
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
File: 5ufguvNPIMPZye8md2gF84JGO4Y.mft (raw, json)
Hash identifier: i6id3cxBpKBn7B9600JnwgMTJpfXq3ki/2dqOUMxW3g=
Subject key identifier: B7:B3:CB:AC:7F:CB:28:30:3C:AD:E0:AE:38:BF:E7:35:36:90:98:00
Authority key identifier: E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86
Certificate issuer: /CN=A9160BD2/serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86
Certificate serial: 0705
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
Manifest number: 06FD
Signing time: Mon 02 Mar 2026 02:14:29 +0000
Manifest this update: Mon 02 Mar 2026 02:14:27 +0000
Manifest next update: Mon 09 Mar 2026 02:14:27 +0000
Files and hashes: 1: 5ufguvNPIMPZye8md2gF84JGO4Y.crl (hash: iUi+Ww4bjNPWnEiVhTlpKoGns5GTwrd/GYaYlQgC47k=)
2: 159A3C967D7211EBA0A7FF60C4F9AE02.roa (hash: OEMpa1KlXpQKnwSOPbdVNFMo4hIhQv2n0cr4lbB8s+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl
rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1797 (0x705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160BD2, serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86
Validity
Not Before: Mar 2 02:14:27 2026 GMT
Not After : Mar 9 02:14:27 2026 GMT
Subject: CN=69a4f284-3af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e7:d7:20:d6:66:32:0b:ac:8b:69:ad:c2:54:
6e:ed:3f:dc:d4:f9:25:d4:d0:4f:01:60:42:d4:38:
47:dd:92:b4:f2:07:7b:8f:a2:ff:1f:6f:2b:89:4d:
f6:d4:18:3e:c8:55:00:19:e5:80:3e:8d:16:40:8b:
b7:ac:32:c8:b3:13:4e:53:9e:c2:99:7b:f4:41:de:
6a:b6:46:7d:2b:fc:0c:7d:5f:71:f5:83:5b:9e:06:
62:08:2f:18:6e:b4:b3:1b:35:39:9a:e6:9b:b5:bb:
eb:16:13:92:b3:a2:36:45:9f:0e:c5:5d:15:0b:97:
74:63:ca:c2:aa:33:a2:d3:ec:e7:b2:39:b1:54:6c:
d5:ae:3a:11:ca:91:95:ad:4b:4b:df:5c:c5:ad:f1:
f3:35:34:e1:80:65:f8:ff:10:e3:16:18:bd:b2:9f:
61:86:62:db:f9:5b:a6:ba:28:c4:d5:57:d3:a1:66:
f0:62:ea:46:98:72:8a:41:97:a7:c5:06:11:78:1b:
66:6a:55:12:81:1d:6c:0a:5e:52:fe:cd:db:6c:12:
2c:e6:69:2d:96:f2:a8:50:59:ca:93:b3:8e:ff:38:
d6:d3:a2:12:74:e4:b9:ba:dd:8a:4c:8c:00:0c:00:
bf:a5:c5:51:fd:2a:47:27:c0:6b:64:a7:97:75:3b:
57:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B3:CB:AC:7F:CB:28:30:3C:AD:E0:AE:38:BF:E7:35:36:90:98:00
X509v3 Authority Key Identifier:
keyid:E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:56:54:f6:df:d9:db:a9:64:73:d7:a7:3a:cc:4b:e5:25:a1:
e9:ae:62:2a:dd:a3:a5:8c:d0:26:2c:d1:d4:a2:cd:c5:41:82:
ef:d0:48:60:82:bd:60:8e:89:00:4a:3a:52:f0:8f:05:1d:ad:
e8:03:ed:e7:f2:5f:88:9f:49:ba:fb:fa:29:f7:4d:4b:39:b0:
02:4d:ae:f9:fa:66:dd:b9:5a:a7:dd:33:fe:ca:9b:85:ec:1c:
a5:c1:1a:96:fb:d8:48:51:30:cb:2c:df:02:56:6d:bc:67:d0:
ef:c8:df:38:86:af:23:64:82:ae:32:11:0b:39:4c:43:21:16:
53:22:ca:14:a1:08:5f:fc:22:44:e3:6b:d3:3e:9f:e6:00:02:
a6:b5:aa:b7:22:00:a5:75:12:28:1d:d0:c6:83:e0:2b:db:4d:
70:36:24:8c:51:8e:90:a3:50:10:41:5c:62:f0:e8:56:9f:3c:
35:cf:12:5e:c0:db:09:12:ce:fd:58:b5:e9:2e:c0:2d:f1:eb:
22:81:55:c9:30:dd:39:88:06:cb:5c:5c:ab:d9:21:de:9c:7a:
c4:b3:95:7b:87:d2:70:39:5e:6b:b4:88:14:4c:21:cd:1d:2d:
c3:67:0e:9d:0a:65:5a:0e:7f:f6:03:6e:49:5e:f2:8f:de:4a:
e7:b3:d9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:00 2026 by rpki-client