
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
File: ujlCdcT_j47yNHSaNvKhkTknlVs.mft (raw, json)
Hash identifier: q7XqshnaywiSFZ7IzGIoBtHNeEYp0+hNPHqWdj42Y+I=
Subject key identifier: 7F:DB:DE:3C:1C:21:62:2A:1B:57:DD:28:2E:F5:CF:F7:03:A0:3F:76
Authority key identifier: BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B
Certificate issuer: /CN=A9158E7B/serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B
Certificate serial: 3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
Manifest number: 39
Signing time: Wed 25 Mar 2026 07:46:17 +0000
Manifest this update: Wed 25 Mar 2026 07:46:16 +0000
Manifest next update: Wed 01 Apr 2026 07:46:16 +0000
Files and hashes: 1: ujlCdcT_j47yNHSaNvKhkTknlVs.crl (hash: LGXVUHa+FDzsy1QcWhPBeijM3n2Dca1ySRY7Du59wr4=)
2: B2897A041D1C11F19ECA08BE103D8C67.roa (hash: VQAnAshqNaJSS0rUq9sVC9WDtf0AoAAQTcJNc9J4oxg=)
3: B1921BE21D1C11F19ECA08BE103D8C67.roa (hash: WobrnjAcJid+qQ3zmSqPJbNrzTm76HPt3Dd40mnXzdk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl
rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:46:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E7B, serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B
Validity
Not Before: Mar 25 07:46:16 2026 GMT
Not After : Apr 1 07:46:16 2026 GMT
Subject: CN=69c392c9-320a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:e2:4e:b1:ec:b1:b7:27:10:ff:ad:27:9e:
93:ad:1d:56:1d:91:e5:a2:cc:40:77:38:c3:fe:95:
10:07:41:b6:2e:ef:5e:71:ed:46:97:e8:37:32:7f:
0e:ba:7c:27:33:49:cb:2f:81:bf:41:0e:d5:ef:91:
fd:05:7f:14:36:3c:0a:57:36:10:4c:80:02:ac:a2:
b2:b4:ac:59:9b:07:5b:41:81:3d:a3:91:37:b5:ef:
c2:c6:3f:b2:7b:74:4a:11:74:b2:e6:19:0f:3d:c4:
d9:7b:9f:f6:47:b5:0c:a8:ff:8d:2e:ac:4d:0b:e4:
29:99:97:60:95:19:71:d6:40:ad:fd:d9:56:50:4b:
d4:f3:a9:e8:7b:d4:62:7c:e9:18:33:cc:63:e4:c1:
02:fb:13:e5:1e:db:d6:e3:0c:e2:93:a9:77:6b:23:
07:97:1c:14:1d:52:c4:31:87:f3:96:27:93:8f:8c:
3f:75:b7:fe:06:a6:ef:9a:44:4e:5e:60:f1:cf:19:
f9:b0:67:df:93:d0:b9:00:4b:f6:17:ae:39:38:4d:
2f:2f:2d:93:da:de:c9:ce:79:f5:d9:d2:9d:96:ef:
79:d1:96:b6:ef:db:69:0e:9e:b2:a2:cd:e2:42:13:
07:37:dc:91:d9:7e:72:10:be:24:f6:9e:ab:9c:17:
eb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DB:DE:3C:1C:21:62:2A:1B:57:DD:28:2E:F5:CF:F7:03:A0:3F:76
X509v3 Authority Key Identifier:
keyid:BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:49:fb:b3:3a:7c:fe:db:9e:d5:14:d6:d5:2d:c0:3c:b5:13:
77:dc:fb:c1:22:fb:64:0c:8f:e6:a3:85:30:1e:62:49:49:7d:
38:8b:39:bf:0e:c7:29:a5:41:c5:8d:de:7f:07:85:fc:8b:35:
08:94:c5:4e:51:0c:27:d9:71:1d:9f:15:f7:2a:6b:64:49:43:
fe:0b:76:d2:05:00:ba:56:3c:12:a7:56:66:04:c3:8d:14:0d:
53:11:0a:6d:98:91:83:0d:c0:bd:ec:ea:1e:dc:c0:02:9e:cb:
d3:db:9c:0f:b5:0c:d1:86:cc:c3:fe:fa:9a:9b:6c:d2:42:9e:
f0:15:1b:3a:a6:c5:b5:d0:1b:c3:8c:b6:84:cc:2f:67:4d:71:
c1:fa:72:ae:53:58:91:f9:8d:5f:30:78:c5:0d:4d:95:02:27:
e1:e7:d2:a1:89:dd:21:1a:d9:ad:e4:1c:27:c5:21:ea:e8:3c:
cd:29:69:df:67:80:0c:89:63:3d:dc:45:17:9f:51:f1:98:20:
7f:f5:92:a3:a1:45:77:81:42:51:99:73:5a:ab:96:9a:3f:82:
d1:79:55:6a:90:b7:6e:69:0e:a0:d8:91:22:9f:7b:f3:a1:dc:
e1:82:71:2b:c2:90:07:24:bd:7c:5c:22:2a:41:12:b7:b1:57:
9a:7d:d8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:12 2026 by rpki-client