
$ rpki-client -vvf rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
File: 01UDTjnACz53K-oBQambzhQnrfQ.mft (raw, json)
Hash identifier: TjNQ3Si2iPM6VH2wxQUgqrTJM4gbWb4AoN7MJYTRIhI=
Subject key identifier: 13:12:00:0F:4F:57:1C:A1:4D:AE:38:29:CB:85:D5:C3:09:9A:34:A4
Authority key identifier: D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4
Certificate issuer: /CN=A916537A/serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
Certificate serial: 24
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
Manifest number: 20
Signing time: Wed 13 May 2026 09:06:30 +0000
Manifest this update: Wed 13 May 2026 09:06:30 +0000
Manifest next update: Wed 20 May 2026 09:06:30 +0000
Files and hashes: 1: 01UDTjnACz53K-oBQambzhQnrfQ.crl (hash: KMr0fRNnZ178nntPwzkf0lIxxmdArifRJDx28YqvuP4=)
2: B32ED56A27EB11F1BCE516B1AC833773.roa (hash: mfYPELhyFi3+ksWi51fs3IkPk6Ldr6hQWYywSX9UUpI=)
3: 58EE9E1227E311F1A1CB4281AA833773.roa (hash: WGdpagiMRLgP7fy+S61dSD4HqoS5W6QPvfvY0pABfdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.crl
rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916537A, serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
Validity
Not Before: May 13 09:06:30 2026 GMT
Not After : May 20 09:06:30 2026 GMT
Subject: CN=6a043f16-f029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:ba:bc:54:48:6e:7f:0b:49:58:b6:b0:05:
2c:77:cd:38:be:38:3b:de:33:ed:e7:22:51:d4:b0:
65:20:2e:bd:c5:14:ee:d0:d0:12:25:89:f1:a4:2d:
27:08:e0:c0:9f:4a:51:ac:c7:ba:2c:48:c5:59:69:
ce:e4:8b:cf:ca:31:12:51:06:43:12:cc:a1:64:bd:
cf:a4:1e:5c:04:e8:f3:d0:24:53:5f:61:6a:af:d2:
68:5f:c7:0e:40:f8:5e:cc:b9:c3:49:ed:13:fa:9d:
29:7e:96:5a:b2:c6:dd:0b:ce:81:84:82:08:07:30:
a7:cc:65:46:27:f8:08:48:6d:b0:20:95:93:27:73:
59:07:b7:a1:fd:26:35:d6:44:a5:07:1e:f0:47:c1:
ff:58:0a:f9:d1:d1:fe:cb:d7:4c:c6:a5:19:0e:e0:
b8:45:e7:f8:21:fc:0a:fe:fc:a4:a2:03:e5:2c:62:
2c:eb:95:d7:7c:a0:2a:83:d4:4b:df:7b:1f:85:d3:
5b:2b:22:4a:d6:21:63:37:26:39:55:99:f4:6c:df:
17:51:80:91:9c:dd:6b:a5:fb:03:be:f2:2b:6f:bd:
b9:05:bd:4c:19:e7:6b:55:6a:44:ad:c2:e5:4e:79:
a7:bc:de:61:b7:7d:5f:9a:1c:db:2c:48:e7:9a:e7:
de:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:12:00:0F:4F:57:1C:A1:4D:AE:38:29:CB:85:D5:C3:09:9A:34:A4
X509v3 Authority Key Identifier:
keyid:D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b9:79:e5:c9:c1:2f:c0:2b:3c:ca:3c:91:66:45:5a:41:07:
79:20:06:27:7a:7c:32:2f:6d:7e:3d:5f:71:81:53:9f:03:6e:
f5:71:85:47:a2:97:6e:59:34:de:67:54:0d:77:15:af:ba:54:
a0:84:b7:d6:5b:2e:4a:3d:7d:b8:0b:94:45:3f:32:5c:d4:6c:
15:2e:9c:97:5e:31:46:bd:07:fb:b0:24:df:3b:02:7d:f5:28:
ea:e6:53:5a:48:77:1f:3b:a4:05:19:67:16:94:22:15:f2:63:
d7:67:99:66:48:eb:32:f7:e5:2a:5e:80:d5:32:75:64:86:80:
4b:10:cb:fe:fc:60:47:95:ae:0f:82:05:9f:dd:b8:f4:7c:a8:
a0:32:4e:b3:f7:43:70:e3:ac:cc:f1:98:8c:7e:4f:95:da:95:
0d:d8:7b:ae:08:dc:7c:ab:82:0b:19:7e:42:75:78:b6:59:a7:
01:f9:30:64:c3:05:33:57:26:a7:5e:b0:c2:13:9f:41:a4:9f:
cc:9f:01:81:86:f6:d0:70:fb:67:a4:cd:aa:9c:bd:6e:04:1e:
d3:19:a2:10:c1:1a:c6:ad:6e:4d:2c:c6:fa:6a:ae:49:e1:ba:
eb:3d:54:31:e4:12:0f:4e:66:d7:e8:c1:07:85:86:0b:71:7c:
c4:3c:0e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:42:59 2026 by rpki-client