
$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json)
Hash identifier: QFMMfDf7QiDS4XVDB1gHNGgnIa09lpFWVFs5NOtI8qA=
Subject key identifier: 83:4D:85:AD:1C:35:E3:2E:BD:1A:A0:C1:98:A9:39:AE:C5:47:8A:F3
Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17
Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517
Certificate serial: 096D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
Manifest number: 095B
Signing time: Thu 26 Mar 2026 20:00:39 +0000
Manifest this update: Thu 26 Mar 2026 20:00:38 +0000
Manifest next update: Thu 02 Apr 2026 20:00:38 +0000
Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: mcP2aqHoYzb9OJSoz/1AkdILCZDrZnANZmPV2YXLcdE=)
2: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: ChWEYoSwPWyO7zRK4VL3WyQc574q+WUYB0OYthzNWRg=)
3: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: oLP/jKOtL4Ffh6w6dK/dJZMBr+6GxoUP/Gc5UVj8ghc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl
rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2413 (0x96d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919123C, serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517
Validity
Not Before: Mar 26 20:00:38 2026 GMT
Not After : Apr 2 20:00:38 2026 GMT
Subject: CN=69c59067-6189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:d6:2c:ad:ae:b5:a3:70:04:df:84:c1:2f:
77:5e:db:b2:84:25:69:d3:29:3d:c7:9f:01:53:9c:
fd:8d:31:ef:5c:3a:11:7b:e3:5d:74:4e:91:a3:30:
52:b9:67:ef:ee:68:ac:e6:be:93:94:ec:cb:0f:60:
29:3d:5b:28:b0:1b:55:64:f7:79:ce:cc:f3:7b:86:
dc:05:81:ad:04:6f:05:5d:c5:2e:a8:a6:13:38:47:
60:86:be:c1:d0:fc:16:2b:91:79:20:d1:ca:d7:fc:
fa:13:dc:c1:94:51:f3:b5:eb:57:94:65:4b:73:f9:
51:52:d4:60:a0:ce:34:93:ec:b8:35:af:d6:99:72:
bb:6a:42:40:14:77:e4:cd:88:f5:2e:fc:bd:eb:6f:
78:bd:cd:82:2e:ff:91:01:1b:7e:13:59:7e:e5:34:
b4:d8:35:e7:35:fb:73:5a:87:78:92:05:91:60:d9:
14:54:68:c6:2b:b0:ab:d8:17:fb:d2:be:e3:4c:8a:
2f:d6:25:61:79:82:8f:a3:e3:f5:99:ab:b6:8e:a4:
3e:2f:31:14:27:32:59:7d:bc:aa:de:a1:63:ee:d9:
17:60:a7:d7:39:de:36:a0:5a:96:ad:e6:92:09:f6:
7a:c9:82:96:08:30:dc:7c:86:66:90:53:82:a2:af:
76:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4D:85:AD:1C:35:E3:2E:BD:1A:A0:C1:98:A9:39:AE:C5:47:8A:F3
X509v3 Authority Key Identifier:
keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c8:e7:12:4e:5f:d9:fa:60:6d:bf:78:a6:85:56:3e:ad:d9:
84:1f:a3:96:c3:3f:b2:cc:f1:54:01:c8:99:43:67:55:76:cd:
e8:b9:8a:d8:d2:f7:e4:ed:94:87:bc:e4:a3:65:d0:11:d2:de:
b3:e7:6b:00:09:1a:ce:b2:0e:07:3c:82:b4:72:8a:04:3d:e4:
f6:02:7a:8f:27:64:9a:14:b3:8f:f7:a3:0a:b5:d1:1f:63:72:
ca:c9:cb:f3:a8:cf:bc:2f:e5:5e:de:c5:91:6e:96:25:18:9e:
9f:73:ef:16:04:70:64:67:40:ec:92:84:5d:6e:c1:03:95:8d:
54:c5:d2:99:7d:b8:e4:d3:11:dc:98:95:e0:30:37:32:cd:06:
3f:9e:cc:13:ce:39:3e:70:49:49:66:7e:3b:b5:78:12:22:f7:
93:91:0f:27:50:af:06:c5:33:12:78:a9:78:a8:3c:b7:62:2b:
9c:7c:a4:a5:05:1f:2d:30:96:74:b1:47:c8:10:57:b4:27:a7:
02:5f:0b:51:1e:2f:ea:62:c4:e4:9f:4c:f6:3d:35:49:49:2b:
85:a7:1f:98:3b:c1:be:5e:28:14:d9:b7:21:6d:e5:3e:dc:d1:
a2:ec:50:f6:4d:e5:26:19:24:f6:b8:b8:ff:30:69:e7:ac:bf:
f6:72:2d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:46:59 2026 by rpki-client