
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
File: aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft (raw, json)
Hash identifier: 6MPqjBCUwCwYxpPwPKNW/Zyv5LYbHeANfmmCASSPpZw=
Subject key identifier: E1:C3:B9:B1:AE:B5:DA:47:5A:58:2C:DD:96:F7:0A:76:2E:7C:C9:5C
Authority key identifier: 69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81
Certificate issuer: /CN=A913A748/serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
Manifest number: 0142
Signing time: Wed 25 Mar 2026 04:32:59 +0000
Manifest this update: Wed 25 Mar 2026 04:32:58 +0000
Manifest next update: Wed 01 Apr 2026 04:32:58 +0000
Files and hashes: 1: aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl (hash: A0xaMggALC4IeGrXA+NC7/iSEU7eKidnjzJjHOdvNn4=)
2: F31A7084E2C911EFADAB3C32C4F9AE02.roa (hash: V8S2+XJPP/CdV0EmSbWmw6XsckCCKKG5In4OFy7P4DE=)
3: 1B86A7CCE2CA11EFAA007D32C4F9AE02.roa (hash: ppsEvxxMjtuIKuh2XNt//OxzSH8+VLhGq7t6ULWCVNc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl
rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A748, serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
Validity
Not Before: Mar 25 04:32:58 2026 GMT
Not After : Apr 1 04:32:58 2026 GMT
Subject: CN=69c3657b-b6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:ae:8f:2e:fb:99:8b:28:3e:35:0f:a9:c0:
7e:21:01:77:40:e6:3e:15:dd:1c:81:4a:64:c9:8b:
a2:76:f4:df:f4:6e:cb:f8:e7:e3:ac:c3:f4:09:ed:
eb:45:9c:d4:22:a4:18:74:44:77:4f:ff:c6:ca:f7:
83:c9:d5:75:ec:25:69:df:d8:69:85:13:6e:13:77:
60:9d:db:d6:05:3e:3a:ef:00:f0:83:13:bf:fc:20:
87:33:40:19:23:6b:86:03:53:23:73:a9:4c:1a:e2:
25:2b:78:ac:35:a9:de:3b:dd:e4:2d:a4:55:1d:dc:
e1:9b:08:e5:44:da:99:ee:1c:97:2d:5b:8f:16:70:
81:08:17:79:b9:47:5a:b2:29:a0:a6:cf:7e:1d:36:
f0:0e:f9:ef:75:17:86:72:e8:a9:d8:a6:ac:9d:5c:
b6:3c:e3:53:c9:0b:25:c9:59:5c:08:35:c1:97:83:
ca:fc:4f:f1:b3:8f:56:72:b1:8a:07:f1:c8:4c:22:
9d:90:94:c8:d6:49:aa:87:b3:8e:94:2a:9d:5c:87:
0c:38:ca:a2:df:4a:df:48:43:0b:02:80:d9:04:95:
a7:e3:7a:29:3e:f8:e8:56:be:71:4d:1f:4d:bf:59:
42:67:fa:11:e5:dc:51:5e:88:ed:c0:5b:89:b9:4d:
26:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C3:B9:B1:AE:B5:DA:47:5A:58:2C:DD:96:F7:0A:76:2E:7C:C9:5C
X509v3 Authority Key Identifier:
keyid:69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:3f:0b:ea:f2:1f:7a:ce:c7:81:fb:1f:20:8b:57:81:5d:a2:
9b:f8:67:5a:1a:00:27:4c:15:17:ff:d4:67:e7:1f:ec:25:e7:
7e:dc:9f:f0:23:cd:3b:c6:71:94:93:2c:66:3f:31:3b:28:0e:
99:f1:e6:68:72:59:11:49:3e:17:bd:a6:7b:a4:04:fe:bb:54:
73:39:7a:ae:eb:2b:cd:27:26:03:54:71:50:d1:06:f9:dc:57:
07:24:a1:27:2a:32:07:06:60:6d:1d:7b:94:c7:80:44:4a:e5:
d1:bf:48:17:11:da:b7:a0:45:21:81:8e:70:3b:78:fb:ab:ba:
3d:15:16:96:a8:72:ae:82:47:49:42:cc:52:d1:a9:5b:13:77:
3a:2c:c9:d8:d7:96:9f:d4:1a:2b:be:aa:c7:ec:7b:a4:9d:c2:
60:aa:95:ac:ca:74:a0:bb:a3:60:4f:c4:6c:c6:82:6a:0a:99:
44:38:a7:00:ad:ec:23:b9:55:9e:99:8a:af:53:d7:db:73:97:
36:81:cf:47:c4:f4:0e:eb:9b:b5:d9:65:eb:da:e8:57:1d:51:
41:fb:b4:db:24:9e:1f:6b:4c:5c:77:35:e3:e9:ec:a4:e4:35:
f4:31:d6:c9:c0:98:a1:37:80:8f:3a:6c:cb:cc:d0:a8:b8:6d:
7c:36:4b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:33 2026 by rpki-client