
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
File: uRokzwRxERfIw7omSjM5Xad_kbQ.mft (raw, json)
Hash identifier: 483CDIBtnf6QZnKx8iZ3yMKSNyvoxj+bVikp8hem81k=
Subject key identifier: 05:AA:A8:02:C3:26:B9:6D:31:1A:8F:C6:0F:0C:77:E5:A9:9B:33:3E
Authority key identifier: B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4
Certificate issuer: /CN=A9133BB0/serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4
Certificate serial: 012E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
Manifest number: 0126
Signing time: Mon 02 Mar 2026 13:12:38 +0000
Manifest this update: Mon 02 Mar 2026 13:12:37 +0000
Manifest next update: Mon 09 Mar 2026 13:12:37 +0000
Files and hashes: 1: uRokzwRxERfIw7omSjM5Xad_kbQ.crl (hash: uURDXVMaJt8No5juxzFpFHaXQCfqhIVza3WlXe7YiGA=)
2: 27995372566911EF9D53B517C4F9AE02.roa (hash: DeSR6K4bPK/5yIQimeD5bS9czMTEXaccQNS0PK5i+zY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl
rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133BB0, serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4
Validity
Not Before: Mar 2 13:12:37 2026 GMT
Not After : Mar 9 13:12:37 2026 GMT
Subject: CN=69a58cc6-f96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7e:71:c3:3d:53:fe:80:6e:d4:12:48:e9:b8:
b4:b0:44:b2:65:2b:99:a7:28:ae:43:6a:8c:2f:cf:
75:bd:98:97:77:2d:ed:a2:48:bb:bf:ed:d6:8d:7e:
00:ff:42:1b:57:40:7b:cb:12:cb:6f:f9:0e:a8:fe:
6d:1a:3d:3d:78:a9:40:2a:01:45:35:38:07:ca:60:
d0:e6:b4:71:0e:0b:3b:51:c3:83:77:88:ff:3e:dc:
97:84:b7:ba:cf:df:ea:bf:20:fb:0b:a9:a0:99:d4:
37:a4:ae:6d:85:61:c9:9a:92:9d:b2:46:ca:b2:c7:
f2:47:b6:39:56:f6:42:25:63:5a:b4:dc:4b:a9:ef:
bd:55:29:60:2d:53:af:a2:22:bf:f0:fd:8a:d8:10:
71:73:b1:1d:e4:e7:2a:93:4f:47:2c:41:5c:98:44:
23:99:86:5d:25:d8:29:f4:16:08:52:d1:7e:d6:e7:
fa:c6:27:48:79:7e:15:dd:44:19:ca:52:c3:ed:c5:
bc:4c:f2:15:57:59:18:39:a6:87:32:24:5b:8b:79:
f9:0a:9c:09:ee:a7:19:d1:88:62:d6:c5:1b:ef:5e:
4f:cb:fb:1c:97:20:26:ae:55:40:8e:06:7d:25:59:
1c:fb:3b:52:6e:15:87:59:c2:48:ab:e2:9b:33:13:
12:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AA:A8:02:C3:26:B9:6D:31:1A:8F:C6:0F:0C:77:E5:A9:9B:33:3E
X509v3 Authority Key Identifier:
keyid:B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:42:90:dc:7d:b4:e5:47:79:37:21:f1:d1:e9:58:05:32:ba:
67:6f:20:83:21:c6:1d:4e:7f:c5:a3:e9:d4:ed:e0:33:87:fb:
60:ac:7a:2f:05:9f:ed:17:3f:27:ef:90:42:80:30:b5:52:e0:
ac:2c:c0:dd:76:4d:c2:ba:25:e6:e3:34:45:bf:b4:59:68:f6:
70:e4:d3:45:04:e9:44:08:cd:c8:eb:82:c1:1a:48:93:54:0f:
7e:45:63:fd:3f:6b:a0:91:6b:9d:9e:a9:3f:d8:84:37:46:30:
14:e6:34:e5:1b:3b:42:45:b3:ca:d2:8a:b7:96:4a:29:ef:f5:
2c:c0:b2:18:e5:56:a0:1b:1e:eb:8c:35:00:0d:ce:9d:48:55:
e7:c8:82:f5:fb:b8:f8:30:b6:4e:db:4c:2d:8c:e8:3b:97:c4:
81:5a:74:68:5f:33:48:31:f3:61:c5:c9:d5:fb:6b:e2:6a:59:
a4:4d:f1:7b:63:ba:21:87:0d:53:8d:ee:df:1a:95:72:7e:79:
36:32:ac:44:6f:87:71:a8:d6:24:21:11:bb:a7:be:8f:18:95:
76:c2:56:90:04:b4:51:cc:2b:69:34:bf:1e:19:ea:a2:e1:1a:
8e:22:4f:af:5e:a2:10:3a:3c:1a:2f:90:f4:e3:72:75:9d:3e:
0e:5e:fe:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzNCQjAxMTAvBgNVBAUTKEI5MUEyNENGMDQ3MTExMTdDOEMzQkEyNjRBMzMzOTVE
QTc3RjkxQjQwHhcNMjYwMzAyMTMxMjM3WhcNMjYwMzA5MTMxMjM3WjAYMRYwFAYD
VQQDEw02OWE1OGNjNi1mOTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5H5xwz1T/oBu1BJI6bi0sESyZSuZpyiuQ2qML891vZiXdy3toki7v+3WjX4A
/0IbV0B7yxLLb/kOqP5tGj09eKlAKgFFNTgHymDQ5rRxDgs7UcODd4j/PtyXhLe6
z9/qvyD7C6mgmdQ3pK5thWHJmpKdskbKssfyR7Y5VvZCJWNatNxLqe+9VSlgLVOv
oiK/8P2K2BBxc7Ed5Ocqk09HLEFcmEQjmYZdJdgp9BYIUtF+1uf6xidIeX4V3UQZ
ylLD7cW8TPIVV1kYOaaHMiRbi3n5CpwJ7qcZ0Yhi1sUb715Py/sclyAmrlVAjgZ9
JVkc+ztSbhWHWcJIq+KbMxMSNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAWqqALD
JrltMRqPxg8Md+WpmzM+MB8GA1UdIwQYMBaAFLkaJM8EcREXyMO6JkozOV2nf5G0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9CODY1QjM3RTU2
NjgxMUVGOEU2QTc3NURDNEY5QUUwMi91Um9rendSeEVSZkl3N29tU2pNNVhhZF9r
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3VSb2t6d1J4RVJmSXc3b21Tak01WGFkX2tiUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
M0JCMC9CODY1QjM3RTU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi91Um9rendSeEVS
Zkl3N29tU2pNNVhhZF9rYlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD0KQ3H205Ud5NyHx0elYBTK6Z28ggyHGHU5/xaPp1O3gM4f7YKx6LwWf7Rc/
J++QQoAwtVLgrCzA3XZNwrol5uM0Rb+0WWj2cOTTRQTpRAjNyOuCwRpIk1QPfkVj
/T9roJFrnZ6pP9iEN0YwFOY05Rs7QkWzytKKt5ZKKe/1LMCyGOVWoBse64w1AA3O
nUhV58iC9fu4+DC2TttMLYzoO5fEgVp0aF8zSDHzYcXJ1ftr4mpZpE3xe2O6IYcN
U43u3xqVcn55NjKsRG+HcajWJCERu6e+jxiVdsJWkAS0UcwraTS/HhnqouEajiJP
r16iEDo8Gi+Q9ONydZ0+Dl7+ZQ==
-----END CERTIFICATE-----
Generated at Tue Mar 3 03:50:48 2026 by rpki-client