
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft
File: uIC429cILNkYtiF73qCXWEWR290.mft (raw, json)
Hash identifier: umGPgofmaXmFIXnF3xywe37YdwLXcqr4YGcat+l2Fo8=
Subject key identifier: CA:35:EE:DC:1D:A2:A1:C2:1A:AC:05:A8:34:C7:13:29:E3:2B:B3:22
Authority key identifier: B8:80:B8:DB:D7:08:2C:D9:18:B6:21:7B:DE:A0:97:58:45:91:DB:DD
Certificate issuer: /CN=A913EF9C/serialNumber=B880B8DBD7082CD918B6217BDEA097584591DBDD
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft
Manifest number: 0122
Signing time: Mon 27 Jul 2026 07:49:02 +0000
Manifest this update: Mon 27 Jul 2026 07:49:01 +0000
Manifest next update: Mon 03 Aug 2026 07:49:01 +0000
Files and hashes: 1: uIC429cILNkYtiF73qCXWEWR290.crl (hash: 1EQ6kWSlWJA0GlclIZuDzr2xrKEJztiAbEC9JBY7H0w=)
2: 08476846D3EC11EFBFE6E864C4F9AE02.roa (hash: kB84pKyx8bpCK91KFQ/GpOuFFKtpC4+c+BC5HprgaaY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.crl
rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EF9C, serialNumber=B880B8DBD7082CD918B6217BDEA097584591DBDD
Validity
Not Before: Jul 27 07:49:01 2026 GMT
Not After : Aug 3 07:49:01 2026 GMT
Subject: CN=6a670d6e-5c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6b:97:6f:8f:6a:b8:85:f5:c8:0b:7b:50:71:
72:94:13:58:63:81:46:75:32:93:30:94:14:12:9c:
58:9f:0e:f8:a6:a3:61:32:f4:62:81:f9:1d:dc:96:
d5:b6:66:6f:1a:ab:71:31:ae:dd:97:ec:b7:4f:2e:
94:62:a7:c8:77:04:dd:f0:4c:a3:48:04:51:98:c0:
21:a6:49:77:51:c3:0a:bf:80:8e:67:9f:6a:f6:c9:
7f:9e:dd:e8:9a:90:7a:d6:b9:4b:a4:c8:32:c5:2f:
72:3e:71:fb:95:38:3a:df:60:bf:a8:a6:e9:a9:27:
cd:88:d6:49:45:e6:d5:96:70:68:a0:c5:49:d9:15:
91:ab:7c:72:cb:3f:3f:1a:ec:f2:94:23:94:95:64:
8f:6f:b3:9c:d0:24:e1:6f:a8:0c:46:fb:6f:63:57:
b2:a0:21:cc:4c:35:38:c4:f1:46:25:dc:6b:1e:e3:
7c:01:f1:a7:16:59:a6:99:41:77:79:0c:7e:5a:f2:
77:a4:2c:a9:5f:d6:77:5a:50:46:5d:73:9a:db:3a:
96:15:63:27:b8:d8:b0:73:cd:ee:84:23:6d:cf:2c:
7e:c7:e9:f0:02:39:3b:0d:55:c5:ad:3e:0b:c6:61:
86:02:cb:5a:6c:68:91:05:3a:68:55:28:dd:1b:32:
fe:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:35:EE:DC:1D:A2:A1:C2:1A:AC:05:A8:34:C7:13:29:E3:2B:B3:22
X509v3 Authority Key Identifier:
keyid:B8:80:B8:DB:D7:08:2C:D9:18:B6:21:7B:DE:A0:97:58:45:91:DB:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f0:ae:b7:84:ea:f5:9e:49:af:97:dd:d6:cc:f9:25:39:5d:
b6:cb:78:03:db:50:23:8d:1f:96:4e:36:7f:0d:5e:21:10:41:
11:88:c2:e0:cb:1a:cd:4d:cd:ad:6e:59:b1:27:24:16:03:5c:
b2:e7:3a:5d:5c:c2:e5:33:5b:cf:99:74:a3:5b:ca:01:2c:aa:
60:2d:d7:85:d5:5e:0a:9f:e6:4c:16:ac:98:65:c0:cb:53:5b:
77:0f:41:89:1a:8b:32:24:01:1e:94:bc:c5:52:76:fd:a6:e7:
86:0c:61:64:dc:5f:47:82:59:4c:a1:1c:0a:8d:1f:f6:c2:e0:
5c:5d:e0:f4:44:80:10:c0:66:43:0d:96:4b:06:1d:62:fd:72:
8a:0a:d9:83:c6:01:f5:d4:1b:47:ed:6b:15:14:2d:b5:87:fe:
2f:d7:5f:ca:a4:35:f7:38:ef:16:00:2c:57:05:9f:dd:19:0c:
a0:20:cf:75:64:e9:3e:f2:ef:c6:eb:2c:19:92:91:d0:c3:09:
12:31:10:27:74:47:ac:8b:4a:4d:4a:9f:99:e3:53:80:e9:57:
1a:61:a7:ee:ec:e3:56:1c:a3:fd:7f:cd:bc:5b:2f:9c:39:03:
65:33:f6:49:81:ec:b5:61:0e:06:7c:9f:ab:60:bd:3a:63:8e:
ca:e7:39:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:02 2026 by rpki-client