
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft
File: Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft (raw, json)
Hash identifier: NC5VgqctOxU9jG//5UIhzWo/maDAtRHKWrfTSCZqvuU=
Subject key identifier: E1:8B:9E:EF:70:E8:7D:A1:F9:AF:59:CB:7E:51:BD:C7:1B:68:2D:03
Authority key identifier: 52:5E:D5:31:69:81:A5:0B:DC:02:AC:5B:D3:C5:AF:D4:11:61:49:7F
Certificate issuer: /CN=A9159558/serialNumber=525ED5316981A50BDC02AC5BD3C5AFD41161497F
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft
Manifest number: 0B
Signing time: Wed 13 May 2026 09:18:07 +0000
Manifest this update: Wed 13 May 2026 09:18:06 +0000
Manifest next update: Wed 20 May 2026 09:18:06 +0000
Files and hashes: 1: Ul7VMWmBpQvcAqxb08Wv1BFhSX8.crl (hash: oqjPei8eqOEdp3FDYIYoeaqzsOs4RhrxolEMbLmj46c=)
2: C8CE775E435C11F18454B6E5B6833773.roa (hash: plcT4dsgJqUos2P4lyFZDl4QJQLWQP6vKlNauLCZCuI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.crl
rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159558, serialNumber=525ED5316981A50BDC02AC5BD3C5AFD41161497F
Validity
Not Before: May 13 09:18:06 2026 GMT
Not After : May 20 09:18:06 2026 GMT
Subject: CN=6a0441cf-27fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2b:d0:10:ad:94:73:66:d7:31:88:e1:43:65:
7a:03:83:f3:f0:a9:4d:7f:fe:fa:87:eb:be:3c:7f:
f0:aa:47:99:79:f4:e6:1b:4b:45:df:90:37:5c:a5:
0c:d8:ed:18:7f:5a:7f:10:40:f3:bd:96:35:4f:5c:
27:79:f2:a3:f6:8f:4a:49:7f:b1:d2:af:ad:1c:93:
01:1f:1d:bf:b3:8e:99:54:aa:8b:8a:28:47:82:43:
22:45:a8:3a:ff:e9:9e:9b:4a:93:59:ff:e1:a6:6c:
ae:41:4c:72:19:b2:78:40:14:c5:ad:ba:95:a0:da:
25:01:59:ac:ba:01:4d:15:08:df:ca:61:c3:67:9d:
b9:52:75:8f:e6:88:42:11:85:11:0f:50:1b:67:e8:
4c:e5:8b:76:bf:3f:1c:f4:fa:dd:92:14:92:bc:b5:
da:87:e2:6e:12:28:8a:84:d6:df:a7:bb:ab:de:dc:
73:fe:72:31:93:c6:bb:5b:6d:43:68:28:f1:43:ff:
e2:5d:0b:0b:c7:e1:b0:db:e7:71:1f:29:fa:bc:60:
0d:e6:2d:94:97:66:5c:7a:52:98:24:fb:fc:26:96:
67:16:1b:e0:01:32:a3:31:82:0a:ef:4b:dc:01:65:
93:58:eb:ac:eb:6d:f3:6c:64:bf:89:f1:3a:25:b7:
e8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8B:9E:EF:70:E8:7D:A1:F9:AF:59:CB:7E:51:BD:C7:1B:68:2D:03
X509v3 Authority Key Identifier:
keyid:52:5E:D5:31:69:81:A5:0B:DC:02:AC:5B:D3:C5:AF:D4:11:61:49:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c7:a0:b6:d7:d2:80:33:ea:c5:e5:4d:be:73:88:6b:bc:94:
7e:fa:24:27:39:8f:03:68:f6:21:6f:05:03:eb:ec:9a:af:81:
8e:1d:d4:bb:dc:2c:7e:e4:03:35:8d:98:49:7f:16:b0:5b:7f:
29:75:e5:f3:24:79:1f:87:4d:3e:c0:4a:6a:e1:51:f0:60:f6:
7a:ff:9d:33:20:19:e7:c0:d3:c0:8a:2b:ea:4c:fc:bd:70:1c:
7b:d0:1e:8b:a3:38:84:3d:86:6c:26:17:05:32:8f:51:e5:48:
88:4a:10:03:77:4d:0c:28:00:85:17:e1:38:ec:b5:4d:99:e0:
c5:dd:84:d8:67:1b:5a:3a:c4:28:fa:c9:56:06:6f:03:ca:88:
4e:70:0e:d3:8b:00:1e:1e:57:60:9e:bd:b6:33:70:5e:b0:a9:
42:f2:3c:16:99:3e:77:f3:48:a6:28:a3:1e:cf:75:ee:b5:f6:
40:75:7e:b4:63:90:e3:45:87:c6:a3:07:20:46:3e:ef:83:97:
1d:04:02:6d:6d:bb:07:02:99:3e:0d:ff:0b:94:ee:29:cb:8a:
c6:10:d8:f4:1e:fc:15:a4:94:34:54:bd:60:b9:50:22:59:a9:
73:a6:7d:f4:1a:21:76:da:6d:b5:e3:4a:49:84:7f:14:41:f3:
10:54:ce:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:41:05 2026 by rpki-client