
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft
File: uhYFabkV4kxq5sJIlNBPnUo5FpI.mft (raw, json)
Hash identifier: TQrhA401BYZdOqQ4Ije9jJYTr+SvYo02llE1VOf69fI=
Subject key identifier: 5D:8D:B6:22:F4:BE:25:C6:06:45:65:DE:14:52:B3:55:38:C2:61:C8
Authority key identifier: BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92
Certificate issuer: /CN=A912CDCB/serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692
Certificate serial: 057D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft
Manifest number: 0576
Signing time: Thu 16 Apr 2026 23:12:22 +0000
Manifest this update: Thu 16 Apr 2026 23:12:21 +0000
Manifest next update: Thu 23 Apr 2026 23:12:21 +0000
Files and hashes: 1: uhYFabkV4kxq5sJIlNBPnUo5FpI.crl (hash: xEd7vAkTJAZJTcWTEVzeh5KTenOkv7pIZgL8b0jfu8E=)
2: DAF98AAA20F111EC89E7D668C4F9AE02.roa (hash: LYizx8+s0eAkkoRCIZeouc33G+ruq6po3v7yIz992CU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl
rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1405 (0x57d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CDCB, serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692
Validity
Not Before: Apr 16 23:12:21 2026 GMT
Not After : Apr 23 23:12:21 2026 GMT
Subject: CN=69e16cd5-92c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:45:70:30:3a:d2:84:e2:96:64:19:22:6f:
68:c5:62:78:f9:bd:e7:ca:a2:3d:e8:2c:f0:27:66:
6e:b5:d1:5f:ca:8a:59:a4:11:21:8f:44:96:5c:6e:
fe:47:e6:50:05:22:e2:c2:4d:61:47:e1:16:b3:fe:
43:0b:d7:f6:97:7e:ba:9b:b5:44:af:c8:78:75:55:
c1:dd:42:8a:1c:aa:95:b6:e8:40:7c:e7:95:eb:7e:
b4:d3:0e:3b:18:2c:3f:02:cc:02:a6:1e:25:1c:55:
5a:8a:df:28:4c:dd:01:d2:10:4f:8a:6b:00:98:db:
b9:76:b4:75:89:08:a7:c9:e3:b5:6c:74:e2:9d:96:
1d:cf:5b:52:19:82:1a:b0:36:d6:b3:1a:56:c5:0c:
94:55:8f:ab:43:d6:22:a2:ca:e2:ee:55:39:3e:72:
05:f9:98:51:8b:ad:2b:b1:05:d6:2a:ae:e5:b2:49:
d1:b8:7c:0d:5a:0e:fc:4c:f6:51:f3:f9:ab:32:ec:
ac:32:d1:19:e6:b8:2f:54:95:26:a2:9b:4d:e9:21:
64:43:c7:df:c0:43:0c:fb:35:98:57:ef:5f:b0:c7:
fa:60:6c:6e:74:f8:18:65:81:aa:83:7c:25:03:d8:
d2:c1:26:74:b9:d0:04:c4:3e:55:f2:61:eb:c2:8b:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8D:B6:22:F4:BE:25:C6:06:45:65:DE:14:52:B3:55:38:C2:61:C8
X509v3 Authority Key Identifier:
keyid:BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:94:59:68:91:9e:d2:3e:16:86:8a:e1:ad:4a:f2:f8:65:15:
c8:4d:dc:b3:78:b3:80:0c:30:a4:2b:84:fb:46:d2:be:57:48:
ac:6a:ca:19:78:9e:63:9e:aa:e4:16:04:70:ad:db:86:d2:2c:
bf:6e:be:2a:60:17:0a:7e:ad:81:fb:05:d4:83:d3:99:f3:79:
c4:1a:04:a4:0a:dd:43:23:80:6f:dd:cd:e4:ba:42:41:bd:ac:
d0:4d:e4:64:26:7f:c2:c7:85:89:dc:e3:a4:92:b1:f6:2f:ec:
eb:36:d4:95:aa:67:1f:2f:1e:f0:5d:22:0a:fc:9b:b7:67:59:
6c:28:48:7e:49:5b:cd:a3:8b:b2:f0:fb:88:d1:d7:2a:91:40:
4f:06:62:ff:c9:c6:ad:78:e9:ac:8f:3a:d9:5f:be:0b:67:3d:
73:89:0b:1a:e7:8a:c3:21:5d:a2:41:63:bb:f6:25:bb:02:4e:
b0:84:a0:5d:5b:a3:a7:99:99:0a:15:6a:2f:8d:23:bf:e9:56:
13:28:a8:46:2f:d1:02:23:99:09:53:a4:1d:47:0f:1d:11:30:
a5:03:36:b7:87:e5:24:ec:85:31:d3:54:55:9c:02:3f:52:d5:
1f:d1:e0:b7:73:ba:00:d9:be:24:fb:57:74:b1:a2:82:02:5f:
4b:6e:54:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:29:17 2026 by rpki-client