
$ rpki-client -vvf rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
File: UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft (raw, json)
Hash identifier: ID8HSYy3ZMwvpmbPU+cfNlMl26sn6cAd+ufWBgOi99I=
Subject key identifier: 9B:1F:B0:22:97:78:1C:23:7E:A0:65:8C:4B:AF:7F:F6:97:5E:91:D0
Authority key identifier: 50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30
Certificate issuer: /CN=A913318E/serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
Manifest number: 01B8
Signing time: Mon 27 Jul 2026 05:42:07 +0000
Manifest this update: Mon 27 Jul 2026 05:42:07 +0000
Manifest next update: Mon 03 Aug 2026 05:42:07 +0000
Files and hashes: 1: UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl (hash: 749EhRHQXKQLAaquWe3AVEUPNrVksnrRYa8qFAgA0uE=)
2: 6EAE50E8EBFA11EEA937307AC4F9AE02.roa (hash: gqtTgTa/5S3Sd4RP8oatcAFjD99BV64g0IQPdSlFBu0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl
rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913318E, serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
Validity
Not Before: Jul 27 05:42:07 2026 GMT
Not After : Aug 3 05:42:07 2026 GMT
Subject: CN=6a66efaf-40f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c5:dd:47:b0:4e:33:eb:ff:3a:05:ce:17:f2:
ad:0f:4b:43:5f:01:b8:db:c2:fb:9b:72:d9:f5:5c:
8e:34:c4:9b:9c:3f:c2:67:f1:83:8c:4d:0c:55:40:
ac:d9:bb:7d:6b:1e:f3:e7:8f:3c:d8:ba:09:f1:16:
a3:cb:a7:e4:77:96:87:91:5b:84:c5:85:d4:04:73:
24:0d:2d:7f:57:b0:5c:f2:77:8e:90:75:87:1c:63:
21:cd:1e:c6:a2:f5:1c:99:c5:bc:53:68:e8:19:ed:
e6:e4:e6:15:56:6d:03:24:2c:48:b8:65:f8:f9:79:
a0:3e:74:52:59:42:80:0f:39:f1:84:14:c8:28:6c:
11:5e:38:91:e0:52:42:53:0d:ea:80:f8:75:49:7a:
5f:18:3e:2a:e2:03:3f:a7:39:fb:40:56:97:15:38:
3f:ad:dc:5d:4a:2e:21:58:c5:88:02:27:f9:4e:e2:
13:e8:a3:be:57:63:a8:8f:6d:9a:16:13:bf:af:57:
73:44:59:11:7d:66:e2:02:a4:8f:48:9a:20:c2:ce:
1a:54:d2:c0:ae:60:e4:ea:33:99:5f:f3:dd:be:ae:
cc:06:95:c7:3e:d5:06:3b:e5:73:de:f3:5a:1c:dc:
23:f1:8f:58:6f:e1:fa:94:be:70:ce:31:5e:16:03:
cd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1F:B0:22:97:78:1C:23:7E:A0:65:8C:4B:AF:7F:F6:97:5E:91:D0
X509v3 Authority Key Identifier:
keyid:50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:54:04:43:0c:4e:24:d8:43:a3:2b:75:83:42:8d:ba:19:f8:
ab:68:84:71:b8:49:72:d0:0d:89:e5:9c:bc:cc:6f:da:c7:a6:
41:00:fb:49:be:1d:66:12:98:a9:c2:3e:ae:f6:a0:52:e7:c6:
55:9a:fe:9a:ef:53:74:53:39:d7:c4:4f:46:c1:4d:4f:bd:e8:
51:e7:64:34:cc:9d:7e:ed:68:4e:a8:af:37:e9:25:2b:f3:1a:
96:00:a5:eb:99:71:18:6d:77:79:e9:0e:b5:c3:5a:70:99:5e:
eb:d5:1c:63:57:cf:c8:4a:36:68:1d:9e:ab:c0:1a:a1:2a:3d:
ce:a3:60:c0:01:47:65:b5:3c:ee:b3:90:71:b2:5a:ee:6f:0b:
08:58:b1:a5:c6:eb:04:73:73:b7:7b:10:99:41:f0:6c:1f:95:
95:a1:ad:b6:ec:64:f5:c9:aa:37:a3:04:1b:cb:ba:95:ed:b9:
52:75:92:71:44:4d:c4:6f:a2:98:39:1c:2a:85:ae:8e:32:63:
a2:f9:e8:68:aa:ef:2e:8b:e1:ab:59:4b:55:1a:58:35:8c:60:
9a:1a:11:76:89:f0:c2:af:e9:a0:67:fa:b7:93:a9:54:b6:07:
0e:7f:af:00:6d:ca:f9:9b:ae:54:d5:98:ad:68:84:87:fb:c2:
34:08:a4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:05 2026 by rpki-client