
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
File: uHMcMIhjyygE4HbVjowHFZtOXxk.mft (raw, json)
Hash identifier: OU0j7TJQouhOsbol+AS27V8aXApmoLr5G8m30d2RQBg=
Subject key identifier: 69:69:F0:4A:9C:7F:52:C1:C4:41:37:33:28:3A:63:CC:86:2A:EA:C8
Authority key identifier: B8:73:1C:30:88:63:CB:28:04:E0:76:D5:8E:8C:07:15:9B:4E:5F:19
Certificate issuer: /CN=A9164663/serialNumber=B8731C308863CB2804E076D58E8C07159B4E5F19
Certificate serial: 08AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
Manifest number: 1B60
Signing time: Tue 24 Mar 2026 16:56:51 +0000
Manifest this update: Tue 24 Mar 2026 16:56:50 +0000
Manifest next update: Tue 31 Mar 2026 16:56:50 +0000
Files and hashes: 1: uHMcMIhjyygE4HbVjowHFZtOXxk.crl (hash: 6NiSa648Ipao1VDVlBkNreasibUdE4R7ng1t0PJ/Twk=)
2: 3D626CDC065111F0BFE43624C4F9AE02.roa (hash: +X/vGvhbD2HPX2+2Y6FHbu+u6Ala2ziVuzhDCcUV8+A=)
3: 7BB2BC009FFA11ECA13C2839C4F9AE02.roa (hash: UQulzcPFXWom5N835V23GriHroThL5pVrJfPuxxBalU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.crl
rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2220 (0x8ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164663, serialNumber=B8731C308863CB2804E076D58E8C07159B4E5F19
Validity
Not Before: Mar 24 16:56:50 2026 GMT
Not After : Mar 31 16:56:50 2026 GMT
Subject: CN=69c2c252-bd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:a4:2b:6e:54:bc:77:5a:cd:a8:96:ee:10:
57:3b:4b:b9:51:ac:f8:48:18:4e:0b:02:01:77:99:
ae:24:d2:1b:92:a4:dc:65:92:e9:f7:e0:a7:02:d9:
99:cf:b1:ef:e0:6c:72:90:cb:63:92:a4:6b:4e:a8:
88:d5:95:62:8a:bf:3f:fa:f0:c0:7f:8f:b7:84:e2:
15:87:2e:3b:cb:c7:5d:9a:27:75:7f:ed:11:cb:65:
b8:60:81:27:3c:01:80:0c:d7:27:09:b3:f2:64:e9:
17:24:2c:e7:87:28:9f:10:21:df:0e:28:ff:f5:90:
f5:12:22:ce:d9:74:72:ca:eb:5e:e8:2a:43:f2:a5:
98:ea:82:8c:70:5d:30:85:34:3f:ce:a2:79:b6:a4:
d6:e7:d2:32:5c:f1:6f:06:99:d3:ac:38:53:82:e9:
66:39:fd:0e:0b:29:cc:ab:f8:29:45:5e:66:78:88:
cc:b7:41:31:84:b1:e4:1d:15:cf:fc:61:25:d8:c4:
8e:67:1f:a3:20:0c:5b:c7:ae:07:d6:1b:e2:93:4c:
ec:0b:a9:d9:70:13:33:6b:50:57:28:1d:a6:af:2e:
9c:f3:2f:72:7b:c3:c7:56:d4:fe:58:33:51:e2:a0:
ef:49:0c:ad:bb:cf:a9:29:2a:cf:ff:da:08:5d:b2:
4e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:69:F0:4A:9C:7F:52:C1:C4:41:37:33:28:3A:63:CC:86:2A:EA:C8
X509v3 Authority Key Identifier:
keyid:B8:73:1C:30:88:63:CB:28:04:E0:76:D5:8E:8C:07:15:9B:4E:5F:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:e3:d2:42:9b:d6:d1:d3:95:a7:59:7a:bb:be:6e:fa:92:a2:
