
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
File: UxLzmab36w3c1RwDn4P3t6R6Xwk.mft (raw, json)
Hash identifier: OcOTi3JtHh2cKwbR6t+jb/8eUWwb1MevfH1CHJ5uvew=
Subject key identifier: 8F:FE:DA:81:4A:0B:11:48:91:11:EE:38:90:2A:24:43:F5:0A:90:16
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial: 3671
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
Manifest number: 35AA
Signing time: Tue 28 Jul 2026 15:24:09 +0000
Manifest this update: Tue 28 Jul 2026 15:24:09 +0000
Manifest next update: Tue 04 Aug 2026 15:24:09 +0000
Files and hashes: 1: UxLzmab36w3c1RwDn4P3t6R6Xwk.crl (hash: CGMWtltfCa60H/MY7A7KFiWn3RoEyLRqB2qdTtMS20A=)
2: mdkUMDTCA-liMHWCGVOq1Lzr5m4.asa (hash: FPNURNp+gUbhptz+zBLiwR+ImVB1S60HEJTDn5RAzgs=)
3: 95B5C59E2DCE11EEB652B16FC4F9AE02.roa (hash: d6iO9u2ih9RRm7pMd+vjg8OegUnNhTtH4LrmCu5pQ4M=)
4: C2F17AB22DCE11EEA2884670C4F9AE02.roa (hash: effeuvJ8l3AUehdgLEWM2HD3kmQlAIDMK+QRL0CUES8=)
5: 2F20ECAE554211EF82D40732C4F9AE02.roa (hash: FzGV2az77P99aPOesIkUJNX6Xr/vF/iE5jAQGK/lwCE=)
6: R_P5k-5B764bv47XFseokAlkqG0.asa (hash: ateVzh5V6xrwsxAggbV6DsQXxNriblWnTGRdO8wPLF0=)
7: E474AF108D8811EDB3C13D6CC4F9AE02.roa (hash: noBQw864/f72VFx3andbpjd4W9nv+2EjSEATcB2fGbI=)
8: EF1D0466455311E98FA31F68C4F9AE02.roa (hash: WNcYetTPqeiv/gJdhSaTlqe8oWCCpgSvbxYX4ELwCGg=)
9: 56C4FAF42D4511EAB70F247AC4F9AE02.roa (hash: YRii0Zo0Ii/RPFSSaW2DmXwDsKKvPuXOrEkEJHdLhV0=)
10: jGeEsr3Scy-u-lvsXacp5GgDJXc.asa (hash: 9DABc/OQt8c0UyjghiubtHyjKdEmu/HKbGQ1HK15ZjI=)
11: 8D6973CE77C311EE90D4BD46C4F9AE02.roa (hash: kH5XvLgwYNGVU4SNZtJIVKDH6abpZgZgif4ntA/Uq98=)
12: 7350B2AE2BB011EEBF8C0962C4F9AE02.roa (hash: Sp7dFq3oB3/SLpjiNzPQXEcyYCMfjU6YoLN7YWBMCYw=)
13: 5C3C24DA7C3A11F19502E96961A30FBC.roa (hash: T7NOwWvyJhEbpJwEubb2URocPtjhrATKrc8a51jyrd8=)
14: EB3FE1C61B6411ECAAB1D328C4F9AE02.roa (hash: QN6urrq0/MRPBsyVwW06hj5Hgqfql2xPz8BmJ6v46LI=)
15: 9324BAA27C3A11F191D8747461A30FBC.roa (hash: UMSaqpVWfznuSNCIQQIcr3cpk2hC9l9TVFX2KvWq0oM=)
16: 03C522BA8CF211ED8699F014C4F9AE02.roa (hash: hZnSGa5sJglM36JrWPW33FVeXKbAkLzdvimEBvYGRK0=)
17: A6Yd3OnHW9dYg9W2ztPlcF88rF4.asa (hash: SGnS2QMul3e/ra8VZGJLEa8Q+Y/cerpYPT5AgVCOERo=)
