
$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json)
Hash identifier: FeTKGhy2JZkMaaw/oAlPyl8hIucFigMKZr9I7Hw+6C0=
Subject key identifier: CE:00:23:D5:9F:5F:C1:FD:50:45:91:EF:C5:20:3D:E5:53:11:33:0E
Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17
Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517
Certificate serial: 09A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
Manifest number: 0997
Signing time: Wed 22 Jul 2026 20:26:43 +0000
Manifest this update: Wed 22 Jul 2026 20:26:42 +0000
Manifest next update: Wed 29 Jul 2026 20:26:42 +0000
Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: t/9KebCGzaY++JO0GGMrxLn7WmChziwp5AwiPRnD0CM=)
2: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: oLP/jKOtL4Ffh6w6dK/dJZMBr+6GxoUP/Gc5UVj8ghc=)
3: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: ChWEYoSwPWyO7zRK4VL3WyQc574q+WUYB0OYthzNWRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl
rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2473 (0x9a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919123C, serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517
Validity
Not Before: Jul 22 20:26:42 2026 GMT
Not After : Jul 29 20:26:42 2026 GMT
Subject: CN=6a612783-5eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:c1:9e:35:0f:09:92:a2:ba:04:44:d3:94:
88:38:0a:2b:84:a5:fb:e0:2b:ac:32:5e:08:a3:56:
3e:15:73:c5:6c:70:3a:39:e1:f1:db:7d:d8:15:0e:
41:ae:e5:1c:9a:06:f2:f6:9c:f8:93:58:38:38:0e:
67:2a:ae:bc:b2:4b:5e:b2:8a:3f:a9:79:ea:54:36:
82:86:53:c6:50:df:ca:1b:18:8c:3a:54:c7:90:17:
d5:f1:dc:0a:ff:ce:c3:8d:e1:d3:bd:32:12:d5:09:
94:44:ed:b0:da:f8:a3:92:fa:e7:a5:71:f4:9e:f8:
23:13:2b:de:89:36:8c:d7:be:01:5d:38:05:e9:57:
66:ef:ef:ab:5c:db:d4:c2:b1:5b:7d:db:05:92:db:
9b:70:ce:9e:72:d6:ec:a2:47:fe:74:aa:4c:e1:ab:
72:58:d3:8d:a9:93:9b:5c:b9:4c:bf:d9:91:54:55:
56:ec:96:d1:6e:45:65:00:a0:da:41:47:b5:d9:09:
3c:b9:96:fa:47:ff:e2:a7:b1:64:fa:2a:5e:61:e5:
f4:17:10:12:2c:1d:ae:f0:3f:8b:4c:79:23:fb:fa:
cd:8f:be:b2:25:ce:0a:f0:be:61:22:bf:e2:db:6f:
41:6f:bd:29:75:83:6a:34:69:13:2e:e2:0b:2e:ec:
d4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:00:23:D5:9F:5F:C1:FD:50:45:91:EF:C5:20:3D:E5:53:11:33:0E
X509v3 Authority Key Identifier:
keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a2:4d:95:9b:cd:d9:f3:75:10:ec:5e:b9:5a:c0:d7:a2:2c:
fc:8e:99:95:63:68:28:18:43:87:24:13:92:33:67:a8:11:b0:
6f:c3:6b:32:f4:64:d0:2c:11:ef:fb:b9:75:4a:f8:17:c0:43:
8c:50:79:e7:fd:db:e4:78:17:55:4a:db:92:3a:50:32:8e:0d:
a0:90:93:49:cc:ea:98:12:64:02:e2:44:24:7f:d7:30:89:7c:
09:1f:a7:7c:d5:97:ef:fe:67:c5:86:8e:d1:5d:f6:18:17:c0:
b7:66:13:10:c8:4a:69:53:79:fc:b4:a1:5c:0e:3b:93:32:39:
55:e0:ce:9a:46:3b:aa:e8:98:d6:d1:c2:a5:13:bd:21:ee:1b:
a1:b1:11:2f:ab:9e:7e:c1:c2:eb:6c:da:3c:05:86:9d:0f:65:
d0:1d:bd:37:3a:0c:3c:3d:01:c9:f9:79:1f:3a:dc:8d:7c:b3:
f3:93:7c:74:e2:df:cf:be:a6:e9:12:ea:78:fa:79:56:8f:b8:
53:b3:cf:05:2a:02:ae:cb:ff:ba:1b:a2:7b:1b:0d:75:de:31:
9f:da:b2:7a:ef:c6:08:7f:b7:a8:be:45:fc:f1:b5:27:b5:b5:
4f:bf:3b:7c:9e:26:1e:ca:eb:b9:c8:fe:f7:c7:5a:b9:2b:28:
30:a6:90:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:31:37 2026 by rpki-client