
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
File: uH-tZU7EIXxlANDwaxm-MZ09rfc.mft (raw, json)
Hash identifier: el2q09SzOaaO2dTecu7WEXqGE75kR8vBHF3LDwfJnYI=
Subject key identifier: 32:D3:F3:04:6B:DE:38:9A:CF:00:C5:36:EF:55:0E:82:DF:7D:93:04
Authority key identifier: B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
Certificate issuer: /CN=A9155725/serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
Certificate serial: CF
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
Manifest number: C0
Signing time: Wed 25 Mar 2026 06:11:50 +0000
Manifest this update: Wed 25 Mar 2026 06:11:49 +0000
Manifest next update: Wed 01 Apr 2026 06:11:49 +0000
Files and hashes: 1: uH-tZU7EIXxlANDwaxm-MZ09rfc.crl (hash: Rfxd4yegymxzN4SDHn/8Cm2iVz1yiTqZ3uTUJST0X0Q=)
2: 753F0588084611F08BEB2E2DC4F9AE02.roa (hash: GvdeGH0sSCGiMmyFpeTDGYKnqtnBqjejK6ik65LVhK4=)
3: 7621BEA0084611F08BEB2E2DC4F9AE02.roa (hash: ekv9lLMJowy0tTt5Vgk8NN5c2QvrR8UHcRzo+mWEFnI=)
4: 75A4B2D4084611F08BEB2E2DC4F9AE02.roa (hash: YxGLaTIXF5/4zegk0ebGTbG3KkMe3GF8/cFOY/M/JZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl
rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155725, serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
Validity
Not Before: Mar 25 06:11:49 2026 GMT
Not After : Apr 1 06:11:49 2026 GMT
Subject: CN=69c37ca6-915f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:28:ed:64:f1:a7:f8:33:52:47:56:02:74:8f:
d3:3b:39:c8:8d:ec:61:a4:d6:f9:ef:f6:d7:ba:09:
a8:0d:94:3c:9c:dc:64:28:77:e1:29:3d:0e:9a:ea:
a8:47:77:2f:23:cf:4c:54:30:01:47:73:7e:94:57:
1f:97:24:2f:d0:be:09:aa:f0:3a:71:b1:b0:b3:8b:
1b:16:0f:31:0e:23:db:c1:2b:6e:4b:9b:19:39:d9:
07:68:d3:ec:78:b7:7a:4d:aa:89:08:aa:f6:dc:15:
2d:50:11:0a:9f:92:64:ee:42:42:f7:9a:eb:09:fd:
fd:b6:4a:fc:ad:fe:93:e4:c7:91:bc:c7:f9:61:a6:
95:10:fb:e9:15:c6:bf:5c:74:23:16:07:91:05:8b:
30:2b:d4:9d:03:e7:7e:7b:db:79:22:53:3a:b7:01:
49:55:3c:7b:48:98:54:db:20:4f:4f:bc:43:fb:55:
77:90:0c:18:b8:50:9f:ac:15:85:3a:15:fc:63:a6:
20:a5:b6:eb:d9:6a:db:53:e9:bd:9f:0e:64:de:7d:
b3:97:92:a6:39:8a:32:38:d4:01:00:26:ab:83:73:
17:0b:c0:53:19:e5:4f:10:3e:0f:f6:b6:ad:bb:0c:
ec:3a:06:cf:b7:bf:65:d4:87:fc:21:4d:83:18:29:
5f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D3:F3:04:6B:DE:38:9A:CF:00:C5:36:EF:55:0E:82:DF:7D:93:04
X509v3 Authority Key Identifier:
