
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
File: u1uBVrA35dIiY-rH9qEcBS_fYz8.mft (raw, json)
Hash identifier: Vd9tZMBU2qrwlE36rU1qQIXydzxFH5dOeY2L8HpjxQY=
Subject key identifier: C1:96:B8:EF:26:CA:2E:87:4E:4B:47:95:1E:53:C0:63:EB:5B:60:0B
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 35D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
Manifest number: 34DE
Signing time: Thu 16 Apr 2026 15:18:33 +0000
Manifest this update: Thu 16 Apr 2026 15:18:33 +0000
Manifest next update: Thu 23 Apr 2026 15:18:33 +0000
Files and hashes: 1: u1uBVrA35dIiY-rH9qEcBS_fYz8.crl (hash: uBsgxDMkpDOuCGesQyAFsZa2d1ze+X23cUtnkoT0FFk=)
2: 9826D5EEB45011EE829AF51CC4F9AE02.roa (hash: 86cvT6B3ZejUUm753dASrOhtmFOEODhas3G/CWXEdLk=)
3: 47E1F234B45111EEA556091EC4F9AE02.roa (hash: y7FzZtWFboD8vtJhkIMB4U1/N9/RdxpQzgNAs6lz9Ac=)
4: F180E2B24FD011EFBC17A55DC4F9AE02.roa (hash: WVSuSVu9XtzUKG1iJdX4QT5xrlejU2MB2s3fixWP2cM=)
5: 0A5276E04BB611EE8F105367C4F9AE02.roa (hash: n7TN1uj8n4gchzijD1pavgoeUAqPKAEFZXgfq3z3jG8=)
6: DD1805369A8311F0A54CE65CC4F9AE02.roa (hash: JOcwd7IEKPKIGjsoQPA9h2XxSCml4L15OgvgYcufBfM=)
7: A2239B14782011F0A1950D84C4F9AE02.roa (hash: dVCT46AU8HCpBu6dDT1pvx0Z/TB+7B/58VduwrvYQcM=)
8: 6159E3148BEB11ED9A3CD825C4F9AE02.roa (hash: GLEuGysXV5s23INnNTuTrzbUUCtisU0BZ9bsy5nJDw8=)
9: B06C3C12AD6911EF9690E658C4F9AE02.roa (hash: Orgh2gmWjSUGz2QXuZ5x6bsBG8fFnCs1ss14ZnhI48k=)
10: 9B6837A8AD6911EFA86BAA58C4F9AE02.roa (hash: s915nOWu/MBKWY9jgrij5TjNu9VXcJZrYGoKrLCE6Co=)
11: B91BEB86943711F08A09E30CC4F9AE02.roa (hash: +KTfUQ6tg37LXnkbrgc+pkgRz7Bqgea5nS2R+G/3+0o=)
12: 26E8E0566DF011F0B88F3F58C4F9AE02.roa (hash: 1eANa3ckq+MIbswcFzGbs2ChcRY9PeAfmXot0LZNknY=)
13: E9E37A28AD6911EFB6E53159C4F9AE02.roa (hash: jpqJn+cb9v8NrhMgwHmSyLzKC9MPzIT8ia9AuGbaiII=)
14: AA5075824F1811EFB6ECD54CC4F9AE02.roa (hash: 9Bp/3Xw7BMSO3XjSUxZqV9OJsrdT4s2cJuueRw/DzG8=)
15: 22C2A76E854811EFA776AC73C4F9AE02.roa (hash: j8bqRMRJRFRcLdyP8/a8He5tY8U0rf1ouVHxwWx26e8=)
16: 6B016F4EB6C911EF9370FA5AC4F9AE02.roa (hash: 1djIPJgCF2lzvTU6up8RTaTZojIYuTvkj/AM7gDwR2k=)
17: FFAD463CB6C811EFAE27D256C4F9AE02.roa (hash: qdkE0ZoScsBDqfW25XUncJIUF7qXvWGjK3SwsqDVwSM=)
