
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
File: UxLzmab36w3c1RwDn4P3t6R6Xwk.mft (raw, json)
Hash identifier: 9jOK4CH8iGAUAYlQkdAN8mtDg3UP1yzjn2LDXn2qA68=
Subject key identifier: 93:24:15:E8:F9:A0:0E:68:6E:91:1B:FB:3A:63:9A:5B:C3:67:85:7E
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial: 36B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
Manifest number: 35D5
Signing time: Sat 10 Oct 2026 15:18:28 +0000
Manifest this update: Sat 10 Oct 2026 15:18:28 +0000
Manifest next update: Sat 17 Oct 2026 15:18:28 +0000
Files and hashes: 1: UxLzmab36w3c1RwDn4P3t6R6Xwk.crl (hash: usS8dkoD+la4XVlwP7fok1j2RP8T7I9/5aCRdFmpOfE=)
2: 5C3C24DA7C3A11F19502E96961A30FBC.roa (hash: +77vCVU7zK9eDrNIk/k034MQetemZz3M59FaR+fpfgs=)
3: EB3FE1C61B6411ECAAB1D328C4F9AE02.roa (hash: kefR9n9mBEOogfhkWHbCEREeJRCl5YzlKLqQiZzyJkc=)
4: 2F20ECAE554211EF82D40732C4F9AE02.roa (hash: ARFGvtWgIhsDD88anAt/fT68RSG6NvFwb2tGcNJ0NZM=)
5: n1wGO_BrdvLw-lFKsi_-ekuaTiQ.asa (hash: ZWW5pwD9DlNkuoKy9efAHiCeNij2lsr7bANlrYOyKWY=)
6: 03C522BA8CF211ED8699F014C4F9AE02.roa (hash: 436zBDnPnGZ3SOhOykoQMMQvMWG9r9+JB6vVgzRzKCE=)
7: EF1D0466455311E98FA31F68C4F9AE02.roa (hash: MHuC/c0u9rLMw5yxdb8yo13RMMDAL1YViJT5Op2QWCw=)
8: A1QA4uTgoOvmNSFfsW45pmvLtbQ.asa (hash: whku0tjjZYdGS8Z+ML0j96kj6gswzsgFL8e0iin7Jbw=)
9: bgy24N1KeKRHCayREa6bv93qk3k.asa (hash: lYedzIZpF4ZsVxphJ6RinN/nXnotrunx1dWFk9G2MeY=)
10: Cyg3opLjC97GVIk7PxA0uSBCM7A.asa (hash: HLSzl81SxyEpBVwpRVxdTXRYVuWc7FdoDGlGlpt1rDk=)
11: 8D6973CE77C311EE90D4BD46C4F9AE02.roa (hash: tYLxo7jbuVluJdA3j6VUBn1vuF7ypNJl6KNhTxT5YiQ=)
12: 56C4FAF42D4511EAB70F247AC4F9AE02.roa (hash: eE89PGe/2iXoWPgaTFIDnebqRit5cWEOVZbQe/DuWbY=)
13: E474AF108D8811EDB3C13D6CC4F9AE02.roa (hash: skq6JStmhqRgIs8z4El231wzMKzcPqomqPKtDgLrZik=)
14: 7350B2AE2BB011EEBF8C0962C4F9AE02.roa (hash: sB4yEk24brV7U55HdiVRGWHChZuTolQ5lII/wEtR7uo=)
15: 95B5C59E2DCE11EEB652B16FC4F9AE02.roa (hash: xrmdLLEmHBEXKfK+TG0Dk+IrDsCMqxTM2oXKFCyUMsU=)
16: SA8-IgRcu9eWytErliVq8WNLNEE.asa (hash: m4RjPxFhZ2AhYAh8Ic3/AAwmGM78o5cePqPFUNH4ZLk=)
17: E367308E8D8811EDB3C13D6CC4F9AE02.roa (hash: +sR0reUxc7B8aN9ftONoJd9EcDxqs4AGo23fd7H99yU=)
18: C2F17AB22DCE11EEA2884670C4F9AE02.roa (hash: KaqrJVN+HzyD1nsBvHMD4Hbmck46T+5dGXtKWP7fEGY=)
