
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
File: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft (raw, json)
Hash identifier: 6Yipbd564wF4dUCFl7ByJBBVgqWffViBr3lE9G+pcvQ=
Subject key identifier: F1:74:47:27:4C:A7:A7:40:DD:48:20:E5:82:83:64:53:E5:A2:90:2E
Authority key identifier: 52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78
Certificate issuer: /CN=A9136D7D/serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78
Certificate serial: 02E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
Manifest number: 02D6
Signing time: Wed 25 Mar 2026 01:00:37 +0000
Manifest this update: Wed 25 Mar 2026 01:00:37 +0000
Manifest next update: Wed 01 Apr 2026 01:00:37 +0000
Files and hashes: 1: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl (hash: D4Ad/Cxoi9m48vR/PLKjcV3Wwb8sG7PSyzDA/L7Vqp0=)
2: A9E3A5041C3411EFBF05095BC4F9AE02.roa (hash: +F1FZtsTrw14W4WmmJaPNvqLxkx0Lf//1RCLaJV77j0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl
rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 738 (0x2e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136D7D, serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78
Validity
Not Before: Mar 25 01:00:37 2026 GMT
Not After : Apr 1 01:00:37 2026 GMT
Subject: CN=69c333b5-d9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:a7:4a:b3:60:3d:df:58:23:2a:29:f3:90:
14:d7:c1:ee:72:82:93:5d:51:1b:57:9a:fe:b2:83:
25:8b:d7:b8:65:55:dc:3e:70:92:3f:15:3e:b4:4b:
12:03:21:b9:7b:bf:9f:90:ff:09:3b:24:41:04:a1:
08:5a:95:01:4b:74:4c:76:0e:15:09:e9:4d:10:b1:
e7:f7:a2:f2:8b:a4:fb:22:23:13:f4:e3:b0:48:7e:
d0:c6:e8:62:6e:df:2a:32:b6:cc:7e:98:e5:d4:13:
f6:a3:e8:89:8d:ae:cf:c4:d8:05:1f:27:c8:7b:9f:
77:ff:af:7d:16:5a:17:04:d0:1a:91:9e:b4:2d:06:
fc:60:9d:55:6c:7b:fc:91:dc:18:91:15:e8:ac:87:
23:9d:98:c9:ab:d8:34:fe:bf:ff:af:1b:53:6e:e7:
c1:39:fa:32:fb:eb:50:3f:96:92:d2:59:e9:b8:11:
76:0f:f5:33:6d:9e:41:f3:68:ee:be:78:6a:ea:c0:
76:0f:a8:88:84:11:ad:93:27:11:99:b1:0d:9f:b6:
41:c9:ed:99:d2:2c:23:22:68:3a:33:f0:99:12:8b:
9a:78:b3:61:6f:b2:b7:62:9f:9c:5f:51:e8:70:76:
1d:47:14:64:a8:0e:08:24:db:6c:86:82:f3:39:3a:
cd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:74:47:27:4C:A7:A7:40:DD:48:20:E5:82:83:64:53:E5:A2:90:2E
X509v3 Authority Key Identifier:
keyid:52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ef:ca:52:db:2e:38:51:2b:0a:c0:5b:d0:f2:21:fd:e2:f3:
72:9e:3f:a5:42:25:30:51:63:75:c0:b0:ab:4f:12:18:02:b0:
39:fd:ee:56:7a:56:4a:a7:12:04:96:8c:87:f8:f0:70:0f:bf:
a6:c2:f5:8a:9d:50:b4:b7:4e:10:67:a1:e2:ec:3e:55:56:a1:
d2:8b:dc:14:6d:90:a7:5c:99:d6:2e:65:0f:a5:b9:83:16:af:
80:c9:dd:cd:bd:6f:3a:ef:48:f5:b7:a8:5d:33:7f:5f:9e:70:
fd:7b:2c:12:2a:a9:40:ea:9d:7a:71:78:dd:b1:3c:8b:5d:ac:
e2:d3:e5:29:e8:20:79:52:b7:7d:c6:e7:8c:cf:03:eb:fc:18:
63:00:6e:c8:21:9d:13:9c:93:14:2d:75:4d:ae:78:a1:e2:53:
0b:d5:cb:2d:73:a9:f3:5e:8f:cd:e9:7d:d7:42:cd:ab:29:ae:
82:a0:d7:4c:79:6e:8c:32:c3:3b:19:d7:b4:d4:95:84:5c:6f:
8e:46:38:80:e8:8b:be:3a:a8:fa:d2:e1:1c:51:13:88:4a:9e:
d1:33:40:80:57:5a:6f:75:a6:d0:49:d2:0d:f0:c5:4b:cf:8f:
48:bb:fc:38:13:0a:8a:32:4e:66:5a:55:fb:25:3f:25:b4:46:
66:93:dc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:58:12 2026 by rpki-client