
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
File: Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft (raw, json)
Hash identifier: U2Je0lb5M0VEmBf0KJr0DeT47SSz3VT1YF782jMut8o=
Subject key identifier: A8:79:78:B7:4B:76:8D:2A:82:EB:88:CD:5E:72:11:31:35:26:00:D1
Authority key identifier: 53:0F:CD:29:9E:77:5B:8A:CB:27:52:A0:3A:FA:A7:D1:81:E5:00:EE
Certificate issuer: /CN=A913DC32/serialNumber=530FCD299E775B8ACB2752A03AFAA7D181E500EE
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
Manifest number: C6
Signing time: Wed 25 Mar 2026 06:06:41 +0000
Manifest this update: Wed 25 Mar 2026 06:06:41 +0000
Manifest next update: Wed 01 Apr 2026 06:06:41 +0000
Files and hashes: 1: Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl (hash: WQ5YBW0+FE/i8n0MqSStYIROGzx6oR7yJ2jq4I9ZTq8=)
2: 455B2534FD0811EF85ADED79C4F9AE02.roa (hash: nE3tnNV3uG2zYt9TjdudVmkzUxyBHwB8W0/YnHDTswk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl
rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DC32, serialNumber=530FCD299E775B8ACB2752A03AFAA7D181E500EE
Validity
Not Before: Mar 25 06:06:41 2026 GMT
Not After : Apr 1 06:06:41 2026 GMT
Subject: CN=69c37b71-dd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d9:cd:fb:99:e7:0e:39:58:9e:7e:ad:a7:e4:
3b:48:03:46:62:30:30:1c:77:f9:37:a2:06:62:37:
0b:4a:5c:45:a8:9b:e7:fe:13:a8:b0:48:3f:06:2c:
64:10:3d:6d:7a:c0:87:d2:da:45:c2:cb:3e:e2:65:
d9:2e:16:e8:eb:ad:17:3a:a1:b0:3d:ec:6a:ee:9c:
80:18:5d:c1:9f:71:6f:e9:7e:da:af:8e:3f:7c:ef:
cb:be:a0:69:48:b5:5e:fe:f8:d0:ba:cd:90:83:05:
ae:0b:38:c8:b8:f3:85:cd:ec:db:cd:78:c5:d2:e4:
e6:63:ad:6b:aa:8a:f3:04:c3:09:a9:81:88:96:1e:
40:bd:d4:06:8e:b5:da:8f:d8:dc:95:1e:4e:58:d3:
a3:e8:9d:1a:a7:b9:1d:b9:20:0a:eb:d3:e6:74:50:
86:55:2b:aa:8c:a1:06:61:ef:4d:c8:e8:81:87:d8:
21:45:d6:4b:7f:21:ac:da:c8:7c:ab:22:9c:f7:1e:
db:ab:2f:17:14:5d:96:92:c1:11:76:54:0d:75:3a:
b6:b3:22:8b:62:38:6b:c6:00:d4:29:fc:5b:aa:c9:
69:87:27:c1:a8:e5:6d:e5:23:fa:22:1f:4c:0e:53:
2c:79:fb:ce:1f:02:63:d9:41:69:da:da:64:3a:ef:
a1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:79:78:B7:4B:76:8D:2A:82:EB:88:CD:5E:72:11:31:35:26:00:D1
X509v3 Authority Key Identifier:
keyid:53:0F:CD:29:9E:77:5B:8A:CB:27:52:A0:3A:FA:A7:D1:81:E5:00:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:3c:f3:d8:7f:44:d7:67:79:69:e6:8d:e7:f4:1c:c1:0c:1d:
