
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft
File: U-fOlDUz-NPAVknylGgqJvgU8V8.mft (raw, json)
Hash identifier: kWsgA1rWH3BMFc6Nml5ApcmTF4bqCUdfeewM+bmZAK0=
Subject key identifier: 41:10:C2:5A:0F:13:E0:19:A2:F0:CB:E9:77:D9:29:EB:27:B1:A6:78
Authority key identifier: 53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F
Certificate issuer: /CN=A9144391/serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F
Certificate serial: 019F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft
Manifest number: 0195
Signing time: Sat 31 Oct 2026 04:52:01 +0000
Manifest this update: Sat 31 Oct 2026 04:52:00 +0000
Manifest next update: Sat 07 Nov 2026 04:52:00 +0000
Files and hashes: 1: U-fOlDUz-NPAVknylGgqJvgU8V8.crl (hash: jQQwLLj/TDkQDQhaz2QLEnZPdmIxDqOfrIP9ed6xqJA=)
2: BC213E3C70AF11EF9C9B2C0EC4F9AE02.roa (hash: HFSvHz0hovOMJhnqmdom42q+wc6gaQikgCXjvE+OCds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl
rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 04:51:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144391, serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F
Validity
Not Before: Oct 31 04:52:00 2026 GMT
Not After : Nov 7 04:52:00 2026 GMT
Subject: CN=6ae573f0-ad33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:99:7c:cc:08:67:ef:de:bb:eb:ee:bf:3b:83:
a6:9b:83:8a:41:b0:69:8d:3b:06:7a:53:d7:5a:8d:
57:58:1b:06:44:87:8e:8e:2d:ff:4c:cd:98:b2:c2:
0c:4b:3c:ee:44:77:56:00:b5:99:4e:c3:60:08:6a:
71:6e:3b:be:0c:c6:04:b4:91:50:d1:6d:b0:0a:94:
0b:e8:d9:86:43:81:b5:cb:88:e0:7a:4a:16:61:34:
d1:80:71:38:c5:a0:b7:8c:7d:52:12:66:de:0f:e0:
2e:3d:18:92:17:33:09:13:96:e7:99:76:5d:7c:84:
87:72:ae:ab:bb:a9:2a:e7:a5:45:a8:9f:f9:fa:84:
3f:b4:54:86:4e:b9:a0:ae:f7:98:9d:5d:f7:ad:db:
37:f2:e6:7f:cd:44:95:cc:ff:75:a5:97:a3:8e:fe:
bd:24:bd:bf:f1:41:7d:a9:1c:d2:b5:c0:96:d2:2e:
6d:04:28:c3:f7:3f:f1:91:2f:5a:c3:3d:81:80:9b:
cb:fb:10:e4:c7:b9:49:9c:11:43:b6:78:f1:ea:e7:
11:a7:ca:2f:5e:2c:8f:ef:43:c3:7f:b2:f1:ce:1b:
cf:29:4a:1c:15:3f:d8:ff:ba:ea:28:a8:d1:18:dc:
d1:c3:26:4f:d9:37:a6:83:bf:ce:f0:cc:a9:77:84:
63:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:10:C2:5A:0F:13:E0:19:A2:F0:CB:E9:77:D9:29:EB:27:B1:A6:78
X509v3 Authority Key Identifier:
keyid:53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6b:72:85:b9:08:e7:72:28:e9:d7:98:95:4e:8e:70:1e:94:
94:65:f8:c8:c8:ec:95:cc:83:bf:27:20:d5:c9:29:4c:f0:7e:
df:93:ff:a6:10:65:a0:87:b8:b0:53:0f:7e:9b:39:2f:a7:d8:
ce:9d:4f:af:8c:2b:7c:bd:0b:40:36:4d:3e:77:e9:a5:cc:12:
7e:0f:ba:e5:5b:b2:6a:89:fc:75:ca:57:5e:fe:a5:9e:57:45:
79:79:04:dd:0f:85:a7:5a:a7:cd:a9:1f:59:75:44:74:46:a3:
8b:7f:ff:7e:f6:90:f2:50:b0:19:81:db:a1:b2:5b:a3:38:f6:
ee:0e:2a:59:e8:91:9f:42:eb:2f:3b:e6:1e:86:83:ca:c9:a7:
f8:8a:68:72:3f:64:40:76:b0:4d:0b:b0:44:5f:a0:2e:f8:5d:
5b:6f:09:b5:87:21:33:b8:86:8d:77:ea:ad:56:dd:ec:d8:d5:
de:1d:76:ad:9e:ae:80:e1:86:57:e0:8b:9b:9a:fe:ac:8c:07:
08:4e:99:06:5f:2b:27:64:5d:06:1f:f2:57:ff:af:26:0a:aa:
a8:27:21:d0:18:9e:05:89:fb:12:7d:5c:db:ac:a5:95:07:e3:
cb:0a:cd:21:34:6b:2a:74:c5:89:77:c4:8a:1b:0b:2a:92:fc:
e4:6c:5b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:40:13 2026 by rpki-client