
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
File: uxh7m1B2e7e7wih3IL02wLjQaJY.mft (raw, json)
Hash identifier: NATVNN21wD/Zp+MbbfSvVsg7n/uX5z/DTID5XD5FoP8=
Subject key identifier: 4D:D5:98:68:3D:35:43:91:2D:85:D4:77:9C:10:D1:EC:84:96:C1:AD
Authority key identifier: BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96
Certificate issuer: /CN=A9191E43/serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896
Certificate serial: 0381
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
Manifest number: 0381
Signing time: Fri 27 Mar 2026 00:35:16 +0000
Manifest this update: Fri 27 Mar 2026 00:35:16 +0000
Manifest next update: Fri 03 Apr 2026 00:35:16 +0000
Files and hashes: 1: uxh7m1B2e7e7wih3IL02wLjQaJY.crl (hash: 92sNqNwzBq41DAkxPQzth9fKLNBz60KP13pKKcNOdlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl
rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:35:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897 (0x381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191E43, serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896
Validity
Not Before: Mar 27 00:35:16 2026 GMT
Not After : Apr 3 00:35:16 2026 GMT
Subject: CN=69c5d0c4-b441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:2f:2f:df:7a:13:e3:33:8f:28:ac:92:a4:
60:1b:37:cf:14:9b:93:2a:fc:9b:5a:d1:a0:5c:7c:
3b:af:f6:dd:7a:21:23:a0:6b:1b:3f:84:47:97:32:
fc:f3:cd:97:9a:c2:c6:ff:0f:60:0f:fe:84:17:c7:
53:80:77:04:29:06:f5:a2:8d:95:13:9f:a2:d5:82:
5b:47:db:6b:9c:52:86:40:4b:8d:df:07:a9:ec:bb:
3c:72:f3:1a:28:a3:26:05:1b:0c:94:01:b1:59:6e:
62:6d:da:e6:ae:cb:96:21:84:be:1b:69:09:3d:9d:
39:b2:13:07:00:e8:35:d6:87:6e:41:51:40:69:e6:
92:a5:6f:8c:34:e9:87:f2:c2:ba:f5:26:b2:34:b8:
97:6e:44:81:54:7e:49:65:ff:28:7d:24:1e:db:44:
ce:3c:99:a6:ce:51:9c:6f:07:56:02:7d:bd:51:bd:
fd:e9:5b:b1:86:03:cf:f9:77:ca:42:bc:b1:93:25:
dc:56:d6:d5:de:a8:7e:78:4d:45:44:a2:d8:b9:7f:
e8:1a:d8:8b:8f:55:79:e8:c8:59:95:7f:b2:cf:c0:
0c:45:93:63:0a:93:16:d3:c9:cc:72:21:97:2c:77:
b2:4d:b4:34:a8:5b:87:c8:98:92:f6:e7:24:86:b8:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D5:98:68:3D:35:43:91:2D:85:D4:77:9C:10:D1:EC:84:96:C1:AD
X509v3 Authority Key Identifier:
keyid:BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:1b:9d:c1:57:67:af:ec:21:2e:80:8a:fa:8a:29:85:22:3e:
57:5a:93:0b:51:cd:fd:69:17:7d:ed:a7:34:50:84:6a:87:59:
cb:56:fe:93:8d:94:47:2d:bd:73:8f:af:8a:9a:2a:39:f0:53:
9a:37:e8:c0:59:17:1b:dd:5c:1f:3c:14:a8:29:6b:72:86:a3:
b0:8c:02:93:2e:74:9b:70:2e:fb:19:95:e6:cb:71:6f:0d:70:
a0:9c:53:37:00:d7:d7:d3:6e:3e:87:7d:4f:4c:b4:ac:af:94:
49:c0:8c:fc:46:0b:a0:f4:6c:81:26:a0:f0:a2:ae:8e:87:03:
fa:bb:f0:46:fa:82:fc:49:9f:f8:b5:08:ae:5f:96:6a:6e:42:
e6:05:d0:25:d3:f3:4d:58:41:32:96:6a:73:4a:79:9a:0f:27:
37:58:0c:e7:87:ae:d9:2f:10:a7:ee:5f:b8:75:56:49:9e:a5:
f4:ec:d2:8d:25:24:63:d5:25:97:2f:f5:4a:77:9d:26:67:42:
c6:30:e8:fc:53:56:09:5b:2d:e1:d3:3a:18:59:87:95:98:58:
74:13:2f:6e:68:ba:ea:c6:04:91:bf:c2:4c:d4:40:74:0a:ef:
10:32:31:a0:a4:a6:16:a3:14:42:ce:5d:9b:e3:bd:ae:42:2d:
8e:16:a8:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTFFNDMxMTAvBgNVBAUTKEJCMTg3QjlCNTA3NjdCQjdCQkMyMjg3NzIwQkQzNkMw
QjhEMDY4OTYwHhcNMjYwMzI3MDAzNTE2WhcNMjYwNDAzMDAzNTE2WjAYMRYwFAYD
VQQDEw02OWM1ZDBjNC1iNDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxDEvL996E+MzjyiskqRgGzfPFJuTKvybWtGgXHw7r/bdeiEjoGsbP4RHlzL8
882XmsLG/w9gD/6EF8dTgHcEKQb1oo2VE5+i1YJbR9trnFKGQEuN3wep7Ls8cvMa
KKMmBRsMlAGxWW5ibdrmrsuWIYS+G2kJPZ05shMHAOg11oduQVFAaeaSpW+MNOmH
8sK69SayNLiXbkSBVH5JZf8ofSQe20TOPJmmzlGcbwdWAn29Ub396VuxhgPP+XfK
QryxkyXcVtbV3qh+eE1FRKLYuX/oGtiLj1V56MhZlX+yz8AMRZNjCpMW08nMciGX
LHeyTbQ0qFuHyJiS9uckhrhSMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE3VmGg9
NUORLYXUd5wQ0eyElsGtMB8GA1UdIwQYMBaAFLsYe5tQdnu3u8IodyC9NsC40GiW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU0My81MDhEQTExOEUy
MDExMUVDOTdDQjMxNUNDNEY5QUUwMi91eGg3bTFCMmU3ZTd3aWgzSUwwMndMalFh
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V4aDdtMUIyZTdlN3dpaDNJTDAyd0xqUWFKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MUU0My81MDhEQTExOEUyMDExMUVDOTdDQjMxNUNDNEY5QUUwMi91eGg3bTFCMmU3
ZTd3aWgzSUwwMndMalFhSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAchudwVdnr+whLoCK+oophSI+V1qTC1HN/WkXfe2nNFCEaodZy1b+k42URy29
c4+vipoqOfBTmjfowFkXG91cHzwUqClrcoajsIwCky50m3Au+xmV5stxbw1woJxT
NwDX19NuPod9T0y0rK+UScCM/EYLoPRsgSag8KKujocD+rvwRvqC/Emf+LUIrl+W
am5C5gXQJdPzTVhBMpZqc0p5mg8nN1gM54eu2S8Qp+5fuHVWSZ6l9OzSjSUkY9Ul
ly/1SnedJmdCxjDo/FNWCVst4dM6GFmHlZhYdBMvbmi66sYEkb/CTNRAdArvEDIx
oKSmFqMUQs5dm+O9rkItjhaoVQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:12 2026 by rpki-client