18: E367308E8D8811EDB3C13D6CC4F9AE02.roa (hash: a063z56fhF465bYqQMqQ/VS6+YD1pprAbiKfQKP6c7Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13937 (0x3671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Validity
Not Before: Jul 28 15:24:09 2026 GMT
Not After : Aug 4 15:24:09 2026 GMT
Subject: CN=6a68c999-1ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:4b:cc:9b:e8:62:ba:c2:4d:44:77:a1:21:
1c:dd:6e:33:90:1a:e5:78:07:c5:bf:a8:7b:90:b7:
18:5d:a0:70:b5:f2:78:7d:88:87:40:9b:25:39:fd:
3b:ca:fc:1b:2b:15:9b:6d:14:23:6b:c4:d9:0b:89:
a4:b5:b6:ab:ba:02:15:68:30:ff:09:8d:28:40:7b:
4b:8c:91:9c:1b:58:ee:4e:03:72:1f:2d:4c:60:70:
ce:8f:93:63:63:af:ae:60:68:19:3b:d6:78:e3:56:
7b:58:7a:cf:9d:3f:4e:b9:d7:01:29:c8:f1:ca:f3:
6a:9f:5b:f9:58:89:04:ba:da:87:69:eb:4d:3d:48:
35:2a:d2:e4:7a:7b:f7:0a:a8:20:d8:04:6a:d7:a1:
24:62:d1:d6:f1:8e:f6:e8:dc:da:0a:79:89:fb:c2:
f2:5f:1d:9d:da:7a:1a:43:61:be:06:e6:41:af:bb:
56:1b:7c:d3:1e:17:1d:cd:72:ed:ab:91:8c:3e:07:
3d:3d:90:c1:a6:1c:62:22:75:57:1e:61:2b:3e:32:
cc:ab:dd:fd:c5:e3:e6:53:50:e8:72:c4:17:c1:63:
d3:c4:39:3b:0c:2c:9b:25:45:10:fb:bc:26:7d:b6:
1a:b8:48:04:38:bf:ce:5f:ad:4d:68:e6:2b:81:35:
65:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FE:DA:81:4A:0B:11:48:91:11:EE:38:90:2A:24:43:F5:0A:90:16
X509v3 Authority Key Identifier:
keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:b2:42:46:ff:0b:e2:58:ad:c8:a3:46:f6:5e:78:08:ea:7f:
96:83:2a:77:4f:e6:e7:de:1a:a9:77:3d:3b:34:95:8e:8e:40:
c3:16:f1:c6:c9:6f:45:b8:7f:0a:31:78:7f:e4:b6:da:af:f4:
5a:7d:14:cf:f5:7d:af:4c:bc:d8:50:01:c9:29:e9:c7:f2:71:
6b:dd:70:69:68:2c:ab:a8:d0:af:cb:d7:f5:a0:d6:30:23:a1:
4a:0d:95:6b:06:44:63:72:33:01:63:95:e0:f0:78:92:3e:58:
b5:d7:cd:0e:96:0a:53:08:6c:7b:49:3c:4c:b7:33:db:c3:39:
0e:ee:1e:c7:9e:94:d7:aa:23:09:06:bc:2d:22:9d:4d:3a:c8:
5e:07:94:99:d9:14:25:52:52:b3:e8:b7:fb:26:5c:cd:fb:83:
6e:26:2c:dd:9e:44:31:6e:ac:98:14:72:57:96:9f:e0:df:1f:
c2:38:06:0c:f4:14:fb:08:b0:34:03:2b:06:ae:14:55:22:f9:
f0:7d:8d:e9:88:02:d7:62:6a:d7:40:1d:a2:19:42:40:0d:26:
bb:c4:eb:98:d4:cf:9c:f8:a0:17:2a:4a:d5:0c:18:72:5d:04:
f5:cd:1b:66:3c:96:31:ab:ec:16:b8:f1:c1:dd:f0:f6:b0:72:
6d:d5:f9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:48:00 2026 by rpki-client