
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
File: UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json)
Hash identifier: qOSmjJ9HSvyQwA2+yf3GbLRqa9cMZaO/2GhZqDig8po=
Subject key identifier: 0B:91:7B:C2:14:C1:05:CF:B9:5C:8F:76:04:B1:24:92:37:AC:91:37
Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13
Certificate issuer: /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13
Certificate serial: 0C7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
Manifest number: 0C72
Signing time: Sat 26 Sep 2026 18:44:52 +0000
Manifest this update: Sat 26 Sep 2026 18:44:51 +0000
Manifest next update: Sat 03 Oct 2026 18:44:51 +0000
Files and hashes: 1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: 0GPOJJ9RigxwMN9+6n+TOc2zTuAFTIfMBGU3jV8SFEE=)
2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: HVSrkMHkZUPuPigIBAFRqYkv/0wRB+c6OCpvUKZ3fUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl
rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:44:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3196 (0xc7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117754, serialNumber=531749095E449FD82AA1DB50DA834017230BDD13
Validity
Not Before: Sep 26 18:44:51 2026 GMT
Not After : Oct 3 18:44:51 2026 GMT
Subject: CN=6ab812a4-a9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6b:30:49:16:3a:3b:d4:ac:8d:0b:5e:3c:eb:
46:b0:09:06:cd:d9:56:2e:75:f0:4d:7d:68:04:74:
af:98:2f:a9:09:e1:dc:bb:65:20:87:1d:b5:89:87:
3e:cd:31:fc:cb:b8:2e:8c:55:b0:f9:fd:9a:82:90:
0e:78:13:c5:34:5e:23:45:28:47:1e:48:7d:6b:87:
ae:2b:c6:09:67:9d:72:94:53:59:fa:3c:f8:9c:50:
c7:19:b1:03:91:1f:79:9f:b4:d0:af:e5:d7:4d:a6:
85:f7:55:0a:c0:a6:2e:08:4e:48:16:d8:a2:19:4c:
79:b8:98:be:c5:24:4a:b1:d0:af:36:6c:67:ad:5f:
94:84:33:19:1e:9f:08:89:38:69:30:9a:22:96:7c:
50:e5:4c:5c:26:18:ea:69:1e:25:a1:bf:64:d7:4c:
b8:4b:a7:40:cf:1a:36:84:54:86:33:76:b7:d1:78:
63:4d:b4:e9:19:38:28:45:31:25:b3:51:a2:11:f2:
1e:ff:56:5d:20:65:95:e2:a4:06:ef:74:07:02:4c:
db:8c:a1:c8:57:03:e3:b4:2f:2b:0f:9c:0e:ca:2c:
fb:85:68:22:84:19:12:45:54:3a:f2:e6:a5:d7:b0:
88:d0:72:5b:bd:e8:99:46:46:7f:5f:61:28:17:e8:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:91:7B:C2:14:C1:05:CF:B9:5C:8F:76:04:B1:24:92:37:AC:91:37
X509v3 Authority Key Identifier:
keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:42:4a:6f:1c:6f:a0:20:52:5a:7d:f9:76:91:2b:04:c9:c5:
29:c9:5e:af:7d:2b:11:56:fe:ef:c4:ea:76:6b:47:5b:e9:c9:
66:0e:12:6b:92:d2:49:49:1b:44:f4:23:45:22:35:51:bd:d4:
b7:c8:07:65:fd:2e:3b:f1:a2:3b:b2:67:ef:cb:e2:e2:83:3a:
db:22:32:95:09:a0:75:35:40:61:bd:51:44:ec:fa:48:84:d8:
d2:9d:ef:f0:9e:75:04:6d:c1:ad:8e:6a:91:1c:48:a8:76:c7:
b4:52:91:7e:74:40:8c:8d:e6:21:1f:d2:90:3d:6a:43:81:5a:
b8:98:72:a7:cc:1c:2c:a2:d5:d3:27:7a:47:8a:30:c2:5d:ed:
8c:40:0f:52:54:18:3a:c7:73:ce:42:5c:37:fb:87:b2:d1:f8:
c3:9f:cd:a7:42:27:d9:b5:65:53:66:da:02:63:6e:e3:02:83:
d1:eb:a5:d4:13:c8:b7:64:13:e2:b0:83:bd:c3:66:89:cc:27:
29:cd:fd:f8:c5:75:33:c7:9b:9d:57:9c:09:0e:2c:3b:cc:45:
7e:0b:d7:fd:cd:c0:88:0a:1f:48:1c:9a:55:84:8e:6e:d3:22:
9e:86:3a:60:18:2a:af:17:74:b2:21:cc:b6:92:6a:4e:1b:25:
6a:8f:03:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:28:25 2026 by rpki-client