
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
File: UGGUcQC8szKJ4moL3-zixfueCdI.mft (raw, json)
Hash identifier: T3YPZiIP6zfMmr9Ul3us4odKOc8SNAsDIA3/IUmZmxU=
Subject key identifier: 0D:3F:42:91:5B:81:E1:60:B6:97:E0:E0:55:01:AB:75:D9:3D:50:55
Authority key identifier: 50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2
Certificate issuer: /CN=A912BD8E/serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
Manifest number: 0124
Signing time: Mon 27 Jul 2026 07:44:51 +0000
Manifest this update: Mon 27 Jul 2026 07:44:50 +0000
Manifest next update: Mon 03 Aug 2026 07:44:50 +0000
Files and hashes: 1: UGGUcQC8szKJ4moL3-zixfueCdI.crl (hash: PzpRU3fIjGnqUbEhAAe52XIpRysDuC5bgnEPffB+Rd0=)
2: 08C7D93ACE8911EFBEC5D618C4F9AE02.roa (hash: G7Bwkehqq1kfSJpx3NYkM02mA2lPINtW/O+sAQ3wQIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl
rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BD8E, serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
Validity
Not Before: Jul 27 07:44:50 2026 GMT
Not After : Aug 3 07:44:50 2026 GMT
Subject: CN=6a670c72-91f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:ce:6b:a9:d1:37:e5:b8:00:d4:6a:99:bc:
d5:3d:39:26:b5:3d:f1:e3:05:88:3f:f9:48:27:aa:
81:69:fd:2a:ba:5c:35:65:73:a7:f6:c1:7e:e3:78:
01:fb:82:04:3a:c5:7a:e2:fd:a7:92:0d:c7:7f:05:
b8:12:37:c5:ac:31:2e:33:45:86:f2:d0:c5:1e:ba:
ee:3c:5e:5f:3a:39:a8:e5:0b:8a:21:d4:e9:81:2c:
cb:7e:af:30:80:be:de:89:ec:f4:69:68:e1:e7:61:
10:d8:86:6d:cf:0f:8e:a1:9e:23:78:32:30:26:2f:
18:70:b6:63:78:f3:47:da:d6:b2:c5:48:84:04:9b:
ac:8a:43:87:f3:99:8d:4d:c6:4d:fd:76:45:26:57:
d0:69:b1:b8:48:5c:f9:d0:b5:ad:60:62:38:ae:4b:
c1:22:fa:94:d1:71:19:54:79:f0:54:97:7a:9d:d8:
5b:10:4b:0e:a4:3e:f7:62:16:28:8a:30:8b:b9:b4:
24:d2:fa:49:c6:dd:bb:52:47:92:e5:42:b1:bc:86:
be:81:bb:26:6a:f3:3d:3e:88:f0:94:15:15:bb:f1:
cb:d3:45:3b:ec:01:5e:1e:81:3d:15:4e:52:d0:83:
bb:b5:40:bf:f4:39:34:fd:bb:b6:92:14:d8:d1:66:
55:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3F:42:91:5B:81:E1:60:B6:97:E0:E0:55:01:AB:75:D9:3D:50:55
X509v3 Authority Key Identifier:
keyid:50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:9b:17:27:c4:3f:1a:5a:f5:83:6f:db:0f:b1:10:a4:0e:33:
f3:fd:5f:9a:4f:0b:32:45:f7:e0:aa:ec:c2:93:eb:ad:fd:04:
be:75:28:e5:29:7b:44:d5:ad:ec:6e:20:d4:55:ae:46:12:40:
39:b1:04:4c:86:00:d4:15:06:f9:21:85:5b:57:63:d4:cf:5a:
25:f4:f8:d5:2a:7b:e5:1e:5c:69:fa:ff:45:55:4a:fa:20:7f:
a0:dd:3e:05:35:0c:18:b5:1b:22:08:e3:80:1a:b7:11:21:38:
ee:4a:bc:53:c8:b6:31:cc:ab:26:e9:be:0f:c5:79:56:9b:ec:
64:42:f7:bf:6c:79:80:94:ce:f6:7a:a2:3d:23:14:80:c2:16:
80:81:bc:b4:84:76:15:fd:7d:8f:9b:19:88:44:80:2d:ba:2f:
2d:e3:01:77:16:71:cc:cf:78:9c:a2:17:53:bc:a8:34:bd:38:
69:b0:bd:6f:b9:f1:20:f8:b4:d1:a6:d4:8b:65:54:92:e3:35:
2c:52:9c:96:09:cf:f5:d4:02:3d:3b:b7:96:64:2b:f3:ba:0d:
b1:3f:0d:ce:2f:6d:58:08:c0:18:16:1d:11:d8:93:c3:d0:1e:
81:82:9a:77:c7:c3:7c:79:59:78:d4:27:17:a6:6d:bd:6d:97:
e9:85:59:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:16:50 2026 by rpki-client