
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
File: UZQtJe28pR36Vs4J7TYet6JtvSU.mft (raw, json)
Hash identifier: Vtd9+NA6TnitjokGswQxC916OIjNbCj7NZ1qBrxqyHM=
Subject key identifier: 11:70:76:2B:9C:E2:27:5C:9C:BF:F1:91:EC:87:40:E5:3A:D0:AA:7B
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial: 0A50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
Manifest number: 0A0B
Signing time: Fri 12 Jun 2026 19:57:58 +0000
Manifest this update: Fri 12 Jun 2026 19:57:57 +0000
Manifest next update: Fri 19 Jun 2026 19:57:57 +0000
Files and hashes: 1: UZQtJe28pR36Vs4J7TYet6JtvSU.crl (hash: Q48shvcjvPNJzGWoQvfmaLBV/Ze32GsZVOq/oEma4iw=)
2: A837ACBA072311F1857499832B3D8C67.roa (hash: kLIQMU/1+OWEQ00tXB9bahteZuevt4BTHzYh2B2K2I0=)
3: E2891A621EA111F1917EDCD9123D8C67.roa (hash: gEX8Atz/LLQf1n/y8rRUMSuwdmjVhyMahE2Jamzx/nI=)
4: C37BD92A1EA111F1B2DD47B2123D8C67.roa (hash: ATlrZQLMN1i/u5Bq0wuL1/pAApfhNtO3TRUif4rFqr0=)
5: A476C8C41EA011F187B67505113D8C67.roa (hash: W8WqvCmfqjbYm/Nsa9FcNN92lO+HROWGL8GeAXxnfuk=)
6: 4729B9CC10B011F19AF5FC353C3D8C67.roa (hash: XieuBOApj93vMX/PSd4DPB5YCJHLqVArIOgws7wb0zA=)
7: C1D6AD981EA111F1B2DD47B2123D8C67.roa (hash: t7Va3DBJIf7NqIYUpRn9OjFokUb0h7zcGhor8Wmv+E4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2640 (0xa50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Validity
Not Before: Jun 12 19:57:57 2026 GMT
Not After : Jun 19 19:57:57 2026 GMT
Subject: CN=6a2c64c6-621f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:4d:08:81:74:fe:33:ec:3a:4b:b3:d1:70:
6a:b0:af:8e:60:09:fd:6d:86:9c:a7:f4:fb:10:63:
29:8d:19:8b:3e:29:4a:06:c3:b2:6a:89:c8:6c:22:
17:e5:f8:9d:45:e8:0a:87:6f:f8:13:08:4f:dd:f7:
21:40:8f:18:88:34:9b:69:09:ba:de:5a:e9:9c:a0:
b6:be:b5:b9:06:8a:76:c8:a1:85:33:bf:0d:18:ee:
7b:3f:f5:a3:2b:8d:6c:cf:42:eb:0d:cf:9a:31:89:
e6:19:5c:b3:38:6d:cb:d4:15:d0:5a:43:bd:c3:99:
e3:77:71:a7:36:c2:8a:e4:2e:ad:8c:b3:59:e8:54:
9d:73:7f:a0:dd:6c:19:44:e0:32:0f:42:3b:19:bf:
ec:10:b6:33:e2:ae:11:61:31:a5:af:ed:df:8f:ef:
4f:fa:ea:2c:c1:74:bb:5e:75:b6:24:cf:6b:1e:c7:
ef:7d:f6:36:48:5d:11:0a:03:98:b8:51:77:12:a1:
58:4e:4e:a3:99:1d:b4:bb:00:4b:64:eb:9a:06:e4:
2b:a1:2f:e8:77:06:7c:5d:57:cd:83:9e:10:fc:9c:
5c:4c:e8:2d:a3:9b:ac:78:73:62:cd:eb:54:01:ce:
12:9d:e9:5b:3e:98:c9:53:9d:e9:0f:9d:be:5f:e5:
01:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:70:76:2B:9C:E2:27:5C:9C:BF:F1:91:EC:87:40:E5:3A:D0:AA:7B
X509v3 Authority Key Identifier:
keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:25:66:56:a8:4b:1a:e7:64:b0:b1:3b:5d:0d:41:36:28:20:
cc:0b:fb:35:b5:6c:03:d1:32:ba:99:8e:50:1a:45:cf:17:f7:
f6:eb:51:25:56:ef:ad:68:9a:31:51:61:b7:bb:5d:94:b2:7a:
55:9d:ef:86:bd:1b:9a:17:b9:d7:0a:68:d2:79:c4:c5:73:ff:
00:a0:65:fb:23:39:ca:64:1b:49:e4:62:c2:11:9f:27:7e:d5:
9a:97:d6:fc:4a:9f:da:59:a2:6f:68:e0:59:70:f4:b2:bc:71:
60:4a:60:ec:b0:47:52:a9:6c:c9:0c:5d:45:f4:9d:1f:2a:b4:
6d:8a:cf:34:39:40:53:bb:1c:ee:89:33:ca:56:e5:8f:dd:2c:
a6:9d:e7:0a:0c:79:5b:87:0d:58:b5:0d:4d:08:81:9a:a1:d7:
cd:89:5e:86:52:f6:9f:59:5a:fa:36:14:94:28:ae:53:de:66:
6c:64:ef:d0:9f:a4:f0:f9:a7:a8:90:69:3d:42:21:61:b9:6d:
36:69:a4:56:4a:47:b0:b2:21:61:c6:8c:a5:1d:4e:ef:43:8b:
4b:86:ec:86:d9:8b:dc:46:2a:25:4a:1c:40:2a:6f:86:25:2b:
e7:9e:39:33:98:f8:32:a2:86:27:1b:d1:2d:9e:81:8b:fc:9c:
16:cd:48:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICClAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFGQTQxMTAvBgNVBAUTKDUxOTQyRDI1RURCQ0E1MURGQTU2Q0UwOUVEMzYxRUI3
QTI2REJEMjUwHhcNMjYwNjEyMTk1NzU3WhcNMjYwNjE5MTk1NzU3WjAYMRYwFAYD
VQQDEw02YTJjNjRjNi02MjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArbJNCIF0/jPsOkuz0XBqsK+OYAn9bYacp/T7EGMpjRmLPilKBsOyaonIbCIX
5fidRegKh2/4EwhP3fchQI8YiDSbaQm63lrpnKC2vrW5Bop2yKGFM78NGO57P/Wj
K41sz0LrDc+aMYnmGVyzOG3L1BXQWkO9w5njd3GnNsKK5C6tjLNZ6FSdc3+g3WwZ
ROAyD0I7Gb/sELYz4q4RYTGlr+3fj+9P+uoswXS7XnW2JM9rHsfvffY2SF0RCgOY
uFF3EqFYTk6jmR20uwBLZOuaBuQroS/odwZ8XVfNg54Q/JxcTOgto5useHNizetU
Ac4SnelbPpjJU53pD52+X+UBmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBFwdiuc
4idcnL/xkeyHQOU60Kp7MB8GA1UdIwQYMBaAFFGULSXtvKUd+lbOCe02Hreibb0l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUZBNC9CNjc4NjJGQUFC
OTUxMUVBQjI1NTlDNUJDNEY5QUUwMi9VWlF0SmUyOHBSMzZWczRKN1RZZXQ2SnR2
U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VaUXRKZTI4cFIzNlZzNEo3VFlldDZKdHZTVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUZBNC9CNjc4NjJGQUFCOTUxMUVBQjI1NTlDNUJDNEY5QUUwMi9VWlF0SmUyOHBS
MzZWczRKN1RZZXQ2SnR2U1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAISVmVqhLGudksLE7XQ1BNiggzAv7NbVsA9EyupmOUBpFzxf39utRJVbvrWia
MVFht7tdlLJ6VZ3vhr0bmhe51wpo0nnExXP/AKBl+yM5ymQbSeRiwhGfJ37VmpfW
/Eqf2lmib2jgWXD0srxxYEpg7LBHUqlsyQxdRfSdHyq0bYrPNDlAU7sc7okzylbl
j90spp3nCgx5W4cNWLUNTQiBmqHXzYlehlL2n1la+jYUlCiuU95mbGTv0J+k8Pmn
qJBpPUIhYbltNmmkVkpHsLIhYcaMpR1O70OLS4bshtmL3EYqJUocQCpvhiUr5545
M5j4MqKGJxvRLZ6Bi/ycFs1Igw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:33:43 2026 by rpki-client