ff:95:41:25:ec:fe:2a:64:c6:7a:37:88:16:50:11:57:99:e1:
b5:06:04:52:60:b1:81:f9:1b:d0:11:1d:90:44:da:11:fb:11:
eb:7e:10:cb:f7:0e:ed:b5:d9:64:f9:e6:83:33:a7:64:fd:e1:
fb:7a:15:3c:49:45:18:ae:88:b2:b6:64:94:8a:47:9b:4e:f8:
c1:fe:11:80:b5:47:c3:ee:b7:64:a8:af:04:ec:d6:5a:00:a2:
fb:0f:a7:3a:8b:ee:86:69:df:c8:d0:f9:be:18:ce:2b:64:e1:
cc:1a:06:bd:45:f3:96:dd:a8:fa:46:f5:70:e2:a2:25:10:3c:
95:bd:62:36:ea:01:31:f4:33:65:ce:c2:db:c2:f0:fd:28:9b:
34:dd:c3:83:3a:b9:d6:17:b4:d5:00:ca:6b:f6:16:0c:53:bc:
71:89:6a:02:2d:e3:35:02:5c:ad:54:83:cd:73:cf:e1:2d:16:
92:5d:f0:ca:33:49:3c:af:45:66:aa:d2:91:fd:98:42:7f:26:
2d:9b:52:11:b2:aa:c3:55:73:50:c9:46:d4:6a:ab:6a:0d:05:
0c:cc:6e:9a:ba:9b:f7:7f:b2:1d:b2:9f:49:d8:ba:5b:c5:91:
b4:9d:44:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQ2NjMxMTAvBgNVBAUTKEI4NzMxQzMwODg2M0NCMjgwNEUwNzZENThFOEMwNzE1
OUI0RTVGMTkwHhcNMjYwMzI0MTY1NjUwWhcNMjYwMzMxMTY1NjUwWjAYMRYwFAYD
VQQDEw02OWMyYzI1Mi1iZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp2OkK25UvHdazaiW7hBXO0u5Uaz4SBhOCwIBd5muJNIbkqTcZZLp9+CnAtmZ
z7Hv4GxykMtjkqRrTqiI1ZViir8/+vDAf4+3hOIVhy47y8ddmid1f+0Ry2W4YIEn
PAGADNcnCbPyZOkXJCznhyifECHfDij/9ZD1EiLO2XRyyute6CpD8qWY6oKMcF0w
hTQ/zqJ5tqTW59IyXPFvBpnTrDhTgulmOf0OCynMq/gpRV5meIjMt0ExhLHkHRXP
/GEl2MSOZx+jIAxbx64H1hvik0zsC6nZcBMza1BXKB2mry6c8y9ye8PHVtT+WDNR
4qDvSQytu8+pKSrP/9oIXbJOlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGlp8Eqc
f1LBxEE3Myg6Y8yGKurIMB8GA1UdIwQYMBaAFLhzHDCIY8soBOB21Y6MBxWbTl8Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY2My8xNEVBQTlGQURB
NzkxMUU4OUI5NUE2NzJDNEY5QUUwMi91SE1jTUloanl5Z0U0SGJWam93SEZadE9Y
eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VITWNNSWhqeXlnRTRIYlZqb3dIRlp0T1h4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDY2My8xNEVBQTlGQURBNzkxMUU4OUI5NUE2NzJDNEY5QUUwMi91SE1jTUloanl5
Z0U0SGJWam93SEZadE9YeGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABePSQpvW0dOVp1l6u75u+pKi/5VBJez+KmTGejeIFlARV5nhtQYEUmCxgfkb
0BEdkETaEfsR634Qy/cO7bXZZPnmgzOnZP3h+3oVPElFGK6IsrZklIpHm074wf4R
gLVHw+63ZKivBOzWWgCi+w+nOovuhmnfyND5vhjOK2ThzBoGvUXzlt2o+kb1cOKi
JRA8lb1iNuoBMfQzZc7C28Lw/SibNN3Dgzq51he01QDKa/YWDFO8cYlqAi3jNQJc
rVSDzXPP4S0Wkl3wyjNJPK9FZqrSkf2YQn8mLZtSEbKqw1VzUMlG1Gqrag0FDMxu
mrqb93+yHbKfSdi6W8WRtJ1EQA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:56:00 2026 by rpki-client