18: 60DB91E48BEB11ED9A3CD825C4F9AE02.roa (hash: gCgsXZFVAl/UaI6EeJW4VeNS+OWl1PVGVz4vqbS9GYI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13784 (0x35d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Apr 16 15:18:33 2026 GMT
Not After : Apr 23 15:18:33 2026 GMT
Subject: CN=69e0fdc9-2dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:ae:dc:2a:22:90:b2:bc:61:b8:fd:e1:36:
31:44:56:9a:0f:d2:5c:2e:56:cb:5e:4d:c4:e0:e2:
84:fa:7e:59:d0:1f:86:8c:67:32:64:d9:34:ec:cb:
0c:b8:c3:cb:56:06:12:f5:a0:6e:55:bb:48:c0:23:
cb:f6:b3:97:92:f0:7b:60:77:ec:af:d0:06:b1:2b:
5c:fb:a1:f4:67:7a:d7:88:ca:16:42:48:b5:ab:45:
94:2d:7b:32:e6:03:68:8b:c0:68:d2:ba:7f:a4:76:
fc:da:05:81:c2:61:42:80:78:65:ce:16:50:11:63:
29:54:73:79:cb:a3:f1:e8:e5:39:2f:dd:78:8b:be:
5d:27:04:59:12:98:41:ca:1c:ca:e0:fe:52:77:6b:
9d:2e:d0:46:4e:15:c1:69:08:db:df:1e:e2:d7:36:
60:4b:a8:e9:fb:db:c4:84:08:e5:2b:6f:43:2c:f0:
19:db:bb:fa:12:68:e7:01:ce:3e:71:f0:05:7d:32:
63:38:9a:73:a1:12:77:b0:2a:6a:60:4b:ac:2c:e8:
72:c0:c6:77:ea:ac:bd:ad:f4:8b:bc:69:58:dd:7f:
48:a4:c7:7b:ef:5d:1a:ad:db:0e:a3:83:8b:3a:aa:
b8:9b:b7:35:f0:5a:ef:52:35:b5:fb:4c:bb:4e:24:
cc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:96:B8:EF:26:CA:2E:87:4E:4B:47:95:1E:53:C0:63:EB:5B:60:0B
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:ff:53:c5:22:a2:1f:bb:1b:78:9c:cc:1d:e0:dc:58:06:e0:
16:46:62:d0:aa:20:15:92:2d:8b:10:ee:47:b5:2f:60:ee:d3:
12:bd:65:8a:54:bd:96:5d:1f:5f:30:de:b2:a5:af:cc:a3:bd:
41:4b:aa:ab:9c:b7:98:68:76:12:6f:77:7f:e5:d4:df:09:c6:
06:51:5f:6a:db:1e:94:39:50:01:50:00:d8:2e:0b:36:23:d4:
6d:c7:ed:e9:75:5f:b3:f3:a3:43:45:0f:2c:1f:65:e7:90:5b:
1b:cc:14:90:3e:89:c8:27:a8:6f:ce:8f:91:f5:d9:20:33:0e:
d3:d8:b4:30:a9:f6:7f:6f:a2:22:43:4a:09:02:ee:52:53:ee:
1c:12:25:16:c8:a4:75:3c:92:c6:72:0b:ed:4b:d2:9e:12:55:
fe:ee:b7:d5:0c:d5:1f:6a:90:18:b6:9f:e6:86:88:c6:a6:0a:
61:5d:28:3d:cb:bc:d4:45:c6:5a:e8:3e:ac:d4:f7:13:97:aa:
9e:38:9d:e8:1f:e8:9b:2f:98:f1:ea:40:64:62:e1:34:c2:29:
93:93:52:5e:69:64:f9:72:6c:09:b2:7c:d8:04:85:c0:ea:fd:
cf:81:69:30:15:4a:13:55:f8:ba:d8:21:55:03:f1:4f:81:33:
3b:92:e0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:52:44 2026 by rpki-client