
$ rpki-client -vvf rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
File: UBJV6QF6Y3iSbTaute_xnEXWV04.mft (raw, json)
Hash identifier: mKpykWfelF2F9nHScKFtgYinQcPEJHc8xgkKyUQgV98=
Subject key identifier: 84:A8:15:59:04:D1:34:90:F2:97:D3:4E:8C:40:D2:84:72:9E:8C:FE
Authority key identifier: 50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E
Certificate issuer: /CN=A916523A/serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
Manifest number: D3
Signing time: Thu 23 Jul 2026 08:34:11 +0000
Manifest this update: Thu 23 Jul 2026 08:34:10 +0000
Manifest next update: Thu 30 Jul 2026 08:34:10 +0000
Files and hashes: 1: UBJV6QF6Y3iSbTaute_xnEXWV04.crl (hash: /vs1f8UAWdt4zenoYOsI9MQ29bz4PaS791zk5SeZlKQ=)
2: 6654FB224CDE11F092AD8884C4F9AE02.roa (hash: B85MlMm7o4uN4tVuGVAmz5ioCuak2DpXQBbCGVh8f/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl
rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916523A, serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E
Validity
Not Before: Jul 23 08:34:10 2026 GMT
Not After : Jul 30 08:34:10 2026 GMT
Subject: CN=6a61d203-049f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2f:02:23:70:3f:c9:fd:3b:c6:b4:08:b9:df:
1f:73:3a:dc:86:95:ac:f0:40:a0:30:0d:de:23:b1:
16:19:0c:4d:c9:5f:db:4f:f0:12:30:73:20:6b:bd:
12:22:7c:4f:61:67:ed:a6:0f:9f:8f:80:65:d2:22:
38:bb:d8:ab:d2:6d:5a:c4:6d:ba:8b:9a:bc:0b:5e:
25:88:5b:31:03:af:cf:06:3d:cf:f0:42:a8:75:0b:
32:3f:3e:14:e8:1a:38:c7:99:86:bc:83:45:83:0f:
5f:f6:fb:7b:74:40:c2:57:a5:53:f9:dc:65:c6:37:
cd:2b:34:74:37:ed:65:d9:ae:44:1a:e0:93:79:1b:
1e:96:e8:5f:51:b8:da:f4:a5:50:c0:ca:e9:a6:c0:
13:43:bb:4a:5f:53:3b:eb:0b:f3:a5:0e:21:0d:7a:
1b:e3:44:5a:36:15:eb:95:fd:49:33:a5:4c:f2:87:
c2:0b:a4:4f:cd:04:4a:c3:e0:48:03:0a:61:5d:62:
bf:a4:b1:27:4b:88:34:b4:c2:25:54:b8:b0:bd:19:
1b:10:52:b1:dc:11:e2:ba:14:ee:65:11:3c:60:64:
a0:23:cb:c5:07:58:7d:f1:fe:11:f0:7c:a9:fa:7c:
c0:c3:88:0d:87:1d:08:a0:d1:a0:08:b3:9e:ff:b5:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A8:15:59:04:D1:34:90:F2:97:D3:4E:8C:40:D2:84:72:9E:8C:FE
X509v3 Authority Key Identifier:
keyid:50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:54:e9:bd:95:6f:b5:fc:4c:5f:7e:76:af:79:d5:9f:40:d8:
20:6c:70:51:86:3b:c5:a0:44:d1:e4:1f:58:04:59:a9:ae:02:
4b:71:69:a0:d7:1f:b7:13:8d:53:75:de:b6:d5:53:86:66:bb:
b5:cd:f8:e7:d8:66:85:ef:b7:c8:2f:eb:ce:b0:4e:bc:25:d0:
64:c0:b1:18:99:35:aa:9a:86:98:17:32:27:a3:6a:63:b9:5a:
b3:26:9a:1b:89:e0:96:ca:28:39:63:b0:b1:ea:57:46:1e:28:
84:c8:cf:9d:43:4e:8f:65:1d:59:c5:9b:d6:60:82:94:24:8a:
33:69:40:fd:81:00:f5:17:07:16:40:6c:52:b3:43:1c:0f:d3:
08:fb:41:51:b9:0c:74:77:3b:b3:45:52:b5:e5:e6:1b:ba:7f:
76:ab:56:cc:8d:b9:30:63:88:64:70:8f:ff:cd:d7:ab:64:ed:
1d:d9:db:ca:0d:c4:4f:f5:99:c0:c1:8a:a9:3c:e0:b7:d4:4e:
d0:a9:e6:da:c2:f2:76:53:6d:59:ad:ae:e4:19:b5:3d:ae:1f:
57:f8:82:b6:91:b8:78:99:60:04:98:8c:13:ab:e6:29:ee:8f:
e4:86:c5:30:4a:c3:c7:8a:50:d5:ec:d4:77:89:ee:c3:d7:b8:
ef:05:48:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:54:57 2026 by rpki-client