
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft
File: UylwC03drZ4_zcMnP00Y0-MEXcA.mft (raw, json)
Hash identifier: QM49sYNI91zxWZFrDq76ji1+wA24IOBvsrtJU+041as=
Subject key identifier: 42:FB:50:E1:03:5A:15:C4:C8:35:1F:CF:A1:9D:D7:0C:45:9F:72:F9
Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0
Certificate issuer: /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0
Certificate serial: 0989
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft
Manifest number: 1A88
Signing time: Tue 12 May 2026 17:16:20 +0000
Manifest this update: Tue 12 May 2026 17:16:20 +0000
Manifest next update: Tue 19 May 2026 17:16:20 +0000
Files and hashes: 1: UylwC03drZ4_zcMnP00Y0-MEXcA.crl (hash: DfrVbRAAiBMm/nQcBw/a0NmaQ1cuIsFon2EE0ivKh54=)
2: 31414558B0D511EFB17B942FC4F9AE02.roa (hash: TPRC+7x5lgG5CgncwF7KDW3EDTJUB3LlrULYz9MveMM=)
3: D9B56C8A7AB211EB99DAFE83C4F9AE02.roa (hash: leVQ3s1GExMxigU8EEYZc0TFMeUDxFJChsNZNDW6QyI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl
rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2441 (0x989)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B09, serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0
Validity
Not Before: May 12 17:16:20 2026 GMT
Not After : May 19 17:16:20 2026 GMT
Subject: CN=6a036064-2530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:42:a1:79:62:5e:6f:e6:43:9b:c4:2a:ba:4f:
da:5f:bd:87:79:1a:c3:8a:94:dc:99:e5:33:5a:ef:
21:68:3c:c0:91:a1:95:88:b0:64:db:e9:61:ac:d8:
9c:b7:e6:d7:3e:7c:50:cd:87:4c:7f:b8:f8:5d:2d:
16:b8:00:b3:e6:56:3e:6f:e8:68:9b:8b:9b:96:48:
1a:52:79:2b:a9:d0:0a:77:45:4c:c9:cc:54:4b:c3:
50:ec:c7:a1:35:5e:a3:b6:0a:70:e8:8a:6d:83:30:
b6:46:2b:d9:57:75:6e:80:18:cc:70:5f:42:77:39:
72:bb:95:88:db:b5:87:03:2e:91:0b:4f:23:46:43:
be:86:76:8b:85:bd:d1:1c:11:0b:e4:31:c1:95:1d:
5c:ef:6e:45:ba:1e:fd:e1:4b:32:32:a1:57:f1:26:
0a:89:f6:dc:12:f0:23:44:ed:55:22:cb:d4:7b:ba:
d1:43:6c:1a:63:00:c4:9a:72:4c:d0:9d:4c:e5:a6:
06:9f:93:e7:79:12:4e:69:ae:85:b6:38:ed:b6:80:
01:3d:07:37:1f:83:dd:e3:f5:f6:dd:96:26:7c:2c:
2c:89:57:1a:10:bb:38:cc:83:02:81:0e:ed:67:1a:
5e:56:29:38:91:03:85:09:d8:08:6d:65:ff:d1:82:
23:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FB:50:E1:03:5A:15:C4:C8:35:1F:CF:A1:9D:D7:0C:45:9F:72:F9
X509v3 Authority Key Identifier:
keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:df:73:ae:00:f2:66:da:58:52:31:d7:3e:d5:c4:35:cb:fb:
27:20:54:2f:ea:fa:b8:75:d9:91:83:db:9b:b4:32:34:08:b8:
0c:ac:bf:6d:80:8e:be:a2:ab:99:77:6a:d2:cb:1a:4a:06:b7:
12:8d:f9:51:a7:aa:5e:f0:32:f3:34:2e:e6:40:bc:3f:5f:61:
97:7d:8b:92:48:74:d0:0c:10:e5:ca:0b:2d:9f:09:46:1f:bd:
ea:0d:6d:e3:46:4a:8b:b1:b2:24:f4:ec:33:0a:6b:90:bb:d3:
69:d2:97:be:05:69:7f:34:19:7d:8e:35:3c:b5:ed:66:06:b8:
8d:60:f8:ff:b2:b6:33:5c:4b:3d:28:b3:a1:58:0d:c7:8c:c4:
1d:32:3f:35:c4:79:b1:48:ca:e1:36:13:cb:b3:39:68:67:ee:
4e:66:fb:03:38:04:8e:fa:75:9e:5c:07:d8:a1:f0:b3:3e:db:
45:f5:f9:43:83:7f:c6:5d:7f:18:24:ea:8d:af:11:c3:68:27:
6f:55:51:59:c6:c9:e4:81:16:07:25:b6:bc:ed:df:51:a6:ec:
8d:2e:55:21:f4:02:34:a1:98:72:b0:43:4d:dc:ac:16:a3:ee:
ca:5a:b3:3e:f3:84:45:4a:82:c9:11:a6:81:67:37:ec:62:9d:
71:47:77:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:27 2026 by rpki-client