
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
File: uc1X4v9PWLuVmpVBoxz99ml2GLI.mft (raw, json)
Hash identifier: eT5DPaYK1Bu2O0RrKhs2moENKO8jYZDd2311OiyWsaM=
Subject key identifier: 45:CB:01:0C:EA:80:6C:59:12:41:6B:D7:C4:CB:2A:60:1A:53:36:0E
Authority key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
Certificate issuer: /CN=A918E023/serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
Manifest number: F8
Signing time: Thu 23 Jul 2026 08:04:35 +0000
Manifest this update: Thu 23 Jul 2026 08:04:34 +0000
Manifest next update: Thu 30 Jul 2026 08:04:34 +0000
Files and hashes: 1: uc1X4v9PWLuVmpVBoxz99ml2GLI.crl (hash: gcgjfpmBJHLR7RgHc5Poi8OYpOoWFX5VgOGTyF1It4c=)
2: 3A6DC4F4829C11F1A9F8AFE869A30FBC.roa (hash: WUHe+xm2s7KQRGDEn1dhB4Wm51SPdg0ugPZNxSGnrGQ=)
3: 8601959679DF11F193D499DB65A30FBC.roa (hash: dJ72wAJA0nbSV+h9SeoXcj3siEq/Cclo9TYNDcphMSQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Validity
Not Before: Jul 23 08:04:34 2026 GMT
Not After : Jul 30 08:04:34 2026 GMT
Subject: CN=6a61cb13-6589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:33:d0:03:02:3d:b7:ff:d0:35:50:94:de:c7:
50:d9:1c:ec:97:2d:5b:23:a0:6a:ee:65:5d:f0:2a:
51:de:93:11:3a:2c:fb:5b:96:44:9c:25:9e:8c:49:
f1:9a:eb:99:2a:d8:d8:d9:8b:84:5b:2d:9b:b9:19:
aa:b7:a0:a6:66:53:dc:68:b5:08:13:7d:1e:c8:fd:
f3:96:c9:88:15:0a:5d:63:66:ca:8f:3e:05:ee:70:
8e:11:3e:38:4a:ec:e6:82:33:04:7f:9d:70:e7:81:
52:84:37:35:16:db:e8:48:4b:4d:76:29:44:f4:a8:
36:ca:53:e7:60:68:09:89:e1:fa:48:a1:df:81:95:
30:89:a1:5d:fa:1f:80:5c:fc:d1:1c:8f:55:69:b7:
e0:07:db:96:a8:30:1c:b3:80:b3:51:3d:08:6b:71:
29:88:d6:f1:b3:f1:ba:a2:d8:14:9f:de:b7:a4:31:
43:a3:e9:fc:67:e7:dc:5f:19:b1:9f:59:b2:1e:ca:
1a:d7:3c:51:f4:94:81:e6:9d:25:b3:fe:18:e2:7f:
c2:5a:d0:34:89:12:60:64:54:9d:5c:a1:93:41:5c:
b9:e2:9c:58:d7:53:95:2c:3d:da:72:79:c3:e1:96:
0d:38:1e:d1:08:89:83:c0:41:22:15:91:65:b9:8b:
cf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CB:01:0C:EA:80:6C:59:12:41:6B:D7:C4:CB:2A:60:1A:53:36:0E
X509v3 Authority Key Identifier:
keyid:B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e2:93:a9:20:df:75:20:09:20:d1:da:28:6d:78:e6:9f:b5:
9e:fe:c2:33:a2:5b:fd:ee:e5:ef:c6:cb:50:5e:fd:57:a7:f8:
5b:08:8e:95:a1:99:a8:9e:46:56:89:5e:47:80:21:57:39:dd:
0a:73:35:f4:aa:2d:3a:17:51:95:21:3c:3e:8d:b5:f1:4b:a5:
49:e2:49:25:1e:44:d0:0e:39:eb:f8:eb:af:eb:95:8c:d9:88:
1d:82:16:fd:45:96:34:64:5c:26:0c:24:b0:34:a2:21:fd:2d:
4c:64:6a:4e:e2:5f:82:af:cf:f0:ac:cb:63:bf:b1:ff:6a:79:
79:2d:04:5f:34:84:65:7c:45:10:91:c2:88:3f:0f:fa:6a:b7:
88:61:85:af:44:dd:a2:55:45:fc:4d:f2:6d:2c:d6:59:2a:3f:
a0:5a:35:38:be:bb:49:75:94:05:32:82:1c:1a:b6:6c:e9:6c:
3e:f6:b8:e8:9e:a4:57:ec:e0:51:9f:c6:ad:f5:2f:62:5d:ad:
18:f2:50:51:ca:7e:86:54:64:53:86:aa:ff:ee:a3:f9:a5:e7:
9c:87:3a:a7:1a:0f:cb:33:dd:7f:a9:0b:55:b3:94:aa:49:b1:
55:45:96:f1:6c:7a:8b:e2:9b:5d:f9:2c:96:44:87:51:b8:e3:
7f:da:be:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:56:27 2026 by rpki-client