
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
File: _UXMVAPGTPsjCqfe7RC8aCKNdHM.mft (raw, json)
Hash identifier: A6oD10cMtIAsAdmxFhjsrEqfEQvDPjXlCW+8P08O5Mc=
Subject key identifier: BC:82:FE:4F:AC:3B:12:7C:37:D3:38:0D:DE:6C:26:E0:2B:94:44:86
Authority key identifier: FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73
Certificate issuer: /CN=A9186BCC/serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473
Certificate serial: 0247
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
Manifest number: 0240
Signing time: Wed 23 Sep 2026 02:52:20 +0000
Manifest this update: Wed 23 Sep 2026 02:52:19 +0000
Manifest next update: Wed 30 Sep 2026 02:52:19 +0000
Files and hashes: 1: _UXMVAPGTPsjCqfe7RC8aCKNdHM.crl (hash: FfVDAp0jAwkQYUwH6XlpFACccWCOzH0uanQU2/fG9UU=)
2: 6B62D92248D511EEBE05CC7FC4F9AE02.roa (hash: 7OoOfpcr1vPPybtXEFAjpZ6Vd273QIKn3xw75HgxFXk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl
rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186BCC, serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473
Validity
Not Before: Sep 23 02:52:19 2026 GMT
Not After : Sep 30 02:52:19 2026 GMT
Subject: CN=6ab33ee4-aba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:28:a1:fa:ef:8c:a3:54:59:d1:35:a9:fd:2b:
6f:00:b1:33:df:a2:fc:08:ca:79:4c:d1:9e:a7:c8:
1b:70:fd:a0:e9:37:77:b6:0f:e5:e4:58:f5:95:28:
1c:2c:cb:7c:3d:1d:3c:65:7a:9d:10:cc:98:e9:44:
67:00:91:38:fe:87:37:01:7f:c9:02:d7:f7:af:d8:
8f:57:7e:65:f8:39:85:0c:53:9e:65:75:59:cd:d5:
d7:36:e0:b0:8a:db:80:51:6c:d3:5b:20:c0:ee:17:
fb:15:76:80:a5:98:fd:59:dc:cc:93:7e:c1:c1:0e:
70:a5:a2:9d:2e:7b:35:6c:d4:95:3c:41:01:c9:11:
e0:07:bd:1f:6c:40:b0:9f:fb:07:2b:7b:04:63:5b:
9a:82:d7:91:af:a3:fa:18:8e:05:e7:1f:aa:65:d6:
78:0a:01:a5:ad:25:6f:ca:2c:3c:50:db:71:f3:b0:
84:70:34:16:86:00:20:d9:b7:02:e5:f9:06:c1:89:
ee:19:ac:7a:3f:ae:da:a9:0b:cd:9a:49:5d:e9:83:
0a:fd:5e:75:4b:7e:3a:43:fd:f7:c0:32:ee:24:55:
28:51:f0:ff:36:5f:b2:ec:b3:3f:b2:ac:cd:3c:8a:
57:2c:18:bc:99:6f:52:f8:04:32:45:d4:06:7e:59:
a6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:82:FE:4F:AC:3B:12:7C:37:D3:38:0D:DE:6C:26:E0:2B:94:44:86
X509v3 Authority Key Identifier:
keyid:FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:6b:4c:c4:eb:ae:f6:41:a3:ca:0e:24:a7:b6:61:da:72:d9:
75:11:e1:34:ed:4f:a5:e2:cb:68:55:03:94:ac:5e:7d:e5:9b:
6b:fc:1f:f4:54:da:32:3c:2c:17:5d:a4:6f:67:41:f8:43:47:
2f:c1:00:37:1f:f5:4d:b9:a9:50:03:e5:36:f5:55:0e:ac:20:
4e:2c:84:84:9d:81:f9:a1:7b:80:fc:a6:d6:b8:9c:56:e3:e5:
f4:06:29:e7:69:bd:0a:31:ba:d6:ee:5a:9e:1f:73:56:dc:18:
98:25:53:b9:d1:98:24:a6:4c:06:8b:f5:89:74:c1:1e:ec:b5:
34:ba:52:9b:56:b0:2f:83:4a:75:91:bd:81:c8:3d:6a:2e:77:
43:2f:55:bc:65:e0:55:1b:b5:1c:98:9b:bc:50:30:cd:e8:84:
96:42:94:a0:eb:bf:57:16:9a:ab:0e:f3:12:cd:4f:53:a1:47:
6f:a6:31:f1:aa:42:8d:5b:02:79:e5:e5:08:c8:78:93:b0:3b:
d9:d6:88:50:f1:2a:ee:62:94:4f:7b:aa:f5:f0:60:0d:9b:f2:
fb:ef:93:c1:ab:42:f3:4a:42:a5:90:a5:7e:d4:0c:df:a8:ff:
d8:1d:04:e2:63:bd:60:5b:8e:93:c1:7f:99:fb:f8:19:13:c0:
1b:a2:21:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:49:49 2026 by rpki-client