
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
File: UZQtJe28pR36Vs4J7TYet6JtvSU.mft (raw, json)
Hash identifier: /V2bau8Z4r8XmpL3IgyVxDSJA0YOeT7iLyG1JtZMAgQ=
Subject key identifier: 49:E3:A4:DE:6B:4A:9C:AD:5C:0D:1C:4F:AA:97:A9:77:41:ED:98:94
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial: 0A05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
Manifest number: 09CC
Signing time: Mon 02 Mar 2026 00:42:01 +0000
Manifest this update: Mon 02 Mar 2026 00:41:59 +0000
Manifest next update: Mon 09 Mar 2026 00:41:59 +0000
Files and hashes: 1: UZQtJe28pR36Vs4J7TYet6JtvSU.crl (hash: f0LZtDvBtD5B1OAAvCt72GpgmWG+k8bJsv0cGFIf7zQ=)
2: EF575A8E05B411F1B5F4D87B093D8C67.roa (hash: JT+5Gcslwlx1r0hU+OlT6Xguw+r24FQ8M+Uibf6rHxw=)
3: 4729B9CC10B011F19AF5FC353C3D8C67.roa (hash: VqNnuqSCIIyBQXY/qiP6LngG1wDJOTUfMmewOwwlpxk=)
4: A837ACBA072311F1857499832B3D8C67.roa (hash: kLIQMU/1+OWEQ00tXB9bahteZuevt4BTHzYh2B2K2I0=)
5: E350F182060411F192CA7B231D3D8C67.roa (hash: 8eg4WpDQ17b1CxcyQLYtPFeBceYv8sn2OO0ZgMPrrDg=)
6: 6602AEE2CD7411EFB3DC8110C4F9AE02.roa (hash: C/SrkSyxC6zRVkJr/VHN4u2NMwkfLPcm1m72Nr1WtQ4=)
7: A8B9DDF2072311F1857499832B3D8C67.roa (hash: KoU18i49FcF00itCFlqsB1QA2rdUhztS1SgwCQJArbA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:41:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2565 (0xa05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Validity
Not Before: Mar 2 00:41:59 2026 GMT
Not After : Mar 9 00:41:59 2026 GMT
Subject: CN=69a4dcd8-66ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:91:11:85:e0:94:5d:33:b3:b3:4d:6f:e3:
26:ad:7b:49:8f:54:19:3e:29:4b:24:8b:f0:2e:f7:
4e:30:01:b3:2c:18:78:4c:da:db:ee:7c:de:f8:92:
05:f5:2f:5e:4f:90:0d:4c:31:96:90:8c:34:8e:b0:
74:69:98:f5:a9:f1:e8:f5:c7:d9:77:2c:e9:3f:f5:
04:b5:f6:6f:4c:ef:35:88:0d:d4:7b:de:1c:57:d6:
4f:67:88:c1:46:8d:f6:0e:f6:90:d9:70:b3:8d:89:
4c:fd:a7:ef:5b:cf:12:a5:58:aa:25:95:f5:d5:25:
31:ab:fa:9b:28:20:c4:4a:93:47:32:90:2f:05:82:
97:6b:af:54:f1:6b:19:9c:55:af:8a:28:8e:c0:a5:
68:5d:4a:86:d5:91:b6:4b:72:a4:b2:03:45:4c:2e:
91:4c:1f:d5:ff:95:7d:51:c8:95:bf:8b:1a:92:69:
2c:c6:3d:13:c8:ee:b0:4c:dc:6b:a9:d2:83:75:15:
54:96:7d:a8:d6:08:01:ed:9b:49:9f:eb:2d:2e:ee:
53:0d:67:a5:5a:3a:7e:75:cc:86:52:ea:a0:17:5a:
67:d4:84:76:9e:94:60:d0:b6:d6:e6:cc:e4:24:17:
cd:32:d9:ea:23:06:b1:f1:1c:72:9b:b0:cf:16:8a:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E3:A4:DE:6B:4A:9C:AD:5C:0D:1C:4F:AA:97:A9:77:41:ED:98:94
