
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft
File: UHztrU5Y_M0K4JOTmGWG21g_B6I.mft (raw, json)
Hash identifier: 3rrCWDs7gjdw0uwYJFtvrph8t3CWst9pQ/9eazgEoxY=
Subject key identifier: 13:FA:8B:38:C2:43:36:3C:F3:85:32:FB:13:F9:BF:B2:0C:4F:AA:41
Authority key identifier: 50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2
Certificate issuer: /CN=A912C8FD/serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2
Certificate serial: 0C53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft
Manifest number: 0C53
Signing time: Thu 16 Apr 2026 18:37:08 +0000
Manifest this update: Thu 16 Apr 2026 18:37:08 +0000
Manifest next update: Thu 23 Apr 2026 18:37:08 +0000
Files and hashes: 1: UHztrU5Y_M0K4JOTmGWG21g_B6I.crl (hash: pIFcymQpl5/tEmJRLd30c109X/b1PK/YcEPfT9PGkR4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl
rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:37:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3155 (0xc53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8FD, serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2
Validity
Not Before: Apr 16 18:37:08 2026 GMT
Not After : Apr 23 18:37:08 2026 GMT
Subject: CN=69e12c54-7ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:33:a1:c4:d8:20:a6:c1:d8:25:13:2a:d5:
09:10:bd:59:8e:45:1e:f6:a9:50:ea:ff:7b:6a:0c:
dd:6d:09:ed:14:17:2e:ef:72:14:2e:5c:21:88:d5:
1a:6b:6f:10:48:42:dd:6a:63:76:c8:3a:af:49:ec:
73:21:41:bb:2c:dd:d4:e3:39:7a:93:74:cb:c9:f9:
f6:55:3b:cd:f0:17:c2:e7:a5:6a:74:4f:35:57:2b:
ba:4d:c6:8f:2c:0f:df:27:79:8d:ba:5e:71:32:20:
a0:55:63:21:81:29:99:3e:d6:d5:e0:4b:bf:66:fc:
10:15:a1:69:f7:14:8a:0e:d2:64:01:3d:aa:17:99:
6a:4a:6c:a9:53:31:6c:b4:77:c5:39:6a:8c:e1:7b:
be:3f:8c:57:b2:f0:7f:e1:e0:d6:d0:ef:0c:f6:2a:
0d:2b:16:4a:88:24:a1:35:4b:1c:ec:46:1d:7b:06:
09:a4:e7:fc:b1:59:20:6a:7c:bc:01:de:23:5e:71:
a6:3c:4e:eb:ac:33:eb:23:8e:4b:23:e6:38:38:0b:
b5:a1:60:d9:98:eb:bc:1d:00:30:1c:f0:d4:af:13:
8b:9f:14:08:7b:4a:b4:a0:d4:52:a4:5a:0e:f1:25:
c2:65:c9:eb:72:88:de:5c:77:e6:24:78:6c:39:72:
9b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FA:8B:38:C2:43:36:3C:F3:85:32:FB:13:F9:BF:B2:0C:4F:AA:41
X509v3 Authority Key Identifier:
keyid:50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f5:0c:47:7f:02:f3:9f:39:6d:8b:83:3b:bc:39:cd:44:53:
81:f8:00:39:14:29:3e:f6:8d:4b:a2:e8:f1:61:43:5b:c8:5a:
fa:f0:53:7d:32:98:2d:95:7c:ef:ae:66:66:29:c5:98:d2:e0:
69:0a:ff:31:1e:38:7f:12:7b:81:5b:e3:d3:90:80:0b:39:a4:
9a:67:5b:f7:c5:a2:ea:f1:52:22:2c:b9:b0:32:e1:a7:cb:04:
43:3b:63:95:67:f1:10:71:19:2f:38:8a:76:01:55:0a:4a:2a:
39:23:58:42:27:83:b4:cb:83:59:e4:8b:47:76:f5:6c:d7:85:
76:9c:2f:c8:4c:ba:80:bb:9e:83:79:71:5a:a8:56:ec:27:88:
31:a4:3b:13:bc:45:78:15:75:67:de:77:8a:e5:2a:79:50:e4:
63:e7:dc:79:6c:c9:97:d6:1f:a4:17:80:d7:5a:a2:6e:66:df:
ea:70:b1:de:90:f0:d4:01:98:33:66:08:bd:3d:fc:eb:9c:81:
bd:ee:44:da:d6:f4:43:2e:35:3b:65:42:12:bd:de:4c:7a:52:
db:f7:d7:a5:28:da:65:b2:6c:8f:9c:29:6b:c9:90:bf:4c:42:
68:04:d0:ee:4d:b4:d1:ea:51:a5:8a:88:d6:3f:ff:c7:bd:6e:
fb:85:f1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:13:52 2026 by rpki-client