
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
File: UDJy2j7wq-3pU5x-JDobhoaxYfs.mft (raw, json)
Hash identifier: Qqes2sgE05v8wxjNbEQokkvXhYnIM/oQ42QvLnBuMWM=
Subject key identifier: 92:5F:DF:9A:D6:F1:B9:94:2F:D6:E7:F8:E6:2F:D0:75:D6:15:02:FF
Authority key identifier: 50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB
Certificate issuer: /CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
Certificate serial: 018F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
Manifest number: 017A
Signing time: Wed 25 Mar 2026 03:55:29 +0000
Manifest this update: Wed 25 Mar 2026 03:55:28 +0000
Manifest next update: Wed 01 Apr 2026 03:55:28 +0000
Files and hashes: 1: UDJy2j7wq-3pU5x-JDobhoaxYfs.crl (hash: 67e2gyEsaWUz6HJ/+SyRD18PnHvBAVqmYi2vDlYODXc=)
2: DADBB0C033A411EF8E99B625C4F9AE02.roa (hash: uj7aSF5U3lrEwAf5AMXaMNocSkTapCA+NNk0S8T44wI=)
3: C3A77BE8391F11EFBFAB6D66C4F9AE02.roa (hash: xag7piZxRalbVehikGhY7Y5TfIzZyOjEtv8ww1qYwCA=)
4: C32999EE391F11EFBFAB6D66C4F9AE02.roa (hash: M4sCC9h+jOw1aprcitO1VbFmajV+N+fzu/Vlxn3AA6E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl
rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:55:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146906, serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
Validity
Not Before: Mar 25 03:55:28 2026 GMT
Not After : Apr 1 03:55:28 2026 GMT
Subject: CN=69c35cb1-2e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:8f:b1:83:e4:cf:fa:89:3a:40:3f:dd:80:
73:06:13:e7:d9:78:6d:98:05:95:7a:11:2f:fa:cd:
67:e8:b0:f2:0c:cb:a7:ad:6e:f8:5d:fe:62:eb:97:
a2:9a:98:b9:1a:0c:39:57:83:f0:fb:c9:33:6e:c0:
52:d2:81:fc:1d:c7:87:a6:4d:f6:0c:4e:5d:99:f0:
20:b2:69:8d:11:86:46:0f:0e:5e:ac:41:60:4d:50:
39:76:6e:59:a1:af:89:58:84:e4:d0:76:ff:df:66:
e4:bd:52:9f:96:9b:3d:66:8f:da:14:f5:12:84:87:
46:6c:b9:50:b8:c8:64:8b:20:4a:2a:b6:40:ad:3a:
43:11:ab:1c:20:73:0c:b6:ef:95:94:2b:e7:fe:58:
64:e8:d9:b2:79:d7:6c:45:98:95:d3:04:90:99:1b:
8c:53:ed:b1:7b:bf:b9:63:0c:f7:b7:50:80:f9:6a:
57:76:d9:ae:01:68:bd:20:f4:88:a8:dc:84:ba:13:
4f:de:cf:a0:46:81:40:3d:85:6c:5e:cd:9e:20:36:
10:76:a0:be:ec:4e:ff:51:d1:ce:fb:5b:ef:9c:19:
20:f8:b2:96:ec:f9:a2:65:60:37:d1:ca:dd:3a:30:
b1:d2:6c:14:be:19:25:c4:d4:e4:ad:ba:51:64:8d:
b2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5F:DF:9A:D6:F1:B9:94:2F:D6:E7:F8:E6:2F:D0:75:D6:15:02:FF
X509v3 Authority Key Identifier:
keyid:50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:56:ba:95:77:07:8f:5d:8f:d6:ca:33:dd:e7:74:2f:64:aa:
2b:e1:7b:77:e3:17:6c:ed:b8:65:b1:35:f2:43:6c:80:e3:b5:
f4:04:d0:a2:e3:b0:f2:39:35:3a:07:53:89:52:b7:c2:bc:d0:
a9:7c:13:3c:77:d7:c0:86:7e:a7:b9:3f:7a:6b:4e:cc:91:b4:
0f:f7:ff:11:bc:fa:3c:74:75:1b:4c:91:98:bd:60:c9:ea:3f:
dc:ce:6f:dd:ef:1a:a3:9f:ec:5c:bc:0c:df:d2:56:8f:44:ec:
ba:8c:aa:45:04:22:6b:77:69:0a:5a:99:19:ab:29:0c:79:39:
7f:5e:6b:93:6e:ca:23:33:bd:e4:b6:e8:f0:b5:6f:c6:42:36:
3a:c2:12:2a:1f:63:ec:17:dd:f2:00:68:d7:23:98:be:99:16:
31:40:b0:d7:ea:03:95:53:c0:50:65:1a:5a:9c:cd:46:91:bf:
c0:b7:e9:44:ce:8f:f0:ff:66:ab:3a:03:6e:3b:1a:b0:1f:df:
cf:e6:cc:45:b8:8d:07:0c:50:15:12:ee:53:58:2e:02:25:8b:
45:2b:98:02:ee:ae:54:e0:9b:13:94:16:c0:94:3b:15:80:53:
5b:b8:76:77:46:d7:c6:a6:35:b1:cc:56:c8:26:8e:85:73:9a:
c1:dc:4d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:43 2026 by rpki-client