X509v3 Authority Key Identifier:
keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:11:e5:40:bc:c8:be:bf:ee:72:df:99:9d:64:29:95:c7:74:
37:97:65:d8:e4:6d:25:f8:69:c1:42:f7:f9:60:c6:6b:b5:07:
af:fa:5e:38:ec:00:10:e3:9a:1d:e5:59:2d:67:f0:20:58:b9:
3e:69:47:4d:41:a5:bb:7c:45:44:70:11:18:0c:4d:14:00:a7:
59:c4:e6:b7:41:98:f3:02:e9:60:8f:ab:17:6e:6c:1d:73:96:
dc:9f:78:b7:e7:62:33:e2:6c:1a:f5:f1:b0:56:50:9b:3f:cf:
f1:42:f0:5e:a6:34:bb:2a:0f:70:a5:92:13:e9:5c:d9:46:84:
53:d7:36:0a:ed:b9:7a:d8:5e:15:b8:0f:68:ab:ed:d0:90:2e:
db:41:48:42:c5:a7:31:44:9b:66:61:6a:20:4a:45:6a:32:25:
d8:ec:d5:4e:e4:ed:8a:fd:6d:d3:86:94:0d:20:5f:d2:7b:bc:
05:f4:f0:fc:ab:c5:80:4e:d7:1c:28:a2:88:33:b6:44:8b:85:
1b:f8:86:50:46:78:6b:4c:f7:41:a4:b5:32:ef:cf:c1:b5:88:
32:70:16:47:0f:65:70:d7:d9:eb:1e:4a:e7:1a:f0:a0:9a:ac:
25:df:5f:ef:9c:d9:ed:d0:5d:c5:f6:c2:5e:10:76:b8:17:d6:
09:d8:b2:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFGQTQxMTAvBgNVBAUTKDUxOTQyRDI1RURCQ0E1MURGQTU2Q0UwOUVEMzYxRUI3
QTI2REJEMjUwHhcNMjYwMzAyMDA0MTU5WhcNMjYwMzA5MDA0MTU5WjAYMRYwFAYD
VQQDEw02OWE0ZGNkOC02NmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy8SREYXglF0zs7NNb+MmrXtJj1QZPilLJIvwLvdOMAGzLBh4TNrb7nze+JIF
9S9eT5ANTDGWkIw0jrB0aZj1qfHo9cfZdyzpP/UEtfZvTO81iA3Ue94cV9ZPZ4jB
Ro32DvaQ2XCzjYlM/afvW88SpViqJZX11SUxq/qbKCDESpNHMpAvBYKXa69U8WsZ
nFWviiiOwKVoXUqG1ZG2S3KksgNFTC6RTB/V/5V9UciVv4sakmksxj0TyO6wTNxr
qdKDdRVUln2o1ggB7ZtJn+stLu5TDWelWjp+dcyGUuqgF1pn1IR2npRg0LbW5szk
JBfNMtnqIwax8Rxym7DPFopjxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEnjpN5r
SpytXA0cT6qXqXdB7ZiUMB8GA1UdIwQYMBaAFFGULSXtvKUd+lbOCe02Hreibb0l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUZBNC9CNjc4NjJGQUFC
OTUxMUVBQjI1NTlDNUJDNEY5QUUwMi9VWlF0SmUyOHBSMzZWczRKN1RZZXQ2SnR2
U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VaUXRKZTI4cFIzNlZzNEo3VFlldDZKdHZTVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUZBNC9CNjc4NjJGQUFCOTUxMUVBQjI1NTlDNUJDNEY5QUUwMi9VWlF0SmUyOHBS
MzZWczRKN1RZZXQ2SnR2U1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHhHlQLzIvr/uct+ZnWQplcd0N5dl2ORtJfhpwUL3+WDGa7UHr/peOOwAEOOa
HeVZLWfwIFi5PmlHTUGlu3xFRHARGAxNFACnWcTmt0GY8wLpYI+rF25sHXOW3J94
t+diM+JsGvXxsFZQmz/P8ULwXqY0uyoPcKWSE+lc2UaEU9c2Cu25etheFbgPaKvt
0JAu20FIQsWnMUSbZmFqIEpFajIl2OzVTuTtiv1t04aUDSBf0nu8BfTw/KvFgE7X
HCiiiDO2RIuFG/iGUEZ4a0z3QaS1Mu/PwbWIMnAWRw9lcNfZ6x5K5xrwoJqsJd9f
75zZ7dBdxfbCXhB2uBfWCdiyzA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:28:40 2026 by rpki-client