e6:ed:4f:39:92:bd:ad:62:c1:ce:7d:58:88:ed:b2:c4:5b:60:
0e:87:7e:92:17:e6:d0:87:b5:6c:38:70:e1:db:31:68:1b:49:
d5:fb:59:16:35:a8:ee:19:d5:0f:f0:1f:34:17:65:76:39:ca:
7c:8b:4d:5f:1a:74:1c:bb:51:c1:f9:78:f9:29:1e:c0:89:31:
3d:fd:fe:95:f7:fa:2a:e6:49:92:8e:c6:b2:63:93:93:0f:ed:
73:73:1f:f6:51:62:be:77:6b:7b:c9:fb:4e:6e:79:76:ef:fa:
42:6a:78:c5:69:41:03:81:52:7c:11:0e:66:fe:cd:26:9c:1a:
d4:9b:3d:29:21:44:ff:f0:ac:96:d0:b8:22:f3:4d:22:9d:0e:
70:b2:84:f3:34:f3:a5:31:ac:22:5e:e6:dd:1e:9c:57:96:12:
af:e8:72:8a:e1:15:92:ca:5a:89:d9:10:41:fa:f4:d4:64:49:
36:e5:d4:aa:62:06:6d:66:5a:d2:ff:33:d1:60:12:ca:ba:b1:
02:13:a4:50:db:79:6f:5f:1b:db:4b:10:7c:9d:23:a9:54:06:
76:64:36:81:b4:a3:b5:8a:cb:17:22:49:d3:e6:e0:86:38:f1:
8c:69:64:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0RDMzIxMTAvBgNVBAUTKDUzMEZDRDI5OUU3NzVCOEFDQjI3NTJBMDNBRkFBN0Qx
ODFFNTAwRUUwHhcNMjYwMzI1MDYwNjQxWhcNMjYwNDAxMDYwNjQxWjAYMRYwFAYD
VQQDEw02OWMzN2I3MS1kZDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjNnN+5nnDjlYnn6tp+Q7SANGYjAwHHf5N6IGYjcLSlxFqJvn/hOosEg/Bixk
ED1tesCH0tpFwss+4mXZLhbo660XOqGwPexq7pyAGF3Bn3Fv6X7ar44/fO/LvqBp
SLVe/vjQus2QgwWuCzjIuPOFzezbzXjF0uTmY61rqorzBMMJqYGIlh5AvdQGjrXa
j9jclR5OWNOj6J0ap7kduSAK69PmdFCGVSuqjKEGYe9NyOiBh9ghRdZLfyGs2sh8
qyKc9x7bqy8XFF2WksERdlQNdTq2syKLYjhrxgDUKfxbqslphyfBqOVt5SP6Ih9M
DlMsefvOHwJj2UFp2tpkOu+hSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKh5eLdL
do0qguuIzV5yETE1JgDRMB8GA1UdIwQYMBaAFFMPzSmed1uKyydSoDr6p9GB5QDu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREMzMi84NDBBMTZCMEZD
RkQxMUVGQURCODYxMTVDNEY5QUUwMi9Vd19OS1o1M1c0ckxKMUtnT3ZxbjBZSGxB
TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V3X05LWjUzVzRyTEoxS2dPdnFuMFlIbEFPNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
REMzMi84NDBBMTZCMEZDRkQxMUVGQURCODYxMTVDNEY5QUUwMi9Vd19OS1o1M1c0
ckxKMUtnT3ZxbjBZSGxBTzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARDzz2H9E12d5aeaN5/QcwQwd5u1POZK9rWLBzn1YiO2yxFtgDod+khfm0Ie1
bDhw4dsxaBtJ1ftZFjWo7hnVD/AfNBdldjnKfItNXxp0HLtRwfl4+SkewIkxPf3+
lff6KuZJko7GsmOTkw/tc3Mf9lFivndre8n7Tm55du/6Qmp4xWlBA4FSfBEOZv7N
Jpwa1Js9KSFE//CsltC4IvNNIp0OcLKE8zTzpTGsIl7m3R6cV5YSr+hyiuEVkspa
idkQQfr01GRJNuXUqmIGbWZa0v8z0WASyrqxAhOkUNt5b18b20sQfJ0jqVQGdmQ2
gbSjtYrLFyJJ0+bghjjxjGlkfQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:03 2026 by rpki-client