
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
File: UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft (raw, json)
Hash identifier: bNVfMCQzxUgXfPaRaujBHSDj/kpm9Ot/tPx352qHnPY=
Subject key identifier: BA:18:16:27:2C:AF:1D:88:33:90:32:BC:83:DB:DD:E2:D4:B6:69:43
Authority key identifier: 51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4
Certificate issuer: /CN=A9160DDD/serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4
Certificate serial: 5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
Manifest number: 55
Signing time: Wed 25 Mar 2026 07:25:01 +0000
Manifest this update: Wed 25 Mar 2026 07:25:00 +0000
Manifest next update: Wed 01 Apr 2026 07:25:00 +0000
Files and hashes: 1: UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl (hash: CxEnFQ31PcLdVIqcBDVo0+w9s47OgP2CyPfITLVKKSU=)
2: 93006FB6057B11F1B03D8E1E363D8C67.roa (hash: Ok/X0E1tTCXS1TdEoBhiZ8gZv8rHKU5B+uV52W/kI2w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl
rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160DDD, serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4
Validity
Not Before: Mar 25 07:25:00 2026 GMT
Not After : Apr 1 07:25:00 2026 GMT
Subject: CN=69c38dcc-6ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5b:d7:1c:8c:c9:39:51:6f:64:bb:0b:ee:19:
21:6e:39:0e:c3:7d:b9:a3:07:d7:9a:3f:be:99:77:
13:63:f0:89:38:64:88:3e:e5:c8:8a:68:fb:b6:f0:
b8:1a:5a:e0:60:22:a4:5f:28:86:e2:40:05:f7:dd:
7f:2f:fb:ee:c5:32:32:f3:9d:0e:57:7d:6a:69:df:
8f:da:09:0f:74:07:c3:8f:53:d7:03:28:92:3d:98:
be:ab:99:34:80:77:d6:c9:07:41:8c:e1:79:5e:22:
49:a1:31:00:b3:49:af:58:47:f6:0c:93:06:77:73:
e2:d0:01:fd:90:fc:62:a5:b9:dc:44:cd:01:32:b1:
8d:fb:5d:28:2d:38:b9:97:39:7e:c4:33:98:49:ee:
1f:fb:de:a7:6a:12:c9:a8:fd:23:63:e7:5a:5e:9d:
55:34:e8:8f:37:fa:fb:6e:40:8a:56:2f:26:b9:eb:
db:52:1a:3d:89:e0:ed:67:4e:d7:0a:f2:83:6e:e1:
6f:62:34:bb:62:65:9a:df:e9:83:0b:3a:89:75:8e:
21:a8:2c:34:98:4b:e0:87:a3:f9:c0:f8:48:c1:65:
5e:1f:9e:97:f9:bd:16:2d:a0:79:bb:c7:81:c9:65:
db:ec:25:e9:e9:2e:44:67:07:c5:e7:a0:50:4f:24:
9f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:18:16:27:2C:AF:1D:88:33:90:32:BC:83:DB:DD:E2:D4:B6:69:43
X509v3 Authority Key Identifier:
keyid:51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bb:3b:9b:9c:48:21:f0:63:b4:1e:0b:51:4b:6e:08:a8:4d:
6c:8c:df:96:9e:f1:96:ac:95:d4:43:eb:83:41:21:b0:c2:a9:
bc:80:4e:17:90:4a:32:2d:91:ff:3b:18:77:5f:8a:c7:bf:79:
44:de:df:dc:f2:6d:db:45:d9:6e:08:b2:f5:24:be:2e:e2:8e:
63:e8:48:7e:ff:59:58:dd:87:eb:a2:e1:b5:9e:61:57:32:43:
21:3a:b4:76:27:be:04:d5:de:13:0b:76:68:4a:bf:59:68:f9:
62:96:50:70:86:41:47:93:3e:6a:8d:b2:b2:fa:d7:8c:cc:c6:
08:ee:97:a8:7e:b1:22:20:99:eb:50:74:ca:1a:bb:36:a9:13:
76:fb:86:cf:24:23:19:95:39:ce:79:eb:05:cf:04:a5:da:f4:
74:e5:33:09:f8:f0:7a:7c:24:25:c2:19:34:bb:2f:1d:26:0c:
d8:df:21:e6:04:f4:e2:19:20:ee:f3:4c:68:aa:61:58:00:37:
26:01:3d:6d:b3:04:5d:37:45:a5:c0:49:2f:87:3c:d0:d6:0d:
e7:12:1a:62:47:36:4f:59:1b:39:b6:a1:51:58:a2:02:7a:0c:
25:33:ee:2b:1f:7e:01:ce:57:25:80:8e:bd:be:6f:b4:33:bd:
2f:f1:07:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:47 2026 by rpki-client