
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
File: _UXMVAPGTPsjCqfe7RC8aCKNdHM.mft (raw, json)
Hash identifier: wxX4zEveFZDhbuc/ztvywf3uSwPTDD5dlvtD64G7h1A=
Subject key identifier: 63:BF:43:6D:1A:7C:17:39:16:83:06:41:78:20:70:CA:38:CD:21:09
Authority key identifier: FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73
Certificate issuer: /CN=A9186BCC/serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473
Certificate serial: 0262
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
Manifest number: 025B
Signing time: Sun 15 Nov 2026 02:25:06 +0000
Manifest this update: Sun 15 Nov 2026 02:25:06 +0000
Manifest next update: Sun 22 Nov 2026 02:25:06 +0000
Files and hashes: 1: _UXMVAPGTPsjCqfe7RC8aCKNdHM.crl (hash: 2jgNIkqlarCxYe6KgKaNWYmndVXER+ZfCH2uiimFHtI=)
2: 6B62D92248D511EEBE05CC7FC4F9AE02.roa (hash: 7OoOfpcr1vPPybtXEFAjpZ6Vd273QIKn3xw75HgxFXk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl
rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 02:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610 (0x262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186BCC, serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473
Validity
Not Before: Nov 15 02:25:06 2026 GMT
Not After : Nov 22 02:25:06 2026 GMT
Subject: CN=6af91802-47e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:e4:03:e0:f2:95:1d:b5:4b:59:45:9b:b1:
2f:cd:41:fd:4f:53:ee:1f:49:05:64:e7:dc:3f:61:
14:88:af:3a:ba:b0:33:fc:09:18:6e:57:40:1d:38:
f3:d1:72:6e:da:d5:09:c7:e2:c8:31:01:f8:00:ea:
34:3a:44:0b:ad:02:05:5f:0e:5c:44:aa:5c:18:2b:
02:e8:81:ef:37:c3:00:35:12:a7:74:98:a3:52:85:
1d:d6:4b:76:b7:07:b0:8a:c4:29:02:73:bd:c9:8d:
39:de:3a:ef:54:fc:cb:0b:2d:50:84:65:cb:d4:80:
c7:5e:ab:f2:12:12:70:10:a4:73:e6:d4:b5:c3:75:
d5:52:b2:f6:19:13:31:08:a8:c5:b6:ee:67:ab:7a:
67:08:7f:c6:e8:0f:2f:d6:60:17:9c:6c:14:79:8c:
ec:8c:60:01:4a:a9:1d:d0:95:b4:4a:62:28:c6:b7:
57:2d:d2:44:e8:cb:5e:ed:3f:35:1e:0c:46:f9:81:
26:72:c4:31:e4:64:ba:7d:2b:c1:f1:71:9f:36:82:
17:4f:67:52:79:7b:54:40:2d:a4:a5:23:eb:7d:bc:
ca:80:50:fe:9b:01:a3:ed:b7:67:ce:d3:69:d5:41:
47:48:91:71:78:72:f6:f4:bb:6a:3b:70:0f:ca:51:
52:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BF:43:6D:1A:7C:17:39:16:83:06:41:78:20:70:CA:38:CD:21:09
X509v3 Authority Key Identifier:
keyid:FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:cf:f5:72:06:b0:5f:f3:ff:96:d0:76:cf:3d:77:3a:37:64:
9d:3d:fa:61:e9:e7:0a:f6:09:71:8e:56:4a:52:64:57:a6:6b:
12:20:26:38:a7:05:06:94:ec:9a:73:0e:f7:c5:ef:94:f3:41:
16:0d:38:e1:91:8e:43:80:56:c8:55:ce:86:76:d2:d7:33:94:
71:39:0e:e9:3e:31:b9:47:bc:b1:e4:95:e2:88:0c:38:03:4a:
37:ab:a7:bd:36:aa:95:ef:e5:cb:cb:a0:1e:a2:c8:9f:68:96:
42:79:66:19:6b:ea:e8:42:67:9d:d7:9b:65:19:e6:0a:17:11:
37:a6:c6:22:48:32:77:b0:56:ee:0c:06:4f:2e:b2:84:99:e0:
dc:b5:54:ef:74:9d:d5:56:0b:c0:bf:d6:5a:14:cb:c9:ae:54:
76:d6:86:a5:5f:da:dd:9d:aa:8e:99:33:7f:3e:18:60:ea:a0:
b2:c0:c5:a5:26:d8:f3:05:ae:76:8c:0b:aa:de:79:dc:0c:73:
e6:99:ea:f9:e1:82:a8:4f:28:4d:5f:20:13:9d:f7:cf:e8:d5:
61:7a:a1:25:42:c1:f4:48:03:81:38:4c:f1:a3:e4:f2:d1:48:
bd:b7:c7:ab:8e:05:83:d4:e0:96:69:0f:28:a5:0b:86:94:dd:
f4:20:af:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:59:36 2026 by rpki-client