
$ rpki-client -vvf rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
File: UBJV6QF6Y3iSbTaute_xnEXWV04.mft (raw, json)
Hash identifier: Kn1gcNBydaHVzLhH8yAfMExmNnSS8cfNBnSyJSVSzUI=
Subject key identifier: C7:E6:0E:99:BC:7C:2B:59:C6:B9:DF:22:5E:A2:DE:57:54:CA:45:01
Authority key identifier: 50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E
Certificate issuer: /CN=A916523A/serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
Manifest number: 95
Signing time: Wed 25 Mar 2026 06:42:48 +0000
Manifest this update: Wed 25 Mar 2026 06:42:47 +0000
Manifest next update: Wed 01 Apr 2026 06:42:47 +0000
Files and hashes: 1: UBJV6QF6Y3iSbTaute_xnEXWV04.crl (hash: MuPQOWqEKjQJLC7UeqOK+rBdY+/Bjt6YxG/IlwgF/Cs=)
2: 6654FB224CDE11F092AD8884C4F9AE02.roa (hash: 8BTScBLmRcmiLP+c8VSmYac3/ueC1pMLRRUbWosuhDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl
rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916523A, serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E
Validity
Not Before: Mar 25 06:42:47 2026 GMT
Not After : Apr 1 06:42:47 2026 GMT
Subject: CN=69c383e7-061f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:b5:02:33:4e:73:21:2f:cd:2b:93:34:65:
f4:16:fd:36:73:c4:6d:5d:63:01:7a:d7:2d:ea:8e:
fb:ee:df:8d:1e:f6:55:fe:10:f5:d8:3c:16:d6:56:
86:73:22:de:2d:8a:53:66:76:13:b8:55:3e:e5:55:
f9:a6:7d:a0:96:1b:6d:4e:63:b6:e9:70:ae:e5:bf:
e8:a6:25:dd:ad:1a:02:2e:64:25:87:f0:ae:df:0b:
7a:eb:4a:88:9c:d7:07:31:83:d3:5a:5d:12:74:ee:
ea:f7:c0:95:1f:87:9b:69:6f:3a:a3:12:25:d6:64:
e7:ab:c0:46:e5:a6:7a:85:dd:2d:90:08:39:7d:4c:
d7:65:66:c3:a3:c1:c3:c0:07:1e:58:62:04:7c:fe:
50:cd:68:20:41:34:c9:b8:8b:03:a2:b1:56:7b:86:
a2:43:8a:d4:46:4e:20:88:eb:09:57:2b:9c:6b:0d:
19:2e:f6:eb:13:d8:48:53:b9:e5:94:c7:51:68:b1:
42:39:2a:ca:cd:ae:12:21:53:3d:32:00:ef:82:57:
b2:f7:fd:1e:ac:be:69:c0:51:f6:99:f4:b3:f0:b7:
f8:6b:47:d4:a8:55:f5:68:09:7b:c1:09:c2:2e:71:
a9:e5:1b:31:d8:f6:d1:82:98:92:c8:80:b6:33:c9:
51:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E6:0E:99:BC:7C:2B:59:C6:B9:DF:22:5E:A2:DE:57:54:CA:45:01
X509v3 Authority Key Identifier:
keyid:50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:ea:b8:ab:5e:02:e3:db:db:6f:33:dd:91:40:79:04:93:67:
09:a8:e5:a9:76:3d:20:95:2e:40:df:d1:38:37:1b:a6:40:37:
53:d7:6b:59:31:54:df:b4:92:8f:52:4a:b6:99:b4:9b:d2:56:
6b:9c:07:af:b3:51:b3:73:fa:20:79:ec:b4:16:32:d4:d9:3f:
0b:38:4a:a3:eb:a7:8c:d6:a3:2b:df:63:e6:fe:07:2d:9b:60:
59:a9:fe:f2:c9:da:d7:df:5f:2f:df:7e:9b:3f:68:06:72:45:
64:9e:2d:05:97:d9:ff:b0:5a:a4:40:90:70:28:6e:ff:61:59:
23:7a:f7:61:ca:9b:7e:75:31:0f:a1:9f:fb:b1:18:d8:62:aa:
88:23:f4:a4:cf:42:a8:1a:02:39:10:0b:72:f7:4e:82:b4:53:
a8:38:d3:62:cb:3e:c6:9c:7e:e0:24:08:2d:f9:e9:8a:b9:b2:
1a:12:cd:e1:6d:11:8c:fd:73:f8:a0:00:4e:4f:c7:c4:7c:0e:
f0:cb:be:c9:9a:a1:b4:1c:41:d1:aa:ad:fb:e8:c7:b2:b4:10:
6a:08:f3:28:b6:d7:69:2c:30:6f:47:ab:a2:5a:90:6d:bc:ab:
44:4b:aa:98:ac:d3:43:da:c6:48:34:59:f8:4e:74:ab:35:ba:
75:cd:90:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:57 2026 by rpki-client