
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
File: uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft (raw, json)
Hash identifier: o+g/3FKXDnh7EXzgPqvA3rBwzVEdYSOXnCTszBZ1+lo=
Subject key identifier: 4E:4F:88:E1:08:15:CF:8C:0F:00:23:B3:A5:2C:D5:82:3D:CE:36:01
Authority key identifier: B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D
Certificate issuer: /CN=A911F2DF/serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D
Certificate serial: 01D2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
Manifest number: 01B7
Signing time: Wed 23 Sep 2026 03:52:08 +0000
Manifest this update: Wed 23 Sep 2026 03:52:07 +0000
Manifest next update: Wed 30 Sep 2026 03:52:07 +0000
Files and hashes: 1: uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl (hash: H8ra79qf1PgzuSOWvjWsig3T+Ubma3LcfC3UbBzAePc=)
2: 92E390AC958E11EF87A4040BC4F9AE02.roa (hash: bFWyMjM59KpMl2IdJ0Vj6yC7NnD6EqeOW3IYGS46pNA=)
3: 7FAE29E8958E11EF9CC0DD0AC4F9AE02.roa (hash: fhAGA7U+T9cLvdjqCVwOeUhhQP8Fkcx/sUcd0jEHT6k=)
4: 659B37E4958E11EFAFF1870AC4F9AE02.roa (hash: Oq52N/ekiWeIII4g9u3Cj+mGMLq4I3r8aDPxQbni/Mo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl
rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F2DF, serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D
Validity
Not Before: Sep 23 03:52:07 2026 GMT
Not After : Sep 30 03:52:07 2026 GMT
Subject: CN=6ab34ce7-a6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:e0:62:fb:5f:ca:41:4d:c5:d3:f4:b1:42:
ee:33:01:d3:f3:ed:00:01:b2:57:de:d4:c8:2f:50:
7b:db:fe:9f:3b:e3:b1:a6:1b:77:b0:d2:42:34:d0:
9c:bc:7c:c1:80:2f:81:98:0a:e5:52:66:46:b4:1c:
6c:f9:b9:b6:91:b9:7d:bc:91:52:e7:6e:2e:75:ed:
d6:10:01:f3:df:9a:51:cb:05:1b:96:85:35:84:04:
22:a0:d1:6d:9b:21:44:45:95:0d:04:c7:42:31:20:
b1:1e:fa:4b:d3:dd:fa:10:69:90:d7:5d:a9:a6:d3:
b5:f6:ca:00:11:d9:5c:b1:70:c8:f5:e3:20:e0:a0:
b4:2a:fb:c6:36:42:38:17:12:4a:93:1b:90:fe:9b:
cd:8a:5e:6e:2d:9e:eb:8a:b5:2a:fe:19:0c:4c:50:
2b:0c:1a:87:b7:ad:3a:98:b7:61:38:ed:32:a2:86:
7e:d4:d9:6b:82:d8:16:d6:fb:ac:09:88:2e:9a:03:
1b:4c:45:a0:e7:b3:1e:60:69:24:40:6c:dc:4a:68:
19:81:bc:31:0d:9d:f3:e1:0f:ce:43:0f:be:0a:c2:
40:4e:43:03:ce:a8:18:f5:d5:59:09:cc:9a:fd:df:
08:7c:13:88:44:cb:78:dd:2d:77:80:d0:00:50:f8:
ee:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4F:88:E1:08:15:CF:8C:0F:00:23:B3:A5:2C:D5:82:3D:CE:36:01
X509v3 Authority Key Identifier:
keyid:B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:36:35:11:4d:f7:94:94:1d:0d:7f:99:b3:3d:6c:0c:29:a4:
0f:f2:6b:29:55:df:38:f4:f6:e0:7f:61:18:2c:f8:bf:7f:33:
9a:e0:6a:66:91:c7:4b:4d:14:ea:a6:f1:9e:fe:bd:7b:7d:8d:
50:58:2e:e0:ac:55:34:1d:db:a6:e0:95:9f:41:60:6b:00:80:
c1:82:b4:ca:72:cf:49:fb:38:a4:31:3a:f8:bc:96:60:20:8a:
f4:dd:ea:29:20:05:e6:03:87:9d:dd:9b:cf:dd:64:c7:ef:0f:
db:59:15:19:f9:dd:3f:d6:e3:26:5d:39:de:58:dc:49:a9:99:
72:fa:06:d8:35:8c:0f:12:f2:02:4d:dd:4f:38:f6:94:70:b7:
dd:09:85:29:10:e4:de:4b:bc:c3:f4:c0:3d:fa:4b:50:6e:a2:
62:79:50:99:e9:32:34:ea:e5:ce:46:ad:81:ea:7f:eb:9c:93:
49:ee:62:3c:6e:92:32:57:ce:ca:5e:6c:8d:db:8b:ca:78:0e:
36:e7:50:a5:ed:ce:c3:01:fe:34:07:f9:21:32:eb:e9:0e:11:
bc:e4:5a:1b:cc:5d:53:c9:2c:c6:9a:11:0c:3e:79:7e:99:5a:
5f:29:eb:c4:46:5d:78:2d:e3:ac:e0:1b:75:c2:ce:63:48:3f:
b0:2d:81:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:43:36 2026 by rpki-client