
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
File: uHLzTVUlH6dw7MOT0mcSED1VBzc.mft (raw, json)
Hash identifier: uG2ddwkzTdSwX01b735oBqqQcUa+ExzNcr+0N/30Iyo=
Subject key identifier: 71:BF:27:9B:E5:81:AC:6C:F3:32:71:B6:B7:46:46:D9:A4:16:C7:61
Authority key identifier: B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
Certificate issuer: /CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737
Certificate serial: 0475
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
Manifest number: 0467
Signing time: Fri 17 Apr 2026 00:04:08 +0000
Manifest this update: Fri 17 Apr 2026 00:04:07 +0000
Manifest next update: Fri 24 Apr 2026 00:04:07 +0000
Files and hashes: 1: uHLzTVUlH6dw7MOT0mcSED1VBzc.crl (hash: 8Q6F9q5DZYOWJmVuYRKkPeSeqZ4Su265zKX1+HAxpLo=)
2: 945375FAF69511EC90A47215C4F9AE02.roa (hash: zMi/iKJQrGzXvdGe1pLHWvdh1dvtB0WJqrM1vceGtKE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl
rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1141 (0x475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C606, serialNumber=B872F34D55251FA770ECC393D26712103D550737
Validity
Not Before: Apr 17 00:04:07 2026 GMT
Not After : Apr 24 00:04:07 2026 GMT
Subject: CN=69e178f7-f42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:0b:4d:46:fa:bf:14:b3:93:eb:19:e4:71:
9b:5f:7b:5e:8e:c2:2f:a2:20:d7:2d:6f:a5:2c:37:
bc:2d:d2:55:72:cf:d3:27:2a:21:8d:fa:9d:0f:a0:
6a:4b:37:bc:86:cc:cb:f1:eb:d3:e2:e9:06:f1:4c:
80:a9:03:78:07:f1:da:46:ba:ed:7f:43:e9:ea:83:
ca:28:10:67:1b:6b:83:57:a7:8c:0d:0a:6d:47:58:
8d:24:df:41:bb:3c:e5:66:ba:aa:41:a0:c4:77:68:
bb:20:de:6b:cb:b9:4f:ee:88:80:0e:9f:2e:38:e1:
0c:c6:33:55:a0:07:5c:bd:a4:30:0c:ea:05:86:b6:
9d:d1:4a:1d:21:fd:6b:1c:6a:d0:dd:44:10:0d:d8:
d5:7e:18:fb:4c:30:ec:1c:a1:b5:37:e7:e4:6d:d6:
f6:10:a6:de:aa:26:4c:7f:45:ca:3c:db:f6:53:74:
49:2e:aa:d9:28:76:72:a3:e9:11:8f:8d:20:ff:00:
24:f6:07:fe:8b:e8:8e:e1:09:fc:25:df:76:70:fe:
b7:9d:3c:9a:5b:af:dc:8b:08:00:9e:c5:84:62:56:
08:97:cc:3a:f0:45:56:e2:5e:46:d6:c4:2b:9c:48:
ff:c3:02:3f:d0:d2:33:14:dd:7c:b9:48:d0:0d:27:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BF:27:9B:E5:81:AC:6C:F3:32:71:B6:B7:46:46:D9:A4:16:C7:61
X509v3 Authority Key Identifier:
keyid:B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3f:e6:7f:1f:fe:c8:d5:33:69:1c:fc:a2:47:db:f5:b1:59:
33:e0:d0:7f:63:47:4a:b9:27:de:9e:ff:a3:56:db:76:5a:63:
b9:9c:a2:34:3b:ef:b0:46:3c:2d:66:02:e7:73:2e:c4:11:0d:
95:d0:fd:20:8c:8e:47:9d:e6:c1:c3:4a:45:25:6b:8a:2f:a1:
97:1a:75:c7:1d:81:9b:c6:7f:f7:92:a6:32:20:72:21:0a:1e:
43:b9:d8:c1:ad:19:e5:3c:8f:cf:1d:bb:1e:85:e9:8f:4e:42:
52:6e:c3:fb:d2:e5:3b:ea:eb:79:d3:d5:ff:76:36:0c:f2:6a:
0d:bf:35:8c:bc:2e:75:e6:a7:57:79:54:24:fa:26:b6:19:d7:
94:ad:0f:ca:ac:41:78:0c:ea:ee:91:c2:be:cc:c5:11:20:5b:
bf:00:94:ac:8d:5c:c4:98:4d:55:10:fc:42:24:ea:60:68:77:
73:ec:10:bf:62:d1:44:e5:63:5e:2b:23:ec:cc:ab:ae:e9:e2:
98:c0:4a:f0:21:b4:21:5e:57:c8:f2:2a:4d:a2:ff:c7:7a:eb:
bb:e3:20:64:e2:c1:2c:04:8f:6e:cc:c4:da:b3:58:d7:a0:8c:
91:a2:b6:d7:8c:71:e3:2c:55:14:ce:a0:e9:ef:9d:2b:33:7c:
60:27:bf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:12 2026 by rpki-client