
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
File: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft (raw, json)
Hash identifier: FIjoESErszF5b4hd2jpgaU347dbjgCvBlv9UR1WRVHQ=
Subject key identifier: AF:8E:94:75:06:93:26:4C:B1:F9:78:AB:47:DF:C9:A5:86:A2:B2:42
Authority key identifier: 52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78
Certificate issuer: /CN=A9136D7D/serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78
Certificate serial: 034A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
Manifest number: 033E
Signing time: Tue 13 Oct 2026 22:59:53 +0000
Manifest this update: Tue 13 Oct 2026 22:59:52 +0000
Manifest next update: Tue 20 Oct 2026 22:59:52 +0000
Files and hashes: 1: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl (hash: swlUTSqt5lW7sJZRx5ymCKMhyvOC2xBwN8sPnnjkHGE=)
2: A9E3A5041C3411EFBF05095BC4F9AE02.roa (hash: +F1FZtsTrw14W4WmmJaPNvqLxkx0Lf//1RCLaJV77j0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl
rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 22:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 842 (0x34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136D7D, serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78
Validity
Not Before: Oct 13 22:59:52 2026 GMT
Not After : Oct 20 22:59:52 2026 GMT
Subject: CN=6aceb7e9-989e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:19:d2:72:7c:3f:3a:c5:43:da:db:06:1e:
ec:2e:49:c5:c2:5d:e0:18:66:1a:ad:1d:27:12:a3:
4c:4f:9d:5a:50:f2:f6:9a:db:b9:b0:d5:61:78:a5:
f6:85:69:8d:0b:bd:89:af:d7:e8:c8:b4:85:b8:e4:
18:21:73:85:c6:44:df:66:78:1d:78:00:ff:13:fc:
bd:71:da:f2:5a:9d:50:01:fe:12:ff:34:89:91:4b:
10:19:56:e7:71:70:71:f1:85:0e:0e:04:ce:74:5f:
86:2b:c2:df:54:87:df:94:fb:6f:a7:09:3c:96:c2:
c9:f1:8b:c0:12:94:0f:dd:95:7a:d5:3d:27:40:83:
fd:c3:7b:83:54:ec:80:ce:30:1b:53:a9:23:8c:e2:
e4:fe:66:ad:f8:0c:ac:3f:bc:73:ee:1d:32:fb:af:
0e:39:ae:f9:13:f2:cd:50:e2:29:24:3a:96:39:91:
34:3b:e3:5b:6f:a1:67:73:e7:b3:54:fa:17:90:5f:
52:97:28:da:77:a9:a3:1f:ae:3b:ee:a5:b8:61:4f:
f2:7b:79:58:6e:e1:58:b7:6f:f2:ec:d7:0d:93:1f:
c3:cd:cd:af:b1:c9:a7:3c:dd:a6:0c:77:b0:16:ea:
ac:4b:d1:7f:68:e3:b3:3d:9f:16:58:21:63:36:d3:
a8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8E:94:75:06:93:26:4C:B1:F9:78:AB:47:DF:C9:A5:86:A2:B2:42
X509v3 Authority Key Identifier:
keyid:52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:9b:3b:3d:9f:83:e2:4f:b6:f3:5e:74:92:86:05:99:71:18:
05:a0:56:ae:2f:29:56:52:fa:2e:0f:10:40:90:7b:c5:95:ea:
36:21:57:a0:3d:5b:47:2a:0b:9c:6f:0b:84:66:f4:c4:21:6e:
bb:e9:6a:31:ae:d9:03:f3:4c:9c:69:e0:63:ae:cb:ab:8d:22:
df:2e:f1:b5:2f:f7:0b:c2:0a:ee:50:17:18:26:a8:b9:2f:90:
f3:83:43:55:00:ff:71:61:16:4b:1d:03:3c:1a:ac:12:71:b0:
90:2f:b9:5f:4e:b5:ce:b8:12:1b:12:32:08:b7:aa:97:57:00:
56:81:fa:3a:1c:76:9b:2b:91:4e:68:52:f5:20:e2:8b:f0:09:
e2:db:2c:d0:0b:f6:e8:e4:09:38:fa:c6:1b:e5:76:e3:d9:97:
c3:16:77:a1:43:06:72:9b:ac:3f:e0:62:b1:66:73:b0:61:50:
6c:5e:ac:52:40:d9:1f:ea:17:d2:f6:7c:19:d4:2e:55:ff:5a:
2a:3c:c9:a5:96:6d:0d:38:b2:0c:74:88:43:2a:06:ca:a9:c4:
92:89:73:c6:8f:db:60:a2:c6:8f:9e:0a:b4:b9:40:ea:b2:3d:
fe:bf:be:86:5d:1f:22:cb:74:19:08:3b:cb:49:66:4c:94:b0:
1f:3e:d9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:34:13 2026 by rpki-client