
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
File: UhRr8Q81lfF6kjn1NmTdbAE-L58.mft (raw, json)
Hash identifier: 3jAXcu4SnB+vdGYp2f+/4SLfh59K5vVB+SKjgCOD2gk=
Subject key identifier: 10:0D:49:1F:09:86:96:0A:90:B1:81:23:62:11:B2:48:23:AD:6E:19
Authority key identifier: 52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F
Certificate issuer: /CN=A912B8A1/serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F
Certificate serial: 0383
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
Manifest number: 037F
Signing time: Sun 01 Mar 2026 01:40:36 +0000
Manifest this update: Sun 01 Mar 2026 01:40:36 +0000
Manifest next update: Sun 08 Mar 2026 01:40:36 +0000
Files and hashes: 1: UhRr8Q81lfF6kjn1NmTdbAE-L58.crl (hash: Nb6dN4WyuI+G+x6HUveDfMfU/+Ok/2zTQ7/q+6eSeMw=)
2: 1A922B26DCD711EC87E30728C4F9AE02.roa (hash: XEGSj7dQ6VTCZmneur6OMrLP6cXWkey7miJkuempT94=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl
rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 899 (0x383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B8A1, serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F
Validity
Not Before: Mar 1 01:40:36 2026 GMT
Not After : Mar 8 01:40:36 2026 GMT
Subject: CN=69a39914-d4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4d:2d:93:81:ca:09:73:ab:ad:e9:59:a5:b6:
c5:68:1b:ac:0a:1b:41:d4:da:20:fa:90:59:d1:2d:
ec:91:8a:a5:5e:57:5f:7d:70:ad:25:a9:78:53:38:
71:88:11:fd:ce:bd:02:a7:47:0e:91:4b:e6:a8:85:
3c:65:53:fc:11:61:a5:b4:2e:0c:be:db:b9:80:ff:
2e:16:f1:d1:6e:7c:7a:83:ff:36:1a:b3:0e:16:42:
6d:db:0a:7a:b0:df:15:fa:ec:c4:47:a3:3f:64:ef:
6b:7f:b4:dd:7c:63:e4:9c:cf:da:24:72:16:9f:53:
d4:da:69:39:62:44:cb:65:52:ea:94:8b:05:14:df:
cc:93:70:57:a6:bf:28:4b:19:dd:80:1f:a9:ef:58:
3a:98:97:2c:a7:d7:a1:37:d4:69:05:37:ba:ee:80:
9c:90:1b:8c:b8:70:77:48:0b:cb:48:58:dd:1f:f1:
ce:bb:e7:b0:55:b6:5c:13:a9:d1:51:54:e3:b4:08:
27:bc:94:63:21:c7:ba:a7:04:23:d8:a4:d0:47:04:
a1:80:fd:8f:93:d5:ec:f7:dc:b7:68:59:fb:64:de:
d6:95:7b:4d:64:6a:15:ec:a0:49:23:2c:8f:b0:d9:
fe:e2:58:be:3b:d2:3d:9a:e7:3e:2a:79:07:0e:21:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0D:49:1F:09:86:96:0A:90:B1:81:23:62:11:B2:48:23:AD:6E:19
X509v3 Authority Key Identifier:
keyid:52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:da:8b:10:c2:dc:fc:2d:94:9a:9c:e6:3f:d4:37:2e:64:0e:
92:6e:b3:ae:c6:c7:c7:41:b8:01:6e:8e:f6:8a:4d:ae:cd:5a:
93:61:c2:24:02:67:fb:ac:d8:41:84:e1:2c:27:d1:c6:5d:45:
75:30:f5:2a:78:3c:42:19:f0:8e:25:6c:ea:34:f7:22:59:75:
27:d9:26:0f:99:c6:06:96:df:7d:24:d1:95:2b:15:75:c5:35:
25:8c:28:d5:c5:87:ce:cc:a4:4b:43:f8:cf:23:f0:e6:b5:1d:
24:dd:73:79:36:fa:29:80:1e:fe:f8:6b:fa:5f:4c:bf:fe:3a:
49:d6:79:5b:24:91:92:75:2c:f4:3c:9b:07:d8:d2:00:41:39:
fa:d1:44:e5:fa:57:3d:a5:9a:b9:51:2f:10:0d:70:04:2e:99:
f4:ae:87:f9:2a:15:e5:46:5f:1a:5c:7d:62:7e:0f:0f:9a:71:
ac:84:76:74:9a:72:e0:48:a4:42:86:6d:2a:79:d6:3f:48:99:
b7:01:31:1f:ab:55:07:09:54:f6:e2:81:ec:a9:dc:9b:21:e1:
d3:6d:b6:2f:a0:77:ac:63:6d:73:92:d7:de:b4:71:00:51:fd:
4d:48:b2:90:99:84:16:3e:1b:17:06:2b:73:05:d4:38:aa:31:
89:8a:42:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:56:48 2026 by rpki-client