
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
File: UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json)
Hash identifier: SXfqwCl1ZnRhgjNkFSOw1yfnPtmr8AUoXTfDyevQDQ4=
Subject key identifier: FC:5E:78:AE:6C:71:59:1D:02:E2:F6:E1:B4:81:6B:F0:A6:26:26:C7
Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13
Certificate issuer: /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13
Certificate serial: 0C11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
Manifest number: 0C07
Signing time: Mon 02 Mar 2026 01:16:25 +0000
Manifest this update: Mon 02 Mar 2026 01:16:23 +0000
Manifest next update: Mon 09 Mar 2026 01:16:23 +0000
Files and hashes: 1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: wkWffafl6l5H9rrTZOBA1/5paZ+kY9ZQCUrXZ6E9VO8=)
2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: HVSrkMHkZUPuPigIBAFRqYkv/0wRB+c6OCpvUKZ3fUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl
rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3089 (0xc11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117754, serialNumber=531749095E449FD82AA1DB50DA834017230BDD13
Validity
Not Before: Mar 2 01:16:23 2026 GMT
Not After : Mar 9 01:16:23 2026 GMT
Subject: CN=69a4e4e9-33a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:8d:c3:6e:79:3e:93:db:18:a1:2f:c4:55:
6a:30:7a:00:d2:50:c8:2e:7a:df:ac:d0:4f:33:a7:
90:1a:94:bb:7e:19:16:14:7d:1c:0b:12:74:36:31:
40:55:55:e6:78:8c:95:d4:eb:45:a9:4b:71:21:94:
a5:8a:c6:fd:b0:ec:1a:28:09:6a:c5:64:f3:53:42:
ad:64:59:f1:ae:90:b1:0b:48:d1:66:25:7e:7b:65:
1e:7c:fc:32:e9:6c:a1:be:9d:6c:43:f1:0e:d4:40:
d2:f9:75:e9:0c:31:b2:2a:29:62:ca:87:57:cb:3e:
4c:9a:b8:84:0f:17:55:28:16:63:ae:ca:ef:05:81:
b7:cd:f1:13:fd:5b:be:bc:52:4e:13:bd:63:1f:48:
db:7c:37:70:4b:51:1f:4e:f0:07:f3:cc:4a:72:dd:
e8:97:cf:d3:f6:bf:f3:e6:f9:79:12:1d:45:f2:70:
46:78:e8:3d:56:52:17:85:e6:38:99:d1:95:fb:87:
52:41:6d:a6:1e:60:b7:73:9e:55:0c:d4:04:04:68:
1d:20:31:fa:7b:bf:51:ac:a4:ae:55:5a:61:70:94:
fb:49:06:dd:3f:5d:9c:7b:40:6c:6a:56:11:9f:fe:
e7:f2:3d:35:7e:d2:06:9f:ac:4c:10:dc:2c:5d:f9:
f2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5E:78:AE:6C:71:59:1D:02:E2:F6:E1:B4:81:6B:F0:A6:26:26:C7
X509v3 Authority Key Identifier:
keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:82:24:71:7a:d3:ea:ab:6e:64:78:2c:eb:3c:c6:d0:86:08:
bf:e1:3c:d1:98:6b:2c:a0:e2:50:a3:94:5b:28:f8:ef:e5:17:
57:0d:13:28:7d:3e:af:c6:ec:41:fa:39:d0:ac:de:6a:e4:ba:
8f:ee:0c:08:52:36:8b:16:89:1e:b3:e0:52:c6:2e:3c:93:41:
2f:91:3d:89:56:e8:e6:8a:05:f8:c1:30:72:a6:a9:a1:e4:c4:
ab:f8:f8:d2:c2:21:04:b7:c3:55:9e:37:62:a6:4d:72:ff:32:
e6:c6:7a:5d:71:63:79:e7:f2:29:8e:6f:81:48:70:3b:e1:3b:
e0:78:9f:ce:4d:29:20:f9:c3:66:8c:41:a2:83:83:f5:42:99:
c4:b3:73:6a:64:3d:a9:ba:eb:ce:23:de:99:0a:7a:67:be:0f:
42:63:e2:0a:89:75:09:bc:a5:07:75:07:ef:69:f5:48:e6:29:
b7:7e:0f:18:ff:57:e5:51:e3:2b:8f:ca:91:a6:a1:d0:9d:b5:
bc:70:dc:ff:33:66:b1:43:78:b4:67:12:0b:df:30:b5:68:5e:
32:36:ce:84:5e:ea:e0:d5:17:b0:5a:99:79:77:c2:00:67:e0:
4e:14:b6:0b:8d:95:c1:78:54:f8:43:f1:02:84:fb:fe:e3:eb:
07:26:84:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:05 2026 by rpki-client