
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
File: UuFqm4muyCoM8IXPWufcPrCPDJE.mft (raw, json)
Hash identifier: +O9HIKz8Hz3JzUQTdcHGppgRfryViNYzE9DO2VfseOE=
Subject key identifier: B1:26:AF:28:DF:FD:FA:6C:06:73:D2:9A:66:6B:D9:91:7A:AD:68:02
Authority key identifier: 52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91
Certificate issuer: /CN=A915CA20/serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91
Certificate serial: 10A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
Manifest number: 109D
Signing time: Tue 28 Jul 2026 17:27:11 +0000
Manifest this update: Tue 28 Jul 2026 17:27:11 +0000
Manifest next update: Tue 04 Aug 2026 17:27:11 +0000
Files and hashes: 1: UuFqm4muyCoM8IXPWufcPrCPDJE.crl (hash: ygCQtl6tN+wzMJKkw3X33U6p2YQoEQB3fWqSy7Hn7ng=)
2: 63B80D12552011E9BA55007FC4F9AE02.roa (hash: jDSrI3tiBLuiSSNFQkVfzJSHxL6tqKpe8Wp+KW0eJyc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl
rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4264 (0x10a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CA20, serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91
Validity
Not Before: Jul 28 17:27:11 2026 GMT
Not After : Aug 4 17:27:11 2026 GMT
Subject: CN=6a68e66f-4e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:dc:c8:6a:4d:34:51:a5:fd:59:8e:07:c8:
16:2b:b3:8d:1c:04:ca:fc:92:c0:f7:a7:65:91:2b:
92:2a:09:2e:99:db:11:f3:c3:69:69:ec:ef:0a:2c:
57:6f:1f:09:61:64:d4:a2:a7:c3:25:d8:34:3b:d7:
0d:c7:0e:88:73:69:be:1a:71:0e:49:c7:d2:c4:e6:
f3:e6:49:38:93:d3:b5:7a:4a:9b:37:c0:65:d0:2e:
a5:94:92:d4:a5:23:a5:3e:65:b7:82:a2:d6:03:78:
53:eb:04:e8:95:3e:6e:13:e1:a5:4f:a2:d3:81:35:
62:9c:42:77:c7:28:5b:48:09:41:97:93:09:4b:3c:
d7:d4:17:24:1a:9c:a9:bc:1d:c9:23:c1:5d:3e:db:
23:6b:23:76:13:be:a1:df:7b:07:80:69:80:61:ff:
5a:dc:3b:e1:4a:45:f8:ad:93:97:31:78:37:1f:42:
32:4b:2a:9a:f5:93:c7:66:ab:5b:46:05:97:45:35:
4e:0e:6b:4c:09:75:4d:e1:df:c7:3a:bb:b1:f5:f9:
94:c2:8c:c5:7b:6a:af:79:af:6b:8f:17:9d:21:70:
12:95:86:16:08:41:8c:72:01:7f:a0:b6:0a:d7:f4:
31:09:22:4a:9a:a2:52:bc:90:62:8a:86:fb:e1:c6:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:26:AF:28:DF:FD:FA:6C:06:73:D2:9A:66:6B:D9:91:7A:AD:68:02
X509v3 Authority Key Identifier:
keyid:52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:36:32:e2:93:b7:e8:a9:0c:d7:c6:6b:2b:69:dd:f4:df:ac:
3c:ad:6e:ea:b0:2b:5e:af:76:16:95:91:bb:78:d5:90:70:c9:
e6:06:50:6b:c7:42:e9:4c:ee:d5:28:7f:c3:d7:d1:f5:b3:03:
76:91:cb:24:4b:7e:e5:24:61:c6:b8:27:19:af:71:8c:a8:54:
1a:70:b1:21:a9:fd:33:95:0d:f4:00:56:03:bc:bd:30:8a:99:
de:df:63:36:30:0d:80:ae:41:73:df:bb:12:9b:17:93:f3:5a:
3f:16:c1:9e:fe:34:c7:53:c2:c1:9d:62:f4:c5:d3:96:a8:00:
f6:a9:90:01:f7:1e:93:4b:9d:6d:bf:66:47:40:b4:84:98:b5:
a3:53:45:ca:22:22:13:5e:20:98:b6:cb:de:a9:3c:ec:e4:b6:
6f:20:9b:e3:66:82:19:37:93:86:67:0f:d3:c7:51:33:80:df:
ad:4d:24:8e:22:c7:14:24:51:14:91:9a:8b:db:e8:dd:6f:4a:
40:0a:d2:5d:c5:07:8c:9c:34:8b:94:73:55:cf:d4:ea:92:a7:
b2:e4:03:63:db:7c:5a:a5:e2:0b:3c:3a:28:ea:37:b7:47:89:
67:0f:89:ec:dc:54:5e:33:db:f3:92:00:d6:fa:cb:e3:e3:09:
c9:33:88:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:19:57 2026 by rpki-client