:90:80:f2:2f:79:6f:77:51:22:21:bb:d5:40:cd:
08:3d:10:31:f0:c2:b5:30:cc:66:4b:4c:d2:ee:9d:
fc:b9:ac:ff:be:d3:e4:86:f8:2c:ae:6e:09:85:d4:
30:bd:7e:f1:60:db:95:5b:9e:e2:08:86:34:e2:fb:
27:f8:81:9f:e6:54:ed:96:be:48:40:eb:6e:74:04:
e6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1B:16:72:AB:EE:5B:BE:A1:10:6C:84:3F:C3:05:84:68:7E:5B:F5
X509v3 Authority Key Identifier:
keyid:B8:32:05:B9:B2:C7:40:63:E3:76:F3:71:15:83:97:05:ED:BB:EC:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:f3:dc:69:1e:4f:c2:73:32:b0:ee:34:95:28:27:dc:c9:00:
6f:4c:ce:20:0f:35:d0:5c:df:d1:a3:2d:e2:10:36:d8:4f:d5:
ee:92:a2:eb:7e:84:60:51:c6:f8:5d:f3:d7:30:6b:8c:a1:4e:
5b:3e:ba:24:51:85:53:a2:7f:6c:c3:de:5f:b7:63:b4:16:1a:
76:2c:f5:d4:97:be:5a:b1:58:4a:96:35:04:f4:a3:46:bc:42:
33:ec:8b:cf:60:c1:04:ea:5c:10:82:2c:ce:f9:cb:bf:de:48:
38:85:30:43:ba:9a:e1:1b:2e:74:f9:01:60:44:e6:69:00:27:
35:d9:67:fa:60:6f:db:ef:15:6c:d5:24:a9:fa:0f:43:f6:81:
75:ee:6a:bf:6b:8d:ea:03:71:8b:01:12:b5:8f:9b:28:e7:21:
10:32:45:7b:f4:02:50:3a:e2:56:b1:7f:e6:25:d7:95:ac:46:
d3:59:28:c1:89:ab:53:ce:75:92:44:2e:1a:31:54:a2:81:1f:
2f:47:81:53:0b:25:c8:5b:6f:0d:f3:9f:92:64:ef:1b:57:f3:
78:2e:17:87:78:49:b2:f9:97:a5:66:af:39:26:23:22:e2:7b:
d6:1a:a3:c1:5d:ab:18:90:89:41:ec:77:e6:c7:e7:1e:ae:6d:
e3:d2:46:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:57 2026 by rpki-client