
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
File: uHMcMIhjyygE4HbVjowHFZtOXxk.mft (raw, json)
Hash identifier: pqDqoH5NnqllZyxuDUkCoTIzw1lUFpLkNAwWXfyx4/Q=
Subject key identifier: 94:29:F9:A0:09:4E:6C:88:C7:B0:59:E0:E8:89:22:93:2C:7E:B0:4D
Authority key identifier: B8:73:1C:30:88:63:CB:28:04:E0:76:D5:8E:8C:07:15:9B:4E:5F:19
Certificate issuer: /CN=A9164663/serialNumber=B8731C308863CB2804E076D58E8C07159B4E5F19
Certificate serial: 08A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
Manifest number: 1B48
Signing time: Mon 02 Mar 2026 02:10:19 +0000
Manifest this update: Mon 02 Mar 2026 02:10:17 +0000
Manifest next update: Mon 09 Mar 2026 02:10:17 +0000
Files and hashes: 1: uHMcMIhjyygE4HbVjowHFZtOXxk.crl (hash: QW041CtmwnIMp75FX+SHXQxu3BczEtMRcb8KU77irTc=)
2: 3D626CDC065111F0BFE43624C4F9AE02.roa (hash: +X/vGvhbD2HPX2+2Y6FHbu+u6Ala2ziVuzhDCcUV8+A=)
3: 7BB2BC009FFA11ECA13C2839C4F9AE02.roa (hash: UQulzcPFXWom5N835V23GriHroThL5pVrJfPuxxBalU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.crl
rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:10:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2208 (0x8a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164663, serialNumber=B8731C308863CB2804E076D58E8C07159B4E5F19
Validity
Not Before: Mar 2 02:10:17 2026 GMT
Not After : Mar 9 02:10:17 2026 GMT
Subject: CN=69a4f18a-1fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:06:00:3d:26:83:36:e2:25:fe:a4:f3:47:1b:
5c:6b:16:55:e1:9a:f0:78:f7:3d:63:76:ef:4f:9b:
47:91:d9:25:ea:e4:ef:73:81:57:b2:56:b0:e0:e5:
9e:d0:0a:18:d7:12:7f:76:53:c0:ba:c9:ef:73:be:
5f:2a:df:bc:3e:d3:bf:70:68:1e:54:c5:ea:c3:81:
fb:d3:62:71:37:03:a5:b6:d8:5f:31:14:5e:8a:95:
dd:97:6c:d0:06:58:d4:15:ce:4a:1b:1b:2c:53:ea:
69:e5:79:03:e7:b1:30:33:b0:69:a2:02:74:67:1b:
fa:db:d6:3f:d7:5e:af:9d:a7:89:59:f8:e9:de:30:
68:6e:f2:19:39:6d:c8:40:cd:56:26:90:b0:db:5e:
03:9c:a3:ff:ae:ea:ec:ff:d8:35:ba:88:e7:55:cf:
09:b9:49:65:c0:dc:47:54:5c:57:e0:d5:c4:3d:a9:
0b:8d:c4:86:3b:f1:0c:1d:76:7e:e9:53:64:6e:1e:
0e:2c:03:4b:6d:9d:aa:ca:18:0f:5b:66:fc:f7:86:
bb:2f:45:3b:35:4a:37:c5:49:c0:5b:89:a2:60:16:
6f:a4:8f:cd:be:6e:04:7b:59:0a:42:ac:9c:37:c6:
f5:1b:88:4e:2d:f4:a4:bc:2c:65:99:e6:25:26:f1:
b7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:29:F9:A0:09:4E:6C:88:C7:B0:59:E0:E8:89:22:93:2C:7E:B0:4D
X509v3 Authority Key Identifier:
keyid:B8:73:1C:30:88:63:CB:28:04:E0:76:D5:8E:8C:07:15:9B:4E:5F:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:6b:84:52:0a:18:10:35:fc:55:86:0d:ef:a5:30:e6:d4:65:
a8:0d:a5:02:b3:35:1f:dd:e3:f9:de:52:12:77:26:6a:ef:ec:
c2:02:8d:56:2a:63:da:3c:8d:69:a5:03:85:cf:4f:b4:7c:ff:
d2:9e:93:87:b0:8e:a8:9e:dc:14:4b:fe:68:a8:28:7d:32:56:
db:2c:98:24:65:0d:84:82:58:7e:a2:8d:ec:b1:63:1c:ee:30:
a6:f0:b0:3c:d5:32:87:db:17:01:78:18:9a:05:8e:bc:6e:aa:
d2:80:eb:09:f2:5d:9e:d4:29:63:df:3b:ed:bd:e5:2b:04:0c:
79:4e:51:3f:aa:66:51:b5:b5:de:3d:a2:b2:78:b8:92:c4:5d:
20:f0:a9:a1:a4:2f:c1:be:0a:3d:1e:92:78:bb:5c:4c:25:41:
e2:97:a3:b3:3f:a6:72:ff:e4:58:f3:dc:17:a1:33:ca:98:24:
6a:f4:68:53:6f:c5:4d:12:68:95:99:f7:b4:2b:50:5a:32:25:
0b:6c:a4:67:aa:f1:99:da:c0:ee:a6:dd:2b:9e:3b:c2:1a:94:
77:f1:c9:f5:05:74:fa:9e:8d:09:89:d2:91:41:d6:e9:2b:36:
29:3c:e6:e7:d0:88:52:d0:82:d9:81:66:3b:36:6a:cd:89:63:
d1:fe:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:14:15 2026 by rpki-client