
$ rpki-client -vvf rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
File: 01UDTjnACz53K-oBQambzhQnrfQ.mft (raw, json)
Hash identifier: wHd5f7CHII12RnCierVAltnfr3QNZOtzM1Yip7r2HFA=
Subject key identifier: 97:6C:42:94:D9:22:79:D8:0B:1A:99:0E:9B:57:86:EB:DE:72:16:E5
Authority key identifier: D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4
Certificate issuer: /CN=A916537A/serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
Manifest number: 06
Signing time: Wed 25 Mar 2026 08:26:52 +0000
Manifest this update: Wed 25 Mar 2026 08:26:52 +0000
Manifest next update: Wed 01 Apr 2026 08:26:52 +0000
Files and hashes: 1: 01UDTjnACz53K-oBQambzhQnrfQ.crl (hash: zNNyMz1uBrMKWRSgwR2LS3rkIHBq3DyvZfR25Y9y4n8=)
2: 58EE9E1227E311F1A1CB4281AA833773.roa (hash: ke/LfOJ0ZKhmHw2EzTdXLtCmQ4LbPHYhXcvWovxzDWQ=)
3: B32ED56A27EB11F1BCE516B1AC833773.roa (hash: mfYPELhyFi3+ksWi51fs3IkPk6Ldr6hQWYywSX9UUpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.crl
rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916537A, serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
Validity
Not Before: Mar 25 08:26:52 2026 GMT
Not After : Apr 1 08:26:52 2026 GMT
Subject: CN=69c39c4c-085a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:e4:50:07:a5:fe:26:27:6b:9c:ba:3f:80:
d1:14:ef:32:5e:ce:5e:83:1f:ba:6e:31:77:07:34:
73:60:3b:b8:b1:6f:29:29:0a:ed:bf:c9:f2:6e:d5:
3d:d3:24:0a:f1:48:04:f6:8d:a4:a5:01:d6:4b:2a:
18:70:a8:b7:c3:a5:d2:1b:92:a2:6f:f1:7e:0e:aa:
16:b0:17:2b:a2:3c:88:e9:0e:81:7d:ef:95:e8:b0:
b9:30:da:1d:a1:35:13:b6:7f:51:17:25:da:d5:b0:
1b:32:f6:bb:db:d9:84:71:b2:74:ff:a6:bd:36:e2:
58:96:26:1b:7a:ad:dd:b4:cf:67:81:0b:c3:a1:42:
3e:9f:16:74:b6:ed:79:99:90:b9:ac:c0:94:45:e5:
17:fb:30:4c:f9:23:86:49:78:84:3d:e1:a1:66:76:
03:9d:c3:2e:09:6f:cf:ad:be:02:99:6a:0d:d6:d9:
13:3c:a6:77:ff:93:9f:70:81:f5:e2:c2:cc:ae:72:
ad:f0:6f:61:f1:fe:38:cb:5d:be:7c:43:a9:2e:38:
2e:f9:fc:a7:dd:39:33:61:24:2a:0b:0d:e8:63:55:
93:7e:4e:ee:d5:a5:d4:8f:7c:3e:f7:53:53:89:34:
d5:26:6a:88:f6:2f:ad:1d:93:4e:5e:7e:a5:d1:db:
9e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6C:42:94:D9:22:79:D8:0B:1A:99:0E:9B:57:86:EB:DE:72:16:E5
X509v3 Authority Key Identifier:
keyid:D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:13:df:fc:6b:bb:50:8e:2c:17:80:11:d8:56:c4:c3:35:f0:
12:47:55:60:b9:56:ac:fb:9d:33:1b:48:88:63:76:fa:85:e1:
9f:aa:d0:c0:e1:e8:da:32:94:7f:13:47:b8:22:1b:0e:ce:02:
40:e8:53:ee:4e:35:f1:76:8c:04:9e:55:1d:62:45:dd:e6:b9:
b7:09:a3:05:d9:da:80:ea:90:f5:8c:fd:f1:12:c9:6b:a3:4e:
a4:ba:15:d9:0e:c5:84:cb:08:5f:9f:13:f4:1e:e0:9c:4d:a1:
ec:ea:b3:db:97:b3:9f:85:a6:96:3f:a9:9c:80:9a:cd:ca:b6:
9b:44:a1:e3:7a:8d:b7:f3:dc:ac:b9:18:90:8f:c2:f6:02:fc:
3e:bb:4a:9a:e1:28:ac:f7:ac:88:a0:32:fb:75:60:27:59:69:
31:47:19:b2:9d:1e:fc:36:12:3d:1d:f0:72:8d:b5:8c:f3:05:
4f:b2:6c:f4:8e:71:72:3a:d6:83:0f:32:7c:fa:be:9e:b4:14:
64:83:08:0d:9e:a5:43:8d:2c:64:2b:f5:35:03:cf:9c:b6:04:
aa:88:2d:77:ab:19:a0:e7:81:2d:c1:68:1d:5e:ff:d6:44:70:
30:50:21:9d:ab:88:af:e8:3d:ef:e8:8d:19:5e:c5:2c:bc:2b:
33:3a:75:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:17:04 2026 by rpki-client