
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft
File: ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft (raw, json)
Hash identifier: azV8S9Faqw2bjbSRNu1fHUWklEWSpUgsEhAOYVjkM0U=
Subject key identifier: DB:17:CC:74:42:ED:33:46:9E:95:54:70:01:BC:FB:30:A7:A7:E3:BF
Authority key identifier: B9:FC:5C:14:B2:D2:75:29:D5:0E:6E:59:3D:A8:CB:0A:A8:7D:65:10
Certificate issuer: /CN=A911F587/serialNumber=B9FC5C14B2D27529D50E6E593DA8CB0AA87D6510
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft
Manifest number: 09
Signing time: Mon 02 Mar 2026 11:02:45 +0000
Manifest this update: Mon 02 Mar 2026 11:02:45 +0000
Manifest next update: Mon 09 Mar 2026 11:02:45 +0000
Files and hashes: 1: ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl (hash: EBcY7h37lmUR8OZfWBzAfQ4gYqCp+VxOlx5zpBXqqRk=)
2: CE3E7CF6136F11F1982A4804323D8C67.roa (hash: 433GVnEHsEmqM+RA2zhP/NFczVjY5LHUX58RsvVfVKM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl
rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 11:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F587, serialNumber=B9FC5C14B2D27529D50E6E593DA8CB0AA87D6510
Validity
Not Before: Mar 2 11:02:45 2026 GMT
Not After : Mar 9 11:02:45 2026 GMT
Subject: CN=69a56e55-73d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:b0:06:0b:65:2f:37:b5:87:03:db:01:d3:
41:55:47:83:4a:1f:ef:1d:74:ce:3f:3c:c4:50:c5:
76:8a:71:1d:6d:5c:83:1a:19:a0:28:b4:91:a7:bf:
a1:04:dc:0a:bf:52:93:1f:95:69:c2:6e:65:59:6e:
42:c1:25:fc:6c:61:81:e0:58:ac:2c:16:53:74:f5:
d5:c0:e9:35:0e:4c:06:37:a9:cf:51:96:26:09:3a:
95:5f:c9:f0:06:1a:9e:97:66:dd:e4:cb:02:ca:47:
63:8e:bc:92:f0:59:bd:32:27:5b:80:82:a8:ae:40:
56:d2:60:e3:b3:51:a1:14:33:d9:e6:75:0a:b8:02:
43:3c:c7:96:08:42:7c:2d:c3:22:2e:4d:3f:53:c5:
12:ad:cf:f8:31:d1:b7:8b:a0:39:e8:ef:d8:6e:e7:
e1:ed:09:e0:85:13:8b:6a:5d:07:8d:ce:16:13:59:
ba:97:4f:b9:7e:fe:4d:d4:c6:3c:d1:b0:33:7f:e0:
7b:a1:d5:48:92:08:37:11:ac:db:ee:5a:49:10:47:
9b:a0:fa:af:c3:9d:b6:67:52:b8:b2:26:a9:88:e0:
74:fa:68:89:ca:22:b6:55:55:fd:27:5b:3c:2d:a4:
6f:db:b1:99:f0:fc:3f:57:68:51:79:7a:46:5a:5b:
d2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:17:CC:74:42:ED:33:46:9E:95:54:70:01:BC:FB:30:A7:A7:E3:BF
X509v3 Authority Key Identifier:
keyid:B9:FC:5C:14:B2:D2:75:29:D5:0E:6E:59:3D:A8:CB:0A:A8:7D:65:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ea:27:5c:26:96:b0:cc:ed:8e:a0:1c:35:4f:e7:b9:dc:e4:
ed:92:8b:e8:2b:7b:a0:99:39:d1:70:81:1f:ed:4a:8f:71:da:
e7:aa:cb:f4:cf:cc:e5:89:2d:cf:f1:69:e5:a5:8e:a5:f3:7e:
12:39:61:f0:03:3f:00:17:8b:02:0e:aa:99:a3:e3:12:0c:61:
98:7b:fe:4e:37:b2:58:4b:c7:4e:15:48:7b:5a:a1:ae:d4:3d:
75:70:a6:33:02:a5:e1:9b:b5:dc:38:23:6f:b6:6b:3f:ef:d3:
d0:3d:04:d1:9e:ef:6e:a7:e4:74:66:98:44:65:14:53:9c:64:
df:f2:89:c9:0e:30:aa:7a:c7:89:58:04:c3:41:01:c2:47:bf:
b8:f2:19:f5:66:2b:64:79:6d:c1:68:41:49:52:6f:6a:2c:5b:
5c:8a:c2:ac:4c:96:bd:42:2e:60:6c:88:a3:19:c1:93:70:41:
44:4c:0e:e2:4a:84:27:e9:d4:07:4f:34:a3:3a:de:1e:68:e9:
b2:63:e9:7c:09:46:b6:95:b3:37:59:c8:8c:0a:60:55:6e:db:
71:ee:23:5c:a5:75:e4:e2:a9:bb:ca:69:db:78:39:93:12:bb:
e4:ed:b7:10:cf:1b:e0:c3:9a:f0:0a:65:72:04:34:f2:ae:16:
d4:c5:a7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:35:17 2026 by rpki-client