
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft
File: u0yWZedfnhna1G-LYJ00RPto7Uc.mft (raw, json)
Hash identifier: 5hFqlKle0VMekvlildGf+vId4ILTsffz3N1v2RR1lE0=
Subject key identifier: 3A:75:F6:2E:94:99:50:F4:25:6C:6C:60:80:49:B4:1E:E7:84:24:CF
Authority key identifier: BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47
Certificate issuer: /CN=A9142DA4/serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47
Certificate serial: 0423
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft
Manifest number: 0410
Signing time: Wed 13 May 2026 00:34:28 +0000
Manifest this update: Wed 13 May 2026 00:34:28 +0000
Manifest next update: Wed 20 May 2026 00:34:28 +0000
Files and hashes: 1: u0yWZedfnhna1G-LYJ00RPto7Uc.crl (hash: 33YpES96aajr2SHcD2FG0PlRp5QL5BpZOs/+/PfX1EM=)
2: FC35CE340A4711F0809C3032C4F9AE02.roa (hash: GCF/9VMFmjdFmy3bYTGGRnKSNfUmeGJXgemnhDHWC2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl
rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1059 (0x423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DA4, serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47
Validity
Not Before: May 13 00:34:28 2026 GMT
Not After : May 20 00:34:28 2026 GMT
Subject: CN=6a03c714-4af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:49:b8:82:ee:75:a2:44:15:cc:a9:2c:44:
64:ee:0d:29:09:d7:cd:cf:f1:e3:70:75:d1:21:a2:
96:07:b7:c5:51:7d:c5:e4:eb:4b:8e:e6:11:73:24:
2c:e2:c5:d8:c9:8e:1b:04:2d:b0:fe:aa:29:ef:a6:
bd:71:6c:fe:66:d6:3d:df:1d:02:bb:3f:f9:82:70:
19:89:91:7e:a2:01:cc:28:c0:a6:ef:6b:24:39:06:
85:fe:94:99:4b:dc:db:9e:3f:a1:e1:d6:ef:01:0d:
c0:cf:ae:96:7d:8a:2a:a7:53:5f:86:7c:82:9e:81:
35:f3:11:5a:ef:4d:15:75:d8:9f:1d:e8:e7:5e:c6:
96:96:37:cc:97:90:79:64:5a:66:db:6f:3a:47:cd:
20:a9:94:b4:b6:5f:9c:a0:b0:cc:37:ef:b2:72:15:
23:41:5d:4d:9d:70:c0:be:a9:99:d6:68:72:0b:4b:
e1:07:f9:ed:ef:b2:f4:01:4f:81:0c:84:7a:ac:44:
fd:c1:bd:ce:84:76:f5:2c:64:82:75:26:af:40:dd:
01:b6:6a:7f:72:22:2c:1f:5b:f6:33:bd:33:0e:51:
05:19:77:9f:6e:e3:19:d6:07:33:1f:27:31:44:da:
3e:b1:70:b7:eb:56:c1:f8:d0:cc:0b:d5:21:0b:75:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:75:F6:2E:94:99:50:F4:25:6C:6C:60:80:49:B4:1E:E7:84:24:CF
X509v3 Authority Key Identifier:
keyid:BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e3:aa:27:22:c6:ba:41:f6:94:7b:74:b7:6f:4c:0e:06:22:
3f:19:7c:61:10:8d:f1:6c:75:91:8e:20:03:72:b2:8a:3b:66:
7c:03:ce:25:d8:5e:7c:6e:97:08:30:25:c0:96:db:f4:65:12:
77:e8:d1:cf:65:1a:ee:50:a7:25:cf:81:1f:96:4a:9e:80:0a:
be:db:13:b3:45:79:08:0f:65:d5:9b:93:ab:ee:fb:90:90:63:
60:c9:89:b4:62:f3:73:46:ce:7c:5c:7c:f4:36:0c:4a:6d:5c:
d0:d4:e3:24:3b:64:c3:0f:38:7e:36:ad:c0:5f:9b:76:db:e7:
d4:5f:a8:1f:34:78:d1:c5:09:45:b5:ac:63:ec:d5:a1:99:d5:
de:9f:59:15:79:d7:e8:ff:c2:89:42:98:ca:b8:0d:b7:ab:fa:
fc:8f:8a:ea:e8:f7:58:65:09:eb:a6:d5:f1:e3:64:45:3e:93:
b9:7c:85:42:3a:80:ec:f7:6b:4e:52:25:63:42:96:e8:c8:5d:
16:92:6f:19:66:5a:7d:5a:71:e6:ad:eb:82:6c:7b:fc:72:54:
9c:82:c6:99:aa:c0:61:48:d4:b9:4e:5f:53:a9:ce:b5:3d:ee:
2a:e7:03:3f:99:10:47:6a:ff:c3:53:cd:82:46:79:1a:73:c3:
c0:9e:07:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:34:39 2026 by rpki-client