
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
File: -uYgHGZjkjQL7hOO1BeZuobapog.mft (raw, json)
Hash identifier: 5QxOmMEjJ5qTRLMydfmtCf/V3HRh7y4uQobS8Uu/Bx8=
Subject key identifier: 34:85:E3:51:4C:1A:CB:25:39:F0:A1:BF:F6:95:A5:3C:47:0A:20:22
Authority key identifier: FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88
Certificate issuer: /CN=A9158840/serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688
Certificate serial: 0CDB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
Manifest number: 0CC8
Signing time: Tue 24 Mar 2026 18:15:56 +0000
Manifest this update: Tue 24 Mar 2026 18:15:56 +0000
Manifest next update: Tue 31 Mar 2026 18:15:56 +0000
Files and hashes: 1: -uYgHGZjkjQL7hOO1BeZuobapog.crl (hash: sIVR7PXwDEOnuFX7P+w9tlQB76zmWkLif532E0N9NTc=)
2: 513421B0E3AB11EF9C68465CC4F9AE02.roa (hash: D0GEA8Hwvgy327FVQRo8UrdiZ6su6qYeHtaXvrPJkes=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl
rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:15:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3291 (0xcdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158840, serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688
Validity
Not Before: Mar 24 18:15:56 2026 GMT
Not After : Mar 31 18:15:56 2026 GMT
Subject: CN=69c2d4dc-dc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:84:d4:42:4d:55:56:82:3f:e5:95:77:25:
a6:12:97:20:57:0c:c7:d0:1b:06:91:58:fb:fd:fe:
ab:b9:3e:66:65:70:2f:92:f8:54:e3:61:39:05:12:
1d:da:7c:db:40:86:97:bf:a4:90:35:db:df:31:03:
d4:0c:fe:2f:8b:de:7e:39:cb:2b:e2:9e:18:aa:96:
3b:10:b8:14:bd:20:99:3d:55:94:be:99:62:01:35:
0b:7a:c9:61:93:a7:af:5e:0d:56:f8:e0:be:43:30:
5d:aa:9d:96:46:36:b5:64:52:bf:0f:60:34:c4:7b:
a2:de:64:b9:08:33:a1:01:79:07:23:96:cf:63:80:
1b:56:69:51:91:de:be:61:43:20:eb:bf:cf:ca:d4:
cd:8c:ee:80:d9:ef:0d:5d:f4:e5:6c:fa:15:fb:e8:
6d:59:6c:01:65:57:2a:e5:8f:c1:a0:bb:51:24:20:
77:a2:d9:53:0d:9a:b5:72:86:2d:60:32:c4:5b:52:
56:14:cc:e4:fe:71:cc:04:e2:fb:9c:ac:7d:e2:3c:
ba:db:3e:d0:fb:65:13:61:b7:7f:04:15:96:97:a5:
87:57:72:64:5c:86:fb:f6:e5:94:cc:9d:e7:3b:12:
c2:0e:ce:b7:d6:82:b3:d5:9d:6e:22:2d:f5:1a:1f:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:85:E3:51:4C:1A:CB:25:39:F0:A1:BF:F6:95:A5:3C:47:0A:20:22
X509v3 Authority Key Identifier:
keyid:FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:df:ee:35:e1:a6:d5:9e:a9:d6:1d:a0:dd:93:88:81:28:e1:
4e:a4:c0:bf:c2:30:86:ce:bd:6a:63:be:1d:7c:18:9d:bf:d2:
cf:93:9b:7b:a8:bd:3a:ef:19:58:b0:12:41:d7:de:21:be:88:
3f:54:e0:92:8a:a7:47:b6:02:f2:28:30:54:22:cc:44:2f:8c:
44:3b:56:7a:70:63:f8:cb:bf:06:ce:d1:ff:5d:a8:66:f4:f2:
33:b2:18:ac:6e:cc:1e:14:b3:a4:59:8f:bc:3d:32:c8:d3:4b:
b0:61:09:93:13:18:30:b3:b6:7f:8c:dd:04:99:38:d3:81:cd:
d0:bb:91:ca:ab:ea:db:f4:27:db:aa:e4:93:d3:08:0d:9e:5e:
e1:d9:e2:a2:d4:46:14:c3:4f:35:7b:39:5b:c7:40:09:ab:62:
cb:2a:1d:95:49:32:b9:47:40:1e:ad:9e:58:a7:a1:29:35:26:
79:b6:96:7c:25:b2:05:69:2d:90:53:18:83:46:fe:1b:7a:d4:
11:01:d3:81:fc:de:38:ea:19:7c:06:d3:1a:3c:f9:b9:49:69:
71:51:22:74:12:e5:18:b0:2d:b1:6f:26:58:b6:6a:d5:0e:5c:
b8:fb:28:a7:6f:bf:03:87:0c:02:1d:ec:ce:b4:3d:0d:d4:61:
cb:04:00:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:59:04 2026 by rpki-client