
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
File: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft (raw, json)
Hash identifier: L/k/tNK11k6ifwWBRGtvkGnLu06ofn1WyFy+7CZ/p5w=
Subject key identifier: B8:A2:B3:9A:94:C3:2F:15:82:92:58:D1:6F:47:FC:05:F6:DB:25:D6
Authority key identifier: 52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78
Certificate issuer: /CN=A9136D7D/serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78
Certificate serial: 0342
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
Manifest number: 0336
Signing time: Tue 29 Sep 2026 01:08:27 +0000
Manifest this update: Tue 29 Sep 2026 01:08:27 +0000
Manifest next update: Tue 06 Oct 2026 01:08:27 +0000
Files and hashes: 1: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl (hash: JKqTU0dEDumH+zj/fde++Uo6w4UVx0I7v2Lb4lD9Jw0=)
2: A9E3A5041C3411EFBF05095BC4F9AE02.roa (hash: +F1FZtsTrw14W4WmmJaPNvqLxkx0Lf//1RCLaJV77j0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl
rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 01:08:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 834 (0x342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136D7D, serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78
Validity
Not Before: Sep 29 01:08:27 2026 GMT
Not After : Oct 6 01:08:27 2026 GMT
Subject: CN=6abb0f8b-11d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b0:b3:d2:79:20:cb:99:67:dc:a0:c2:84:1b:
9e:fd:3a:3a:4a:d2:d3:a4:bf:a4:2d:50:74:05:dd:
09:ee:92:3a:d9:2d:0e:a4:21:4a:73:ea:63:5e:93:
97:a7:6d:fa:ed:32:c7:66:72:f5:87:65:cf:fa:f4:
78:8d:ad:05:38:13:2f:52:50:76:34:13:a8:a7:74:
79:d7:f3:3c:be:fe:9a:3b:82:13:ea:4e:0a:53:85:
2a:be:51:0d:0d:f0:3f:40:fc:d0:5d:2d:3f:22:f3:
da:76:3b:56:a5:6d:bd:6f:64:3c:f4:1f:83:64:cd:
f5:57:83:2d:7e:04:fa:1f:21:e7:72:2c:fd:71:15:
b7:f6:93:47:ba:94:3e:26:23:c0:14:46:63:d7:b8:
cf:5a:9f:32:e4:cc:4f:7a:4c:61:16:de:51:c5:d5:
bd:2e:a1:db:36:84:95:64:35:c1:0c:4e:2c:e4:bf:
dd:c6:05:18:ec:7d:b7:77:b9:28:0e:47:d6:6f:c7:
d7:d5:53:82:5c:37:60:0d:fe:47:4c:75:fc:15:b8:
8e:93:84:53:55:1f:ab:eb:9c:e0:cd:5a:9e:5f:fd:
69:cd:c2:ea:62:4d:f9:09:e9:2b:95:70:a6:0e:b7:
d2:27:2e:86:8a:d6:9a:5d:c6:38:15:b6:4b:cf:88:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A2:B3:9A:94:C3:2F:15:82:92:58:D1:6F:47:FC:05:F6:DB:25:D6
X509v3 Authority Key Identifier:
keyid:52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:96:95:5d:cb:43:9a:ba:aa:47:06:88:ec:e9:35:1e:7d:c8:
86:cb:f0:f0:b4:ab:3a:3a:08:36:00:6d:24:58:4d:9b:65:9f:
3b:88:2b:b7:7d:85:57:8f:7d:2f:38:3a:16:41:dd:6b:59:ce:
35:65:17:11:ab:a0:51:ab:e6:06:73:39:68:43:50:07:d8:83:
ee:69:c6:f4:bf:5f:f1:96:ec:82:0e:2a:d8:66:ac:e7:1c:87:
37:24:97:1f:95:d3:a5:03:87:98:1f:32:4d:61:f8:85:68:b1:
bc:0b:6b:16:7d:f1:30:d9:52:78:e2:b8:57:8c:97:c3:c2:01:
b0:20:4f:e4:33:c2:8b:4f:12:dd:4e:71:60:6c:b0:c1:72:7a:
69:1f:49:bb:ad:7d:1c:02:18:31:ab:01:06:a0:d1:0f:bb:1d:
8a:43:cd:86:f3:32:38:7d:eb:e9:b7:8d:50:a0:90:6c:69:11:
05:01:ca:81:bb:43:1d:5f:46:fd:54:ee:40:f8:b6:94:75:8a:
81:a7:3c:4b:62:9f:1f:74:09:e3:17:bd:cd:21:f9:92:e2:47:
17:fb:4a:10:b2:83:df:b4:02:88:2c:e8:6c:0b:ef:5e:c6:ca:
7a:41:3c:68:09:6e:35:c5:10:b9:25:9d:df:09:ef:97:fc:d0:
95:52:15:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:58:02 2026 by rpki-client