
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft
File: Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft (raw, json)
Hash identifier: Oh0nAvS/zRgh16Nts9zxHUfOYK0G4r8Tb9aKxKPdWys=
Subject key identifier: D1:32:80:CD:6F:33:88:58:C3:15:8C:65:E3:45:14:7F:FC:55:88:62
Authority key identifier: 52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E
Certificate issuer: /CN=A913CDC4/serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E
Certificate serial: 02BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft
Manifest number: 02AD
Signing time: Mon 27 Jul 2026 02:56:04 +0000
Manifest this update: Mon 27 Jul 2026 02:56:03 +0000
Manifest next update: Mon 03 Aug 2026 02:56:03 +0000
Files and hashes: 1: Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl (hash: JkzOCOKO3Cbf8iAcO97L8cbUXvT8m7rl5OxQHaol8TU=)
2: 2F38972E672B11EEBA84E00CC4F9AE02.roa (hash: Qu2Z6Dmd9/Rzo8XDYKdFCYmaMNlzbJyV+6G2m4jbJmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl
rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699 (0x2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CDC4, serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E
Validity
Not Before: Jul 27 02:56:03 2026 GMT
Not After : Aug 3 02:56:03 2026 GMT
Subject: CN=6a66c8c4-0685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:02:2d:0d:14:89:ef:1a:c3:2f:1d:8f:d3:
6f:f5:1d:40:42:4b:0c:a0:a6:37:8e:f1:07:16:ac:
fe:18:bc:4c:6b:54:1f:c0:47:07:44:6a:47:5f:d0:
3f:99:09:b5:a5:0c:f6:44:c6:0d:ac:5d:9c:44:a3:
95:9a:db:7c:29:89:1c:fe:22:9d:6e:2e:90:57:86:
a5:58:52:79:09:c2:f3:ff:57:95:36:0c:81:e0:e3:
03:96:0e:f1:64:d1:fa:c4:84:8d:0e:6c:5b:4a:49:
b0:8e:d0:b3:ee:73:c3:dd:ab:44:b3:2c:95:bb:12:
8d:5d:e1:15:9a:f8:5b:2d:66:fe:46:6d:9e:45:55:
e0:95:97:ac:5c:8d:83:c9:c5:61:e6:0d:22:a7:72:
7a:24:19:36:35:b5:48:97:bc:cc:3a:7a:25:52:df:
de:ae:3a:0c:57:9f:af:ff:e5:ea:bb:69:ef:12:a0:
c3:b0:3d:1e:30:d1:53:f2:77:2d:4c:de:db:89:32:
36:19:69:1b:67:6f:ab:65:dd:1f:41:23:ef:cc:f1:
d8:a1:b0:07:f8:cb:d0:c1:81:c6:4f:02:b3:26:bf:
e8:21:45:7e:27:3f:0c:b7:a4:ed:d3:8c:38:fe:db:
75:07:9d:53:92:28:49:14:69:b8:ff:f8:4a:83:a8:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:32:80:CD:6F:33:88:58:C3:15:8C:65:E3:45:14:7F:FC:55:88:62
X509v3 Authority Key Identifier:
keyid:52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:58:76:ba:d9:72:0b:c7:f6:68:2d:f8:64:fe:e2:1e:5c:62:
43:7d:d6:e9:cf:34:db:4e:b8:3b:78:0c:e1:a2:96:12:06:31:
82:1e:0f:3d:82:9e:51:e9:d2:36:58:f8:ee:1f:17:fc:39:91:
d7:ed:a4:7c:a6:9c:af:cd:1e:6d:37:8c:0e:d1:c0:48:2d:66:
00:df:8e:b1:b7:ae:cb:15:87:ba:e8:c2:36:d6:d0:8d:0d:ee:
0c:0d:6c:0b:9b:96:43:7a:f8:dc:40:7a:ef:fb:2d:2c:66:17:
51:fc:56:bc:25:03:cf:c8:55:25:9e:9d:60:6b:d1:ca:47:63:
17:58:21:d0:25:1c:bb:6b:34:b7:5c:13:0b:26:4d:3e:65:88:
15:79:ed:04:80:6b:78:92:91:62:ad:bb:87:a2:0f:cf:b6:7a:
b6:6b:b7:4d:b6:60:3a:7c:11:d8:e0:2d:93:db:30:75:36:5a:
eb:bc:70:e0:e4:7b:84:ac:39:eb:12:18:76:56:fa:91:90:52:
86:c4:3b:9a:72:39:aa:30:ac:79:3b:c9:13:35:f2:09:1f:48:
00:8e:d3:03:25:7b:6e:91:cc:42:a4:52:44:69:28:a1:e7:7c:
e1:11:ce:d9:ef:e5:e0:94:2c:90:f7:2e:ee:76:52:89:1a:c5:
38:85:f1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:09:41 2026 by rpki-client