
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
File: UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft (raw, json)
Hash identifier: jVCPxE4uhj7IlRALz9ivqLaaMPbxgfVNv0CMZKQDlWo=
Subject key identifier: 9E:A8:E5:03:08:17:C1:91:AC:05:9E:FA:22:0D:A0:A5:D8:EB:41:D9
Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2
Certificate issuer: /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
Certificate serial: 0158
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
Manifest number: 014C
Signing time: Wed 25 Mar 2026 04:25:44 +0000
Manifest this update: Wed 25 Mar 2026 04:25:43 +0000
Manifest next update: Wed 01 Apr 2026 04:25:43 +0000
Files and hashes: 1: UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl (hash: N5k/Uvx/kHvG7cUAWJBq2UIpg/N9sUC/IIyc9wu6mTw=)
2: AE977DF8337E11EFB3CCD72FC4F9AE02.roa (hash: GEFeKy8aH4tDYzifQsBwM7koyveNQSqrhuOkOUK426I=)
3: 8B584EC2337D11EF9D71B72DC4F9AE02.roa (hash: nfE8MGXIYFcpCfytRVSLiKAP+7q0/XusaPqqsGF/aVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl
rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:25:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139A90, serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
Validity
Not Before: Mar 25 04:25:43 2026 GMT
Not After : Apr 1 04:25:43 2026 GMT
Subject: CN=69c363c8-f936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9c:5c:da:c8:51:5a:a7:4f:76:3e:3c:a2:80:
17:aa:13:e2:b2:11:e3:2b:68:80:ed:e6:ff:a0:91:
b3:e2:ee:04:3c:75:b1:79:0b:90:99:fd:60:62:f2:
7c:3e:d1:a1:cf:47:eb:05:04:fc:6c:4a:04:83:2e:
86:96:c2:86:f5:da:57:70:06:fd:27:36:40:81:a3:
71:09:ea:99:16:ef:61:f6:99:b5:77:6c:0a:b5:10:
a4:b2:95:1f:c1:43:38:a3:51:3e:7a:56:ed:b3:4b:
23:63:68:de:a0:8b:ee:ec:fc:23:5e:b7:54:ef:86:
a3:81:1a:81:90:27:2e:33:13:5c:56:f7:7f:f6:d3:
ea:9b:0f:3d:68:01:2e:d7:ca:20:01:0a:44:4f:23:
44:64:76:3f:cd:2d:39:3c:5d:83:ae:55:43:e6:f0:
9a:b6:8f:48:14:59:9f:f0:df:90:a4:52:c9:a2:52:
33:3b:d4:56:cb:1b:7e:fe:49:2b:27:d4:49:0a:c4:
09:50:0c:fc:1c:51:b2:ec:7f:26:a8:61:97:27:18:
2d:88:8c:84:b7:5a:f7:bf:8a:eb:76:ba:4e:30:9d:
5c:b3:89:37:82:b8:91:38:e0:d9:c7:e9:d7:cb:d1:
20:4f:0a:49:7a:75:d8:82:6e:0b:f9:0f:3d:6b:cd:
60:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A8:E5:03:08:17:C1:91:AC:05:9E:FA:22:0D:A0:A5:D8:EB:41:D9
X509v3 Authority Key Identifier:
keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4f:1d:2f:c5:0e:26:1b:34:25:dc:4e:18:f2:af:80:02:48:
