
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.mft
File: U3pyvmM5N4xMTSlwK-12dczMFGo.mft (raw, json)
Hash identifier: wzcLJd7LQPOe7Yma9ydu/ls5QG2HI8OAunqzsHLEvIk=
Subject key identifier: 8A:5D:A4:8B:58:2C:23:6E:29:78:2F:04:6D:CD:EE:97:28:3E:51:4E
Authority key identifier: 53:7A:72:BE:63:39:37:8C:4C:4D:29:70:2B:ED:76:75:CC:CC:14:6A
Certificate issuer: /CN=A916EB98/serialNumber=537A72BE6339378C4C4D29702BED7675CCCC146A
Certificate serial: 0C67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3pyvmM5N4xMTSlwK-12dczMFGo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.mft
Manifest number: 0C5D
Signing time: Tue 28 Jul 2026 18:54:35 +0000
Manifest this update: Tue 28 Jul 2026 18:54:35 +0000
Manifest next update: Tue 04 Aug 2026 18:54:35 +0000
Files and hashes: 1: U3pyvmM5N4xMTSlwK-12dczMFGo.crl (hash: IVdxVZtkesQjCZ85dRUhQxLNpv4+uxOxYXDKiAu+5Ug=)
2: DD716A222ACC11EAAB36B444C4F9AE02.roa (hash: WSz2V/sotpR3gJkmMh94wQPcuajtaYW6M7zsjsYcooc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.crl
rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3pyvmM5N4xMTSlwK-12dczMFGo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3175 (0xc67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EB98, serialNumber=537A72BE6339378C4C4D29702BED7675CCCC146A
Validity
Not Before: Jul 28 18:54:35 2026 GMT
Not After : Aug 4 18:54:35 2026 GMT
Subject: CN=6a68faeb-e0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:af:47:0b:67:d0:7f:5f:8a:57:50:69:b5:
dd:3b:7b:1d:91:04:05:d9:9d:e3:c2:be:6a:a6:1c:
c0:7e:17:af:76:e6:3f:64:e3:66:8c:36:45:06:56:
21:82:8b:41:98:86:5b:8c:36:0d:2d:4e:54:e0:60:
58:fc:ce:4f:85:92:59:12:5b:74:70:bb:2f:ca:75:
38:99:bd:2e:8e:93:8e:26:14:1b:e2:d3:d8:54:35:
7a:a5:f7:d9:a9:c6:ee:16:39:ed:be:57:a1:f3:07:
4e:f1:3a:6a:4b:de:fa:c1:bc:9d:39:2e:75:51:1c:
c1:67:64:ba:ea:1f:a1:04:58:16:ea:4a:b9:f2:d5:
b1:29:de:c3:21:8e:a2:38:1d:b4:33:c8:8b:77:ca:
4f:df:e1:97:ae:31:7b:e6:08:4b:85:97:31:e8:53:
72:ac:66:f0:2f:a6:2c:52:82:26:cc:be:d0:16:4b:
dc:09:8a:ca:01:03:94:1a:67:5f:e2:b8:1d:2d:d8:
28:0d:04:b6:e8:f3:34:1f:f0:cf:23:c8:47:ea:f2:
17:b2:5f:12:cf:96:3e:43:3c:d2:e5:f5:62:f1:37:
0b:08:fb:07:37:99:11:59:4d:9b:1c:72:a6:cb:2b:
1a:d3:3b:93:cc:b7:02:0f:12:56:6e:07:84:1f:0d:
50:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5D:A4:8B:58:2C:23:6E:29:78:2F:04:6D:CD:EE:97:28:3E:51:4E
X509v3 Authority Key Identifier:
keyid:53:7A:72:BE:63:39:37:8C:4C:4D:29:70:2B:ED:76:75:CC:CC:14:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3pyvmM5N4xMTSlwK-12dczMFGo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:57:d6:42:f0:4e:74:c3:a0:99:86:6d:74:cf:bf:bf:68:b5:
d0:cf:07:df:c2:f1:33:22:c5:91:83:1b:b7:79:52:51:73:dd:
22:16:45:3b:ca:20:fc:a2:fd:cf:3e:6d:74:28:e0:a7:24:a4:
3f:58:cd:8e:f8:65:8d:51:ff:7d:f3:80:62:84:5d:00:62:f1:
84:90:31:43:e7:f7:05:d3:57:a8:98:7a:b8:30:84:01:ad:6f:
f5:44:1d:73:74:29:2b:92:b4:45:6c:ac:39:e0:45:21:c7:dc:
3c:40:b4:6e:05:1d:dd:d7:d5:cd:a8:40:7d:82:c3:0e:6f:0b:
26:08:40:25:5c:49:68:43:01:b8:90:77:84:16:b0:5d:96:42:
85:25:86:62:05:85:a1:76:ea:8b:19:61:9d:06:2e:4e:db:fa:
3e:79:45:b8:72:2b:e3:e4:82:c1:37:76:79:15:e7:1f:0c:2d:
8f:3a:0f:aa:57:2c:7c:af:2b:35:e7:17:de:dc:8a:7d:30:d2:
6c:c7:c0:f3:91:f8:b2:12:66:d1:cb:83:ab:87:8b:b1:e8:02:
5c:27:0e:a7:49:9d:d4:5d:eb:16:cd:4c:32:84:ae:9f:f6:57:
b9:73:b7:d1:64:40:8d:a8:c2:4f:45:0b:16:1b:28:7b:1f:21:
9e:6a:e7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:21:04 2026 by rpki-client