
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
File: UyQGWmE9LRB4F5xiFjcczGp3UHo.mft (raw, json)
Hash identifier: 1dWzObodzRSbKcIiGGYtcXIaiO4y6nFR2fc7KaGC1JE=
Subject key identifier: A7:B3:E2:6A:1C:89:F2:B6:16:32:A7:96:AD:3E:A8:51:21:86:74:4F
Authority key identifier: 53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A
Certificate issuer: /CN=A9158EC4/serialNumber=5324065A613D2D1078179C6216371CCC6A77507A
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
Manifest number: 017C
Signing time: Wed 25 Mar 2026 03:53:41 +0000
Manifest this update: Wed 25 Mar 2026 03:53:41 +0000
Manifest next update: Wed 01 Apr 2026 03:53:41 +0000
Files and hashes: 1: UyQGWmE9LRB4F5xiFjcczGp3UHo.crl (hash: 7p5QNnIP6kDEO1bP8f8VBZU2CLTPifj0ifLdZbUL2uQ=)
2: 2805F2D6E5B511EEB34EF35AC4F9AE02.roa (hash: xQmsVP4QLFQ4i3YXyMm0tpulZSIAm9nn/IhZaNrB5cU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl
rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:53:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158EC4, serialNumber=5324065A613D2D1078179C6216371CCC6A77507A
Validity
Not Before: Mar 25 03:53:41 2026 GMT
Not After : Apr 1 03:53:41 2026 GMT
Subject: CN=69c35c45-cc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:41:e9:40:ad:36:8e:c1:76:5f:83:43:0c:df:
a4:f0:e7:fe:25:45:96:fa:39:63:cb:34:41:d2:a6:
f2:df:07:34:fb:6f:d8:42:a4:26:f0:aa:42:21:af:
44:cd:c8:ea:6a:b9:41:40:de:36:f6:ff:45:5a:36:
d6:bd:0e:c1:14:6f:50:f5:b0:26:66:e5:39:ad:f9:
c2:d0:a2:db:24:cd:13:b5:09:ae:16:a8:9c:fd:2c:
4a:f7:46:e1:9c:95:60:6c:9e:50:4e:e3:26:25:2f:
04:cc:bf:bf:94:3f:7d:c9:36:29:3f:4a:5a:98:d5:
dc:13:0c:ba:eb:d2:64:29:55:f9:a2:d5:fb:78:d6:
ed:38:39:ea:b7:64:18:91:25:11:20:20:4c:1e:4a:
46:e3:73:f9:4e:11:e3:6a:a7:56:76:6f:48:8c:9c:
5e:dd:b3:29:1a:aa:26:92:ad:69:04:37:2d:ff:d3:
7b:5b:37:88:ed:9e:ba:89:a5:5e:6e:49:fa:47:76:
4a:f5:0a:02:55:5e:65:c4:a2:e0:9b:d1:df:eb:ba:
f3:8d:f4:e2:ff:a3:b5:29:09:bb:7d:12:4c:84:3a:
c2:63:c8:a6:91:c8:e2:69:2d:ea:f1:2a:45:da:b4:
9e:11:a5:73:e7:ff:44:9c:ca:68:0a:05:1e:54:14:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B3:E2:6A:1C:89:F2:B6:16:32:A7:96:AD:3E:A8:51:21:86:74:4F
X509v3 Authority Key Identifier:
keyid:53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:77:57:6c:4c:ed:ce:53:8f:e7:55:d4:a1:1c:7b:b6:53:ea:
7e:74:44:87:fb:7c:9a:e8:e1:37:a3:8e:37:cf:4a:be:36:dd:
7d:3d:d8:06:cc:68:99:56:1f:ac:a9:ab:02:02:c8:99:52:4b:
5f:e0:ec:78:98:a6:f1:b2:a0:5a:e1:1b:1d:e0:47:56:e9:73:
25:96:91:2b:ca:a9:ba:5a:0e:d1:2a:1c:92:36:07:01:58:5c:
e6:98:15:3f:a4:6e:25:51:f5:35:33:b2:be:f0:35:84:62:56:
12:ea:02:f1:23:a2:97:96:46:c0:1e:86:bb:0f:05:28:7d:2e:
b6:88:50:3c:56:87:07:c6:c4:d8:80:11:39:ca:06:c0:2c:6d:
69:b9:3a:ff:53:35:dc:7b:3b:33:39:3d:f9:9e:6e:d3:f4:fb:
bc:a4:f6:19:af:21:f9:6e:66:81:75:3c:18:89:a9:87:dc:2a:
de:89:56:2d:bb:96:1d:54:ec:95:1e:74:79:58:ac:71:89:10:
4c:6b:4a:60:4f:7b:fd:18:ce:08:73:6d:50:6d:00:0b:6d:40:
5b:08:f5:5d:31:1c:14:41:bf:a7:cb:5c:09:df:39:ce:9f:ef:
c9:38:98:45:57:96:4b:0c:66:ab:21:db:89:0d:e7:49:3a:0f:
e8:80:38:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:03:56 2026 by rpki-client