19: CvF61BOFafSlrQARFiDhR1wj240.asa (hash: Z3Om+Oo4m2TA8gDHyU8MwrdiQpPS17pYZPJ3f0YFioA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 15:18:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14000 (0x36b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Validity
Not Before: Oct 10 15:18:28 2026 GMT
Not After : Oct 17 15:18:28 2026 GMT
Subject: CN=6aca5744-33ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:73:fd:6a:d3:2c:db:b0:3f:3b:d9:fc:b8:f0:
e5:86:b9:48:1c:e9:a7:6d:c9:71:be:d1:6a:87:c2:
b1:7c:e1:cb:e7:3d:cf:f5:c6:15:c2:74:e7:36:9e:
df:02:d9:9c:ab:8d:8a:5f:7d:d6:b5:a4:fd:23:ea:
90:28:83:93:33:62:af:4c:2e:a7:61:c7:3f:d1:02:
6d:ac:41:4a:60:de:e8:55:b7:9e:03:8d:86:5f:d7:
78:73:58:64:20:2d:f3:7c:3a:d9:ac:89:84:e5:f1:
c9:77:a8:20:35:fa:e8:a4:e5:4d:a1:c7:a8:b2:af:
89:81:8e:79:f0:77:a8:b3:ad:14:0d:03:8a:60:dc:
e4:f5:8b:e2:1c:d2:84:bb:f0:d3:8e:9b:a3:f4:82:
ae:4d:a2:cd:d9:4e:f8:2a:7a:c4:83:2c:14:2d:a2:
85:b4:45:3d:76:f5:73:0e:cc:ff:5f:f7:85:bb:38:
0d:89:d3:89:de:79:06:1b:c9:06:ad:93:ca:82:a4:
ba:0c:a7:cd:a8:20:a1:6f:0b:e2:06:bf:07:dd:5a:
45:61:60:c3:36:55:a7:3c:b0:62:f0:a5:8f:c1:b5:
66:21:e8:c3:07:6c:dc:72:04:c3:4b:65:48:80:c6:
20:75:08:90:e4:38:80:de:85:a3:70:d9:85:8b:0b:
ab:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:24:15:E8:F9:A0:0E:68:6E:91:1B:FB:3A:63:9A:5B:C3:67:85:7E
X509v3 Authority Key Identifier:
keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:95:28:6e:42:08:99:e7:84:14:6f:e0:d6:6e:cf:32:3c:a0:
c3:0a:dd:fa:44:3f:62:73:22:07:85:b0:27:5e:03:89:20:37:
70:bb:8f:87:8e:89:8c:67:a6:25:9d:3b:e9:1d:d0:1a:6b:62:
f8:4f:33:13:b9:07:7d:1b:b3:0f:4c:ae:bb:7e:04:60:41:02:
77:63:42:b7:10:08:00:f7:52:39:55:42:80:ef:58:0d:68:1f:
d1:b4:03:b7:1a:d5:69:6c:c2:f4:4e:62:be:b6:11:8d:dd:05:
ad:b5:7a:b7:24:a6:df:4d:bf:49:4d:82:00:44:67:6e:a7:7c:
59:27:e0:56:8b:43:ff:1d:c8:db:bb:a2:72:f4:b9:e3:c3:5e:
c7:42:ed:dc:3b:52:9d:4b:c7:95:73:6a:d7:00:47:7e:d3:b7:
97:ae:0c:8d:7b:0e:45:8b:54:35:86:32:c1:b4:02:88:2d:70:
a4:02:81:40:c3:28:6e:6c:1b:05:ed:bc:30:3a:d1:c5:8a:e7:
8c:44:d8:65:5f:49:6d:12:02:65:34:12:bc:71:e8:31:70:b6:
7e:7e:8a:67:28:bd:5e:17:64:85:42:d9:67:7e:5a:c0:a8:88:
71:19:54:58:eb:01:bf:a5:c4:e0:90:5a:81:e4:76:e7:70:35:
13:7d:53:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:36:37 2026 by rpki-client