
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft
File: Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft (raw, json)
Hash identifier: ZL+8wGv5jhGBEA/SfI4v0ooS5m6tqCGRr0553wpigU0=
Subject key identifier: 18:6F:09:DC:AF:B9:A7:B1:AB:09:22:58:C1:FF:24:0B:92:BA:AA:DC
Authority key identifier: 53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A
Certificate issuer: /CN=A9149ACD/serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A
Certificate serial: D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft
Manifest number: CE
Signing time: Tue 29 Sep 2026 07:16:20 +0000
Manifest this update: Tue 29 Sep 2026 07:16:19 +0000
Manifest next update: Tue 06 Oct 2026 07:16:19 +0000
Files and hashes: 1: Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl (hash: ckY5zwhVPfUMfVxowCPidMQEeuzPPtSzBMEgg1UFPCU=)
2: 286C872684B011F08D2ED42CC4F9AE02.roa (hash: WVobOagpEAd84RigRT5lqEkEZLi28lRSUvzP7/VjaVk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl
rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 07:16:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149ACD, serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A
Validity
Not Before: Sep 29 07:16:19 2026 GMT
Not After : Oct 6 07:16:19 2026 GMT
Subject: CN=6abb65c3-f4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:e2:49:54:7d:0d:e7:dc:ca:e8:5a:59:7f:
57:8c:8e:fa:29:a9:9d:6b:dd:e9:d2:8d:5f:13:04:
9e:6f:ba:16:15:39:ef:f5:93:91:8b:99:cd:d2:2b:
72:12:3b:79:42:81:83:a2:90:30:e7:fa:f9:fa:1e:
e3:b7:7b:12:12:cf:2f:f6:27:ba:86:2f:ac:b7:77:
8d:a3:67:a1:31:d2:d3:a5:51:0b:7d:c2:5a:20:1f:
ae:87:19:19:aa:cb:30:7b:e8:57:0d:79:c1:e2:09:
6c:44:5e:67:96:48:d7:32:59:97:5c:53:0e:fe:e3:
ed:db:ce:1a:3d:f6:af:5a:2e:f5:80:00:76:f5:be:
07:de:ff:23:e8:dd:09:52:7a:ff:0b:62:89:23:03:
43:2a:e9:56:e6:00:d7:4e:4a:1f:b1:66:68:e8:53:
47:d7:d7:60:ec:6f:11:5a:6d:ce:99:66:2c:a1:4f:
8d:bc:80:0c:f2:e1:f2:8f:49:4f:3c:d4:54:09:20:
75:13:ca:30:37:47:b4:45:f6:fd:45:6d:b9:d4:65:
95:19:57:ac:46:c4:f1:aa:95:15:21:7f:73:8c:6b:
73:e7:fd:43:12:45:ab:b8:c3:ac:fb:32:ba:6e:d0:
7a:af:51:7d:99:6a:59:99:85:11:ca:78:07:bd:4c:
f3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6F:09:DC:AF:B9:A7:B1:AB:09:22:58:C1:FF:24:0B:92:BA:AA:DC
X509v3 Authority Key Identifier:
keyid:53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:b0:78:16:9b:d9:b5:ac:ea:84:ed:1b:cb:b0:64:e6:7a:50:
ec:d9:1f:f8:21:5e:44:89:de:53:fa:9c:ef:70:a2:bf:f4:2d:
69:fb:ff:b4:e4:87:cb:bf:3a:33:ac:90:87:ac:49:16:8f:d6:
3a:92:0b:2e:c6:5b:25:66:97:2f:c4:16:06:15:ce:3c:30:b0:
d3:e6:6a:e5:d9:7f:93:6f:c6:73:33:c0:9d:59:00:ed:b0:2f:
aa:62:20:37:18:c5:9d:22:34:c4:bc:f7:bb:d7:47:c6:15:7e:
39:c3:86:f4:5c:83:8d:a3:58:de:37:13:a4:7d:59:8d:1d:03:
87:06:be:69:20:79:d2:fd:fc:d9:1a:1d:58:76:16:46:9b:cb:
2a:65:4d:55:38:a1:43:29:5c:ba:71:3e:81:aa:08:b0:1b:35:
ba:d7:18:de:cf:b1:be:20:cd:1c:47:6b:a9:6e:5e:d8:88:84:
6e:c6:27:e3:fa:41:05:ee:d7:8b:0d:6e:c7:c7:ef:fc:4a:19:
eb:be:00:97:51:b5:8a:27:5a:ad:c5:5f:53:58:14:c4:48:9d:
89:24:60:a2:5c:20:84:eb:b9:dc:4f:c2:71:24:03:b6:e5:34:
98:ac:a9:4e:ca:d0:a5:d7:ce:ed:ff:2b:c8:a8:a3:70:d9:8e:
14:4c:d2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 22:10:06 2026 by rpki-client