
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
File: uFvtmb90CrrVo5nJ31_plipt6PE.mft (raw, json)
Hash identifier: NriYJfAE0/NFE03r0F59/TlxvD1w+3DaoqoBEByg/3g=
Subject key identifier: BA:E8:54:E5:AA:9A:7F:81:9F:78:3D:CD:2A:E6:2A:99:FC:A0:4E:56
Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1
Certificate issuer: /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1
Certificate serial: 08A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
Manifest number: 0885
Signing time: Tue 12 May 2026 20:43:03 +0000
Manifest this update: Tue 12 May 2026 20:43:03 +0000
Manifest next update: Tue 19 May 2026 20:43:03 +0000
Files and hashes: 1: uFvtmb90CrrVo5nJ31_plipt6PE.crl (hash: M315wxR8SYqkNmlxy1KSf9Ze81BkRIM62lG/cL81N2Q=)
2: C7ADA138F4C011EAA7B25986C4F9AE02.roa (hash: ZkPeqkCK4GzWM6lROTZZvtSHrWSOnvfHR71wg6XscYk=)
3: C6EDD52EF4C011EAA7B25986C4F9AE02.roa (hash: qaJjlXwaj9JptzN90zbu/ByDY7c80MUFCf+ZwtqowYg=)
4: 70017B5CF74111EF98C99938C4F9AE02.roa (hash: jxl3GtZdPk/wIlS8xEDXVQsh03gFjRHfreaaVHkcJzI=)
5: C8633DEAF4C011EAA7B25986C4F9AE02.roa (hash: 2UKR5Ne+INL3gYP5vC9gTKEWBFAKo4pvwX1cl9KzfiQ=)
6: 709F917AF74111EF98C99938C4F9AE02.roa (hash: eYc05p+UNzblqab1mmE9/I2cp5gOiQU4HhXVCP3mmJg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl
rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:43:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2215 (0x8a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195DE5, serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1
Validity
Not Before: May 12 20:43:03 2026 GMT
Not After : May 19 20:43:03 2026 GMT
Subject: CN=6a0390d7-ef99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:57:b7:09:06:61:d1:3e:97:e4:b7:ad:ff:
d0:75:fd:c8:c5:e2:3c:02:d9:4d:a2:ec:5b:b9:c0:
0c:ed:73:78:d4:06:b1:c7:e0:f7:eb:c2:b0:a9:ee:
fe:39:e9:f3:ed:18:b2:b4:fe:b2:6a:a3:5a:0c:1d:
70:28:94:7a:ad:e4:76:8f:4b:2d:75:99:77:19:6d:
2f:51:a5:13:f9:de:72:a7:be:7b:06:c3:ab:ea:42:
81:a1:fe:b0:38:05:18:c0:37:02:fa:fd:8b:07:e8:
90:89:cb:01:c0:d4:2c:91:a9:ae:a6:04:67:4e:1e:
5c:19:df:6c:be:9c:a3:f9:e3:13:7c:79:38:0b:59:
04:15:b0:1d:14:9d:8a:83:94:ae:c9:dc:e5:0a:db:
65:4f:15:87:9c:c0:f9:b5:95:09:6f:ba:e3:f5:df:
34:31:66:a2:35:6a:42:f9:2f:48:5c:f4:d1:c0:58:
41:e0:1e:a1:e6:fc:98:13:48:83:dc:59:b8:19:c0:
16:0d:cd:1e:cc:d6:4c:b2:8c:40:42:ca:59:1c:52:
f4:0e:c9:50:23:8c:0a:51:d1:44:10:fc:07:5e:89:
60:49:b0:45:40:4a:4f:98:b6:8c:7b:f2:18:05:84:
79:d9:c2:3a:66:39:34:d4:10:65:04:ba:42:8e:13:
e3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E8:54:E5:AA:9A:7F:81:9F:78:3D:CD:2A:E6:2A:99:FC:A0:4E:56
X509v3 Authority Key Identifier:
keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:35:b7:aa:1f:68:77:2a:fc:7c:1f:7d:e6:23:52:41:3f:2d:
34:2c:7e:d7:91:b9:06:ec:73:55:93:48:7a:6d:af:08:c8:9d:
85:3a:2f:62:b7:38:41:80:5f:5a:85:a1:44:a7:2e:0f:07:24:
34:1e:ac:91:08:93:b0:ae:f0:8b:69:79:a3:35:60:8b:43:99:
0c:b1:91:80:70:71:81:ee:fa:b1:55:e9:b6:2a:4f:d0:7b:26:
83:d4:e5:80:96:b7:1d:6f:7f:6a:ca:cc:44:36:20:b7:7d:48:
5a:7a:86:4e:6f:f5:1c:a0:40:10:1f:6b:a4:b2:a3:66:67:97:
f1:29:df:6c:df:1b:ed:c0:c2:ab:b9:fd:8f:01:af:d5:f3:36:
e6:39:d3:b4:55:2b:ab:0c:4c:8d:24:b3:b1:d3:61:31:c2:3f:
a2:f2:af:12:04:e8:ce:ba:0c:c6:81:f6:0f:25:57:19:96:9a:
70:96:79:81:f7:46:02:23:b3:1a:da:e7:ed:4e:5b:e9:5a:69:
93:94:ce:38:64:65:4d:74:ee:4e:28:92:e4:b4:db:3c:66:dd:
5e:8f:ec:1e:7d:db:44:e4:7e:f0:75:05:ab:cf:6b:77:2c:b0:
33:89:f3:92:9f:47:84:14:4d:bb:87:43:85:06:4e:12:ed:e4:
3d:87:71:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:19:49 2026 by rpki-client