
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft
File: u4lwRaiPyB_M_jjl92FYT9y6zoU.mft (raw, json)
Hash identifier: /F7IyGV3UIx6r9OtgbMlwFIwmDoBwvTAriFJgLxAobg=
Subject key identifier: 52:85:46:3E:3A:3C:A5:1A:15:C0:A0:EC:B9:E2:13:AC:B8:E0:A0:C1
Authority key identifier: BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85
Certificate issuer: /CN=A9128553/serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85
Certificate serial: 0372
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft
Manifest number: 0368
Signing time: Sun 01 Mar 2026 23:50:50 +0000
Manifest this update: Sun 01 Mar 2026 23:50:47 +0000
Manifest next update: Sun 08 Mar 2026 23:50:47 +0000
Files and hashes: 1: u4lwRaiPyB_M_jjl92FYT9y6zoU.crl (hash: 7/VNNhO/pYUBsrljgVPVRumvSKk0ICKbkguoTCijw4Y=)
2: AB8BCCA8908011F0B114A05CC4F9AE02.roa (hash: Fe5K6ZkUrGV8sNMXvsh32QNy4vnrTCujmZ10PMxAPR4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl
rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:50:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 882 (0x372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128553, serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85
Validity
Not Before: Mar 1 23:50:47 2026 GMT
Not After : Mar 8 23:50:47 2026 GMT
Subject: CN=69a4d0d9-73f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:67:9c:21:45:79:fb:b2:b1:2f:eb:71:17:18:
58:6c:1d:b4:7c:79:d5:6c:02:95:a7:39:86:03:20:
d1:95:28:b2:69:0e:aa:c9:b8:bd:df:9b:ce:81:bf:
27:70:4a:ec:8a:73:f2:24:1f:e9:9d:1d:40:e7:7e:
20:90:60:b9:eb:4d:51:a7:96:fd:e1:09:67:75:32:
f0:01:90:cd:e3:7b:47:e5:3e:2a:ce:89:be:69:d1:
e9:6e:fd:9f:dd:09:ff:e8:cc:1a:37:c6:bb:b5:d6:
82:72:d1:17:d9:c8:08:30:91:71:7c:59:37:10:52:
5f:9c:5e:e1:7b:55:03:7f:3f:33:cd:60:40:8a:a4:
3c:b7:6f:ca:10:f8:3e:cc:dd:80:c1:05:17:51:f0:
c7:b8:b9:87:a0:1d:0a:b6:7b:49:06:c8:0e:02:ac:
a5:f2:f2:fc:ee:0d:d9:96:c8:30:43:f1:9f:14:bd:
4c:8b:9e:cf:55:c3:ed:5c:8b:17:f5:03:5c:08:f7:
a7:a9:a6:3d:0f:27:29:e7:e4:02:23:ca:28:cb:ca:
21:58:1b:49:62:26:67:3a:e9:cb:32:0a:a2:62:49:
1e:6d:ad:ca:9f:1d:48:f0:e6:97:67:b7:ca:5d:c9:
fc:8f:bc:7b:c3:d7:90:ac:50:dc:ad:3d:a5:8e:1e:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:85:46:3E:3A:3C:A5:1A:15:C0:A0:EC:B9:E2:13:AC:B8:E0:A0:C1
X509v3 Authority Key Identifier:
keyid:BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:04:5a:05:55:cf:12:a7:c4:50:fd:0b:2e:7a:1f:de:78:34:
4e:1f:44:d7:d1:b8:12:a8:4a:0e:2a:28:f5:c5:e6:2c:47:c5:
5e:d3:23:67:52:2a:34:ff:e8:c0:63:68:3d:35:42:f9:56:57:
44:7a:6c:de:a0:2e:40:58:31:da:e0:53:fc:ed:a8:16:3d:ea:
ec:4d:cb:8e:bc:6d:bb:17:e6:5e:b2:04:54:64:a3:86:af:b5:
0b:da:b4:3f:57:07:4b:f3:eb:66:a5:78:83:86:6b:8d:7e:66:
8a:5b:81:a4:bd:48:d7:72:b8:2d:3b:80:8b:05:44:fb:e6:31:
77:fa:45:91:e5:aa:ec:54:f2:d5:7a:94:5e:f2:65:e1:4b:46:
eb:cb:92:5a:a7:01:ed:08:b1:f6:03:86:51:be:d1:ca:8c:f9:
31:d3:8d:40:f0:7a:34:55:c6:2f:25:28:6b:f4:f9:36:02:6d:
57:af:d1:7c:c9:db:c1:de:56:ca:7b:62:91:09:84:c7:57:12:
87:fe:df:53:dd:a4:b8:e7:f6:75:29:bc:c9:79:31:0d:2d:b6:
ac:7c:44:e4:96:84:fc:59:cd:82:4b:58:41:04:92:21:a8:0a:
5a:ce:7a:8a:11:aa:4d:ee:8d:08:bb:8a:9a:3e:86:a7:ab:51:
03:41:32:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:24 2026 by rpki-client