
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
File: UxLzmab36w3c1RwDn4P3t6R6Xwk.mft (raw, json)
Hash identifier: 5va+7FjRBEqTyRRCYM6vNz07xL92fvYkrQ3n17E6REE=
Subject key identifier: AB:5D:65:8A:45:34:74:71:6D:7B:66:34:96:8F:C7:41:16:3D:5B:60
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial: 366E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
Manifest number: 35A7
Signing time: Wed 22 Jul 2026 15:23:27 +0000
Manifest this update: Wed 22 Jul 2026 15:23:26 +0000
Manifest next update: Wed 29 Jul 2026 15:23:26 +0000
Files and hashes: 1: UxLzmab36w3c1RwDn4P3t6R6Xwk.crl (hash: uyTwMzJLgLt8iXIWg1mGb8Ls+V8MFbKieo6pjSWOgCk=)
2: A6Yd3OnHW9dYg9W2ztPlcF88rF4.asa (hash: SGnS2QMul3e/ra8VZGJLEa8Q+Y/cerpYPT5AgVCOERo=)
3: C2F17AB22DCE11EEA2884670C4F9AE02.roa (hash: effeuvJ8l3AUehdgLEWM2HD3kmQlAIDMK+QRL0CUES8=)
4: R_P5k-5B764bv47XFseokAlkqG0.asa (hash: ateVzh5V6xrwsxAggbV6DsQXxNriblWnTGRdO8wPLF0=)
5: 5C3C24DA7C3A11F19502E96961A30FBC.roa (hash: T7NOwWvyJhEbpJwEubb2URocPtjhrATKrc8a51jyrd8=)
6: mdkUMDTCA-liMHWCGVOq1Lzr5m4.asa (hash: FPNURNp+gUbhptz+zBLiwR+ImVB1S60HEJTDn5RAzgs=)
7: 2F20ECAE554211EF82D40732C4F9AE02.roa (hash: FzGV2az77P99aPOesIkUJNX6Xr/vF/iE5jAQGK/lwCE=)
8: jGeEsr3Scy-u-lvsXacp5GgDJXc.asa (hash: 9DABc/OQt8c0UyjghiubtHyjKdEmu/HKbGQ1HK15ZjI=)
9: EF1D0466455311E98FA31F68C4F9AE02.roa (hash: WNcYetTPqeiv/gJdhSaTlqe8oWCCpgSvbxYX4ELwCGg=)
10: 9324BAA27C3A11F191D8747461A30FBC.roa (hash: UMSaqpVWfznuSNCIQQIcr3cpk2hC9l9TVFX2KvWq0oM=)
11: 56C4FAF42D4511EAB70F247AC4F9AE02.roa (hash: YRii0Zo0Ii/RPFSSaW2DmXwDsKKvPuXOrEkEJHdLhV0=)
12: EB3FE1C61B6411ECAAB1D328C4F9AE02.roa (hash: QN6urrq0/MRPBsyVwW06hj5Hgqfql2xPz8BmJ6v46LI=)
13: 8D6973CE77C311EE90D4BD46C4F9AE02.roa (hash: kH5XvLgwYNGVU4SNZtJIVKDH6abpZgZgif4ntA/Uq98=)
14: E474AF108D8811EDB3C13D6CC4F9AE02.roa (hash: noBQw864/f72VFx3andbpjd4W9nv+2EjSEATcB2fGbI=)
15: 7350B2AE2BB011EEBF8C0962C4F9AE02.roa (hash: Sp7dFq3oB3/SLpjiNzPQXEcyYCMfjU6YoLN7YWBMCYw=)
16: 95B5C59E2DCE11EEB652B16FC4F9AE02.roa (hash: d6iO9u2ih9RRm7pMd+vjg8OegUnNhTtH4LrmCu5pQ4M=)
17: E367308E8D8811EDB3C13D6CC4F9AE02.roa (hash: a063z56fhF465bYqQMqQ/VS6+YD1pprAbiKfQKP6c7Q=)
18: 03C522BA8CF211ED8699F014C4F9AE02.roa (hash: hZnSGa5sJglM36JrWPW33FVeXKbAkLzdvimEBvYGRK0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:23:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13934 (0x366e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Validity
Not Before: Jul 22 15:23:26 2026 GMT
Not After : Jul 29 15:23:26 2026 GMT
Subject: CN=6a60e06f-cc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1b:d2:aa:11:89:7e:7c:bf:c1:f8:b8:fd:e9:
0c:b7:84:e6:8f:20:6a:10:98:e0:eb:05:ee:b9:d2:
1d:1f:b0:31:f4:ba:1d:6f:87:a8:1b:41:41:99:34:
7e:dc:13:8a:41:35:74:2d:50:48:33:c3:2e:97:bf:
77:f1:fc:08:68:6c:a5:6a:87:b5:d7:28:9e:6b:a9:
20:c8:0d:0d:da:8e:49:5c:14:60:18:80:36:97:b4:
