
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
File: UxLzmab36w3c1RwDn4P3t6R6Xwk.mft (raw, json)
Hash identifier: BJ3tSTlVCj1oZLMkaglUgiARVdXIOdUUt1TSvbqeK24=
Subject key identifier: 6B:72:D9:83:B4:BB:B2:D0:44:F1:53:C7:A4:03:67:A6:DF:FA:FB:DA
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial: 363F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
Manifest number: 3585
Signing time: Fri 12 Jun 2026 15:18:21 +0000
Manifest this update: Fri 12 Jun 2026 15:18:20 +0000
Manifest next update: Fri 19 Jun 2026 15:18:20 +0000
Files and hashes: 1: UxLzmab36w3c1RwDn4P3t6R6Xwk.crl (hash: eRrM41H1IcGpJ07xEjw3g+xxhOcj91KJ5666kXHA61I=)
2: E367308E8D8811EDB3C13D6CC4F9AE02.roa (hash: a063z56fhF465bYqQMqQ/VS6+YD1pprAbiKfQKP6c7Q=)
3: E48E2E94017211EBA18CC269C4F9AE02.roa (hash: mVGA78Zl2U0B3hkzOEy3AAD5vMNBI+xTYAZL5c4Orlk=)
4: 03C522BA8CF211ED8699F014C4F9AE02.roa (hash: ZiJdNAI9D1fhgY+vFrSQSO5HYdO+TKWApMeaHQROAjU=)
5: 8D6973CE77C311EE90D4BD46C4F9AE02.roa (hash: kH5XvLgwYNGVU4SNZtJIVKDH6abpZgZgif4ntA/Uq98=)
6: EB3FE1C61B6411ECAAB1D328C4F9AE02.roa (hash: QN6urrq0/MRPBsyVwW06hj5Hgqfql2xPz8BmJ6v46LI=)
7: 95B5C59E2DCE11EEB652B16FC4F9AE02.roa (hash: d6iO9u2ih9RRm7pMd+vjg8OegUnNhTtH4LrmCu5pQ4M=)
8: 56C4FAF42D4511EAB70F247AC4F9AE02.roa (hash: YRii0Zo0Ii/RPFSSaW2DmXwDsKKvPuXOrEkEJHdLhV0=)
9: C2F17AB22DCE11EEA2884670C4F9AE02.roa (hash: effeuvJ8l3AUehdgLEWM2HD3kmQlAIDMK+QRL0CUES8=)
10: 7350B2AE2BB011EEBF8C0962C4F9AE02.roa (hash: d4lTODvUkouxXVPPc6ygUkOl8NqMMqWXrGfdqtm829Y=)
11: E474AF108D8811EDB3C13D6CC4F9AE02.roa (hash: noBQw864/f72VFx3andbpjd4W9nv+2EjSEATcB2fGbI=)
12: EF1D0466455311E98FA31F68C4F9AE02.roa (hash: WNcYetTPqeiv/gJdhSaTlqe8oWCCpgSvbxYX4ELwCGg=)
13: 2F20ECAE554211EF82D40732C4F9AE02.roa (hash: kgR3YHk5XEHcnqdC6D3tAl758+AW2RhczADq1evpAQs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:18:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13887 (0x363f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Validity
Not Before: Jun 12 15:18:20 2026 GMT
Not After : Jun 19 15:18:20 2026 GMT
Subject: CN=6a2c233c-7cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:66:ae:d4:c6:51:d5:5f:4b:98:6f:19:77:
9b:dd:bd:b6:9d:5f:e1:1a:3f:ca:4e:d3:10:7b:1b:
85:49:5e:7b:dc:71:de:87:ba:cc:4f:46:2f:40:5c:
67:f9:5a:16:33:4b:47:c7:38:d9:38:80:fa:61:52:
77:0c:d1:ac:bc:ae:2c:2c:d8:83:e8:9d:a5:6a:94:
81:fc:aa:ec:d3:2c:1f:92:40:81:91:26:9a:8e:cf:
82:af:bd:98:47:21:bd:a1:9f:81:0c:67:d5:97:48:
d9:cd:6a:4d:c0:0e:78:1b:4d:35:ee:51:3f:f3:9e:
7a:16:4b:a3:3a:c2:6c:50:fc:89:ee:96:95:35:be:
53:00:76:ce:b5:bd:3d:21:b8:4d:ac:f4:c8:63:2a:
ea:e1:27:90:30:e0:2c:67:da:0d:28:b5:e9:d5:31:
52:9c:d3:7e:ae:44:3b:cb:32:58:45:4e:34:59:4f:
2b:87:0f:7f:7d:94:30:b0:57:e7:e3:77:38:51:c4:
bd:44:ce:00:99:35:3a:a8:8a:a9:6c:76:ef:86:99:
c1:e4:fb:2b:e0:71:8a:92:8a:60:e2:f7:cc:bb:ce:
6d:d9:73:1c:9d:f3:87:1d:04:38:83:9d:30:0d:5a:
5a:4b:83:ff:71:95:50:d6:49:bf:21:da:2b:6c:e5:
d4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:72:D9:83:B4:BB:B2:D0:44:F1:53:C7:A4:03:67:A6:DF:FA:FB:DA
X509v3 Authority Key Identifier:
keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:a1:ea:8c:62:da:c3:fe:20:8c:f6:7d:b3:c3:2e:ce:b5:08:
2c:86:b0:c0:65:c2:26:40:73:ff:57:a3:52:fc:77:12:41:ba:
06:09:37:57:1e:b7:cb:3d:2d:c4:9d:d8:8c:5f:59:cc:56:d0:
88:16:71:95:f1:56:4f:e4:e1:af:81:2f:49:2c:05:e2:76:92:
1c:6a:24:c3:00:b4:e5:b3:54:e6:24:a2:ce:b0:52:c1:d1:85:
22:69:18:b0:a0:1a:56:7c:74:4b:28:5d:c6:80:11:a9:f1:e0:
b6:ed:e7:0b:37:9a:e7:4e:04:92:a6:a8:e2:ff:8d:7e:6a:73:
bc:3b:1d:55:58:e7:17:dc:b1:3a:40:7c:b9:36:22:a4:18:8a:
40:3a:f1:75:71:91:0f:58:f9:97:36:48:21:16:b3:f5:b1:40:
81:a6:aa:47:a9:50:a0:4b:e6:14:a5:2a:a1:2d:4e:a9:e4:8f:
c5:66:1c:c0:8c:20:53:d4:d9:c7:d6:fc:85:97:89:6e:3e:8e:
99:fa:c0:f6:c4:85:7c:c3:3b:cb:eb:fe:92:7e:99:67:d5:b9:
12:88:3e:e0:af:fd:3f:24:3c:06:8a:9d:68:9e:13:0a:30:d9:
ab:f6:5e:e9:d0:eb:f9:08:07:3f:16:96:24:eb:c6:e7:b3:a1:
71:e1:46:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:47:04 2026 by rpki-client