keyid:B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:42:7f:e3:6e:69:72:5d:14:57:e5:27:c7:4d:f6:af:8b:70:
25:75:cb:ae:d4:b2:07:26:fc:46:41:31:28:01:16:c5:5a:8f:
7f:76:34:6b:00:15:ca:89:32:5e:e3:4b:57:1d:6b:96:eb:5e:
39:df:1a:eb:67:7c:4b:3c:8f:04:10:9e:cf:33:9b:e2:d8:f1:
3c:78:a5:6f:62:d6:7b:b6:29:ea:52:fc:b0:b3:34:2c:57:ab:
6f:56:1e:6a:95:65:e5:ee:f7:9e:26:77:b8:8a:bc:70:04:bb:
22:89:ff:92:36:ae:62:7e:d6:54:68:80:ad:98:8f:7c:7b:51:
27:05:88:2e:80:28:bd:62:ac:51:01:89:63:5e:bf:3f:2f:9d:
22:2c:af:f8:36:5d:dd:39:c0:37:da:22:d4:41:19:42:d0:19:
a9:86:cd:49:ec:96:21:80:83:aa:2b:c0:4e:93:60:86:04:00:
b5:3e:a3:8d:bc:53:e0:c5:2e:9e:8f:8c:dc:e3:63:e8:47:2a:
a1:de:f6:23:b8:fc:14:09:d8:b9:6d:31:b6:0d:1b:c8:9a:4b:
11:2c:f3:29:26:fb:f7:02:c1:e2:45:21:aa:55:0b:29:14:8e:
9d:64:08:56:57:69:4a:9b:5f:11:52:02:19:5a:57:2a:4e:1a:
55:da:c7:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU3MjUxMTAvBgNVBAUTKEI4N0ZBRDY1NEVDNDIxN0M2NTAwRDBGMDZCMTlCRTMx
OUQzREFERjcwHhcNMjYwMzI1MDYxMTQ5WhcNMjYwNDAxMDYxMTQ5WjAYMRYwFAYD
VQQDEw02OWMzN2NhNi05MTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3CjtZPGn+DNSR1YCdI/TOznIjexhpNb57/bXugmoDZQ8nNxkKHfhKT0Omuqo
R3cvI89MVDABR3N+lFcflyQv0L4JqvA6cbGws4sbFg8xDiPbwStuS5sZOdkHaNPs
eLd6TaqJCKr23BUtUBEKn5Jk7kJC95rrCf39tkr8rf6T5MeRvMf5YaaVEPvpFca/
XHQjFgeRBYswK9SdA+d+e9t5IlM6twFJVTx7SJhU2yBPT7xD+1V3kAwYuFCfrBWF
OhX8Y6Ygpbbr2WrbU+m9nw5k3n2zl5KmOYoyONQBACarg3MXC8BTGeVPED4P9rat
uwzsOgbPt79l1If8IU2DGClfawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDLT8wRr
3jiazwDFNu9VDoLffZMEMB8GA1UdIwQYMBaAFLh/rWVOxCF8ZQDQ8GsZvjGdPa33
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTcyNS84MDFCQ0FBNjA4
M0ExMUYwOUZGMUQwNzRDNEY5QUUwMi91SC10WlU3RUlYeGxBTkR3YXhtLU1aMDly
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3VILXRaVTdFSVh4bEFORHdheG0tTVowOXJmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTcyNS84MDFCQ0FBNjA4M0ExMUYwOUZGMUQwNzRDNEY5QUUwMi91SC10WlU3RUlY
eGxBTkR3YXhtLU1aMDlyZmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqkJ/425pcl0UV+Unx032r4twJXXLrtSyByb8RkExKAEWxVqPf3Y0awAVyoky
XuNLVx1rluteOd8a62d8SzyPBBCezzOb4tjxPHilb2LWe7Yp6lL8sLM0LFerb1Ye
apVl5e73niZ3uIq8cAS7Ion/kjauYn7WVGiArZiPfHtRJwWILoAovWKsUQGJY16/
Py+dIiyv+DZd3TnAN9oi1EEZQtAZqYbNSeyWIYCDqivATpNghgQAtT6jjbxT4MUu
no+M3ONj6Ecqod72I7j8FAnYuW0xtg0byJpLESzzKSb79wLB4kUhqlULKRSOnWQI
VldpSptfEVICGVpXKk4aVdrH0g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:02 2026 by rpki-client