
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
File: UGGUcQC8szKJ4moL3-zixfueCdI.mft (raw, json)
Hash identifier: dZiOW4VvexqHdLADkNmI3Xrw6s5ecXWXPLhO3UTjJdg=
Subject key identifier: AC:CE:B9:88:20:F1:1B:61:BB:DB:0E:F6:DF:A6:25:6F:C2:55:4E:74
Authority key identifier: 50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2
Certificate issuer: /CN=A912BD8E/serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
Manifest number: DA
Signing time: Mon 02 Mar 2026 01:15:06 +0000
Manifest this update: Mon 02 Mar 2026 01:15:04 +0000
Manifest next update: Mon 09 Mar 2026 01:15:04 +0000
Files and hashes: 1: UGGUcQC8szKJ4moL3-zixfueCdI.crl (hash: DotQRj5gN1mleD+Byt7x3K0HDVgNo24fiARRDSiujmY=)
2: 08C7D93ACE8911EFBEC5D618C4F9AE02.roa (hash: G7Bwkehqq1kfSJpx3NYkM02mA2lPINtW/O+sAQ3wQIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl
rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BD8E, serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
Validity
Not Before: Mar 2 01:15:04 2026 GMT
Not After : Mar 9 01:15:04 2026 GMT
Subject: CN=69a4e499-ad5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:da:34:99:84:9d:68:49:b8:1e:de:70:c3:60:
89:1c:ff:df:a5:44:d8:92:ae:29:4b:3e:00:e3:b4:
62:17:72:53:d4:94:74:47:23:e8:73:f2:96:53:1e:
d1:c3:ed:e2:0b:9a:0b:1e:df:e1:5f:e6:11:a0:0f:
11:24:c8:b5:01:5e:8e:7d:8e:1b:a9:89:4c:70:57:
49:6d:3e:19:1f:4a:2b:db:a1:ac:23:f6:3d:f0:c5:
29:d0:f4:90:3c:6c:36:6e:20:f8:f2:2a:76:85:12:
ac:55:3f:9e:ef:26:f6:3c:78:6c:17:8a:f1:66:c8:
34:1e:0a:b8:4b:04:0c:26:61:73:c9:ad:1f:f7:e7:
74:a9:75:4c:62:93:7e:b7:52:26:1e:fd:9b:d8:64:
69:b6:25:6e:7b:d2:13:b9:f0:7c:ca:83:c4:ef:dc:
1b:c7:b9:0d:b9:94:d9:e4:91:6e:d1:ab:ce:1c:54:
d7:7b:28:9f:50:1d:7a:0f:da:30:47:31:22:c7:17:
8a:ec:47:29:8b:fb:2d:5d:06:95:e4:f4:74:a8:af:
8f:22:98:88:86:c3:a5:99:55:c3:96:51:80:39:2a:
98:b9:92:55:93:d5:23:7c:cb:da:3e:07:62:96:52:
6d:e5:e2:da:a5:c0:c0:05:b9:8b:d4:f6:2a:b2:83:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CE:B9:88:20:F1:1B:61:BB:DB:0E:F6:DF:A6:25:6F:C2:55:4E:74
X509v3 Authority Key Identifier:
keyid:50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:b7:c0:a1:85:9e:49:c7:ec:ea:92:b0:50:d5:3e:76:c9:2a:
93:76:88:12:67:26:de:be:e3:ff:10:7d:95:67:37:a4:b6:ea:
e9:2b:43:a4:f2:65:37:6c:95:57:a7:dd:85:17:da:4b:43:ef:
08:7d:3b:b8:1a:e5:e9:e0:9c:e2:f0:bd:37:db:1b:ad:d7:68:
64:ce:eb:85:fa:69:a5:65:d5:27:d1:87:8a:ce:a7:84:96:06:
0a:56:18:a5:65:5b:ee:16:a1:c0:a2:43:47:5a:6e:93:16:60:
4c:51:d4:ec:0d:7f:6f:a2:bc:bd:3a:56:ba:e6:4f:95:05:49:
17:3d:15:64:16:57:1e:85:1d:0b:d5:eb:39:5c:5d:d8:60:18:
04:51:48:12:d7:43:98:eb:3d:0f:32:d5:2b:17:54:68:a9:42:
3e:c6:0d:ca:60:c2:9f:df:ed:63:c9:8e:c1:05:44:e0:6c:b7:
b7:37:a0:3b:7f:3e:b2:14:ae:df:3e:c5:68:43:44:56:53:9b:
a0:dc:46:5d:ef:a8:14:a4:94:d8:53:1a:48:22:94:e8:db:f0:
6d:df:d1:db:78:b3:6c:bc:11:12:b6:2c:df:23:a0:0a:12:4e:
c9:e6:03:5f:65:74:85:9d:ad:e0:a1:c5:da:59:9b:0f:eb:f8:
24:d1:68:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:30 2026 by rpki-client