
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
File: UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json)
Hash identifier: 0ZSI504C3cv7nqXS9u+qRLl9pFGXuMOJwyoEswN0c50=
Subject key identifier: 11:62:CD:37:90:8D:C2:D2:31:F2:D3:4F:CB:27:C8:5A:FC:11:7D:8A
Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13
Certificate issuer: /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13
Certificate serial: 0C29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
Manifest number: 0C1F
Signing time: Thu 16 Apr 2026 18:42:30 +0000
Manifest this update: Thu 16 Apr 2026 18:42:30 +0000
Manifest next update: Thu 23 Apr 2026 18:42:30 +0000
Files and hashes: 1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: GBZRLYhHqPTGi0+EgVRfrg6sWgZ74Wm16jYIcgn+8cU=)
2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: HVSrkMHkZUPuPigIBAFRqYkv/0wRB+c6OCpvUKZ3fUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl
rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:42:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3113 (0xc29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117754, serialNumber=531749095E449FD82AA1DB50DA834017230BDD13
Validity
Not Before: Apr 16 18:42:30 2026 GMT
Not After : Apr 23 18:42:30 2026 GMT
Subject: CN=69e12d96-c4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:f8:42:01:3e:3d:a7:bb:71:ed:fc:5d:09:
9b:da:fb:51:0b:d3:23:44:3a:f7:a7:fe:35:60:61:
8d:33:17:69:b4:36:fe:6e:4f:92:14:24:8b:c3:c1:
7c:29:37:4a:2e:a1:b9:28:23:6f:ab:dd:d4:88:bb:
d8:0e:a2:a1:ac:74:4a:f3:c2:d1:95:0b:f9:fb:73:
d5:a8:9a:9b:ca:2f:12:40:30:dd:b7:a1:c8:d7:dd:
95:95:a6:94:96:6e:7d:7b:05:69:05:92:af:6f:60:
f3:b8:5c:48:b0:e3:a7:ba:ce:b5:54:6f:17:04:c1:
20:a2:78:95:47:8c:7a:8e:35:e4:4f:b9:c2:e8:0d:
58:aa:a7:d8:c8:1b:ce:af:64:7a:27:98:6b:81:dd:
9c:62:79:fd:ae:e5:67:1f:75:2c:2d:7d:bb:3a:64:
f2:bf:89:56:a0:af:96:6c:ca:6f:51:b1:9a:1d:83:
cb:f1:e0:6d:c1:55:b6:65:91:ff:72:9d:22:1c:5a:
5c:c8:46:c2:6d:fc:b6:ea:ae:de:e1:89:b2:47:f7:
76:4e:5f:e9:f4:34:57:29:73:27:a9:7d:6f:ec:77:
95:74:26:15:70:bd:70:8f:a0:fd:5a:46:d9:c8:20:
05:85:c6:fb:35:c9:cd:ce:90:34:16:fe:ee:19:4c:
e4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:62:CD:37:90:8D:C2:D2:31:F2:D3:4F:CB:27:C8:5A:FC:11:7D:8A
X509v3 Authority Key Identifier:
keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:d5:7d:35:b7:06:03:5e:0d:79:e9:03:5b:d8:bc:3e:c5:54:
d7:83:0f:97:4b:2d:59:ba:12:9a:0e:ed:09:c7:12:d5:a5:84:
3f:7c:23:12:4b:e5:0b:e6:da:5a:0b:89:fb:a5:b8:62:e6:07:
a0:95:3f:45:5e:a3:6d:0b:ad:88:02:aa:3b:8e:b0:c6:5b:8d:
19:f1:19:23:8e:f2:7d:e5:17:45:2c:ac:4d:74:4b:3a:28:80:
e0:1f:0b:f0:89:48:b7:30:ca:0e:a8:59:0f:e1:ed:bd:e3:1d:
95:e2:34:ed:cb:e0:4d:a8:2f:6f:65:97:23:a0:0d:c9:ca:68:
a9:38:b2:c8:fe:2d:37:10:9e:10:72:9e:11:cd:ff:86:6e:a8:
b5:b5:da:8a:cb:c7:af:d5:ec:c5:10:85:94:b1:39:a1:1b:1e:
eb:16:90:81:8e:b0:b5:76:cc:58:77:e7:54:1d:05:b7:bb:a6:
85:d0:e6:00:76:57:de:03:da:0c:ff:d5:96:a5:36:1b:af:08:
ca:15:22:a9:a8:f8:97:63:3c:25:d9:33:89:3e:84:9c:81:fb:
82:66:bc:12:77:8f:07:15:18:b5:be:96:62:62:4f:2b:12:d6:
6f:48:fe:90:87:41:c7:c5:f5:4e:9f:ea:b0:b3:c2:76:4e:58:
ee:02:cf:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc3NTQxMTAvBgNVBAUTKDUzMTc0OTA5NUU0NDlGRDgyQUExREI1MERBODM0MDE3
MjMwQkREMTMwHhcNMjYwNDE2MTg0MjMwWhcNMjYwNDIzMTg0MjMwWjAYMRYwFAYD
VQQDEw02OWUxMmQ5Ni1jNGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwyn4QgE+Pae7ce38XQmb2vtRC9MjRDr3p/41YGGNMxdptDb+bk+SFCSLw8F8
KTdKLqG5KCNvq93UiLvYDqKhrHRK88LRlQv5+3PVqJqbyi8SQDDdt6HI192VlaaU
lm59ewVpBZKvb2DzuFxIsOOnus61VG8XBMEgoniVR4x6jjXkT7nC6A1YqqfYyBvO
r2R6J5hrgd2cYnn9ruVnH3UsLX27OmTyv4lWoK+WbMpvUbGaHYPL8eBtwVW2ZZH/
cp0iHFpcyEbCbfy26q7e4YmyR/d2Tl/p9DRXKXMnqX1v7HeVdCYVcL1wj6D9WkbZ
yCAFhcb7NcnNzpA0Fv7uGUzkGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBFizTeQ
jcLSMfLTT8snyFr8EX2KMB8GA1UdIwQYMBaAFFMXSQleRJ/YKqHbUNqDQBcjC90T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzc1NC84QjMxNDVBRTJD
OEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45Z3FvZHRRMm9OQUZ5TUwz
Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V4ZEpDVjVFbjlncW9kdFEyb05BRnlNTDNSTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Nzc1NC84QjMxNDVBRTJDOEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45
Z3FvZHRRMm9OQUZ5TUwzUk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASNV9NbcGA14NeekDW9i8PsVU14MPl0stWboSmg7tCccS1aWEP3wjEkvlC+ba
WguJ+6W4YuYHoJU/RV6jbQutiAKqO46wxluNGfEZI47yfeUXRSysTXRLOiiA4B8L
8IlItzDKDqhZD+HtveMdleI07cvgTagvb2WXI6ANycpoqTiyyP4tNxCeEHKeEc3/
hm6otbXaisvHr9XsxRCFlLE5oRse6xaQgY6wtXbMWHfnVB0Ft7umhdDmAHZX3gPa
DP/VlqU2G68IyhUiqaj4l2M8JdkziT6EnIH7gma8EnePBxUYtb6WYmJPKxLWb0j+
kIdBx8X1Tp/qsLPCdk5Y7gLPzQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:09:24 2026 by rpki-client