c2:d5:1e:b7:da:08:3c:e5:12:fc:f3:23:38:e2:23:
0d:c9:34:bb:ac:f7:ee:5a:c9:06:b0:69:e5:70:b8:
9f:0e:0e:27:c8:5e:74:1e:14:1f:52:7c:63:c3:da:
f0:ff:70:76:dd:ee:da:60:0c:93:22:24:78:96:f3:
17:16:d1:98:10:a4:69:48:ce:c6:95:f7:ab:38:77:
61:95:6d:a1:c9:b0:c0:95:05:67:9a:72:3a:43:70:
c4:0c:51:cd:fc:ef:47:5a:be:eb:be:6d:45:96:11:
a1:02:bb:22:d6:5c:b4:7d:74:d9:10:89:32:1f:bf:
26:af:63:24:20:44:db:2f:51:4b:7a:bd:4d:e1:a8:
a5:c8:fc:d2:8e:d6:f6:47:ff:0d:ac:36:c7:b4:d4:
24:0e:a8:47:eb:93:e2:33:1c:80:a2:67:23:13:ce:
cd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5D:65:8A:45:34:74:71:6D:7B:66:34:96:8F:C7:41:16:3D:5B:60
X509v3 Authority Key Identifier:
keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:af:dd:67:8e:17:5d:54:45:0c:b0:85:c0:02:e2:8b:e9:7c:
7f:d1:9b:14:bf:88:d8:2d:76:aa:0a:35:a8:5f:a4:e3:93:6c:
ac:5c:60:86:f4:83:e8:36:48:cf:a3:06:20:81:f3:69:0e:56:
94:25:8c:85:d6:5a:9f:37:3f:1a:a9:94:05:ce:b8:ae:2a:b3:
c1:f0:5d:d7:5e:14:07:75:26:33:43:4c:cb:6b:d1:cd:04:1b:
30:25:4e:23:c9:93:01:28:39:22:50:df:46:5a:c4:62:43:bf:
dc:77:35:4a:b7:8f:6d:a8:46:df:dd:9b:33:35:b8:68:8c:50:
66:06:47:ed:b2:4b:cd:e1:0c:79:7e:2d:93:77:3a:d2:38:f6:
a3:f4:31:61:2d:fa:14:52:ff:b6:bf:e7:22:76:7c:dc:30:5d:
a9:ac:63:d8:0e:16:b5:aa:b6:6a:9c:8e:96:0a:e9:5c:b4:ee:
74:a4:5b:f4:9c:4a:10:ff:22:b5:8a:36:fb:54:46:c2:49:38:
fe:62:a5:61:52:01:1c:93:37:ae:b9:17:ee:63:cd:4e:e0:54:
33:e2:f1:84:d5:7c:39:7e:a9:9e:e1:aa:8a:60:62:70:7a:b7:
1e:d5:4a:93:bb:0a:a3:d5:09:a5:16:22:48:88:1c:57:9f:7a:
5c:13:ae:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3
QTQ3QTVGMDkwHhcNMjYwNzIyMTUyMzI2WhcNMjYwNzI5MTUyMzI2WjAYMRYwFAYD
VQQDEw02YTYwZTA2Zi1jYzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7BvSqhGJfny/wfi4/ekMt4TmjyBqEJjg6wXuudIdH7Ax9Lodb4eoG0FBmTR+
3BOKQTV0LVBIM8Mul7938fwIaGylaoe11yiea6kgyA0N2o5JXBRgGIA2l7TC1R63
2gg85RL88yM44iMNyTS7rPfuWskGsGnlcLifDg4nyF50HhQfUnxjw9rw/3B23e7a
YAyTIiR4lvMXFtGYEKRpSM7GlferOHdhlW2hybDAlQVnmnI6Q3DEDFHN/O9HWr7r
vm1FlhGhArsi1ly0fXTZEIkyH78mr2MkIETbL1FLer1N4ailyPzSjtb2R/8NrDbH
tNQkDqhH65PiMxyAomcjE87N0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKtdZYpF
NHRxbXtmNJaPx0EWPVtgMB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1
MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY
d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QkM3QS80QzUyOEY3ODQ1MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3
M2MxUndEbjRQM3Q2UjZYd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK6/dZ44XXVRFDLCFwALii+l8f9GbFL+I2C12qgo1qF+k45NsrFxghvSD6DZI
z6MGIIHzaQ5WlCWMhdZanzc/GqmUBc64riqzwfBd114UB3UmM0NMy2vRzQQbMCVO
I8mTASg5IlDfRlrEYkO/3Hc1SrePbahG392bMzW4aIxQZgZH7bJLzeEMeX4tk3c6
0jj2o/QxYS36FFL/tr/nInZ83DBdqaxj2A4Wtaq2apyOlgrpXLTudKRb9JxKEP8i
tYo2+1RGwkk4/mKlYVIBHJM3rrkX7mPNTuBUM+LxhNV8OX6pnuGqimBicHq3HtVK
k7sKo9UJpRYiSIgcV596XBOutQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:20 2026 by rpki-client