d4:82:ca:5c:3b:87:86:c6:a4:7c:26:b1:46:a0:13:1c:86:76:
70:72:2c:a3:d5:77:3d:8d:95:92:98:f1:2b:7e:8d:61:21:a7:
61:44:c5:ec:51:f9:8e:ba:d4:af:9e:c1:5d:d9:7f:01:31:de:
97:9e:c4:74:25:7e:2a:c0:44:d0:c3:10:e0:1b:cc:50:d2:87:
cd:f3:78:8a:ea:f3:b1:7c:f4:b1:e3:0b:67:c9:51:ea:00:8a:
7a:5f:13:ee:7c:04:f0:2d:e2:d8:90:03:33:59:1b:44:ed:2f:
30:2c:c6:46:c1:f8:1d:ec:a4:75:7e:21:e5:75:d2:4b:1f:df:
b2:72:75:71:90:64:71:1c:46:ae:72:32:07:a3:7b:c4:b7:dd:
26:ee:70:36:f9:16:0c:6a:fc:fa:fc:d5:b5:7f:3c:3a:5d:c1:
2f:a2:67:4a:b6:6f:42:5d:f2:88:63:c8:f4:5f:3a:9f:eb:9e:
94:35:26:16:9b:28:01:c1:1d:f7:52:26:78:e5:19:54:cb:66:
81:9e:cc:93:fe:7e:cd:89:13:a6:6c:b7:c3:53:e1:9a:59:32:
69:b4:6d:eb:ac:b6:dd:f3:71:36:8c:60:9d:2b:4a:e7:ac:54:
37:a2:6f:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzlBOTAxMTAvBgNVBAUTKDUxODkyQkU1QjBCNEFCQzYwMjU0NDVGNDAzOUZDNzk1
RDhCQTU4RTIwHhcNMjYwMzI1MDQyNTQzWhcNMjYwNDAxMDQyNTQzWjAYMRYwFAYD
VQQDEw02OWMzNjNjOC1mOTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkZxc2shRWqdPdj48ooAXqhPishHjK2iA7eb/oJGz4u4EPHWxeQuQmf1gYvJ8
PtGhz0frBQT8bEoEgy6GlsKG9dpXcAb9JzZAgaNxCeqZFu9h9pm1d2wKtRCkspUf
wUM4o1E+elbts0sjY2jeoIvu7PwjXrdU74ajgRqBkCcuMxNcVvd/9tPqmw89aAEu
18ogAQpETyNEZHY/zS05PF2DrlVD5vCato9IFFmf8N+QpFLJolIzO9RWyxt+/kkr
J9RJCsQJUAz8HFGy7H8mqGGXJxgtiIyEt1r3v4rrdrpOMJ1cs4k3griROODZx+nX
y9EgTwpJenXYgm4L+Q89a81gAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ6o5QMI
F8GRrAWe+iINoKXY60HZMB8GA1UdIwQYMBaAFFGJK+WwtKvGAlRF9AOfx5XYulji
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUE5MC8xRkU4NEVEMjMz
NzYxMUVGOTkzRTQ2NzNDNEY5QUUwMi9VWWtyNWJDMHE4WUNWRVgwQTVfSGxkaTZX
T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VZa3I1YkMwcThZQ1ZFWDBBNV9IbGRpNldPSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OUE5MC8xRkU4NEVEMjMzNzYxMUVGOTkzRTQ2NzNDNEY5QUUwMi9VWWtyNWJDMHE4
WUNWRVgwQTVfSGxkaTZXT0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGk8dL8UOJhs0JdxOGPKvgAJI1ILKXDuHhsakfCaxRqATHIZ2cHIso9V3PY2V
kpjxK36NYSGnYUTF7FH5jrrUr57BXdl/ATHel57EdCV+KsBE0MMQ4BvMUNKHzfN4
iurzsXz0seMLZ8lR6gCKel8T7nwE8C3i2JADM1kbRO0vMCzGRsH4HeykdX4h5XXS
Sx/fsnJ1cZBkcRxGrnIyB6N7xLfdJu5wNvkWDGr8+vzVtX88Ol3BL6JnSrZvQl3y
iGPI9F86n+uelDUmFpsoAcEd91ImeOUZVMtmgZ7Mk/5+zYkTpmy3w1PhmlkyabRt
66y23fNxNoxgnStK56xUN6JvcQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:13:40 2026 by rpki-client