
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
File: uHLzTVUlH6dw7MOT0mcSED1VBzc.mft (raw, json)
Hash identifier: SB/Ej8H6I4xPJiUkKOycepLJTsz+tBZ5XA1mZuiXYkM=
Subject key identifier: 38:28:50:CF:F5:8F:67:40:F5:C3:02:12:CF:41:2D:46:CC:18:F4:75
Authority key identifier: B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
Certificate issuer: /CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737
Certificate serial: 0459
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
Manifest number: 044D
Signing time: Sun 01 Mar 2026 01:01:14 +0000
Manifest this update: Sun 01 Mar 2026 01:01:13 +0000
Manifest next update: Sun 08 Mar 2026 01:01:13 +0000
Files and hashes: 1: uHLzTVUlH6dw7MOT0mcSED1VBzc.crl (hash: Hgob1D9EJeoEaoBBfHzK0/QhK+yiOyYiUp10xY3UThE=)
2: 945375FAF69511EC90A47215C4F9AE02.roa (hash: ZvBKfJ1ADA7aCUjrmjndruwHDHPG/7Dn7tC/SJj/AFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl
rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113 (0x459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C606, serialNumber=B872F34D55251FA770ECC393D26712103D550737
Validity
Not Before: Mar 1 01:01:13 2026 GMT
Not After : Mar 8 01:01:13 2026 GMT
Subject: CN=69a38fda-05a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f5:c0:3f:6a:63:28:eb:43:e7:60:eb:ae:f2:
e8:bf:5f:6b:1f:70:90:d3:22:72:f9:d5:c9:8f:30:
2e:46:62:6e:fd:1a:20:e9:75:38:24:80:09:29:9d:
38:5d:bb:db:b0:f8:89:fe:5c:cc:59:b6:89:4e:d0:
84:43:e5:f2:7e:a2:ee:b6:29:83:e1:8b:fe:ad:c8:
e2:95:ac:2c:0e:f4:12:9b:73:9d:d0:1f:e4:32:fa:
7f:a6:10:24:e3:d8:d8:5f:b0:0b:b8:d7:ca:04:69:
be:46:bb:ab:07:8e:99:d5:27:5f:6e:1d:26:5d:49:
8b:d1:27:0c:13:96:a9:b0:de:9c:f8:06:a6:12:3a:
10:e9:ef:35:b5:f4:81:33:ff:61:42:fb:52:94:de:
62:f5:99:54:27:74:f8:b6:99:b9:2c:3b:8e:e3:5b:
f3:5f:aa:08:90:b7:1a:78:7e:e2:bc:f2:5f:51:e8:
cf:2b:17:35:bc:e0:a3:23:f1:5a:cf:18:83:51:9c:
b9:f4:d3:1e:68:4c:fa:8b:36:da:b0:ca:a4:9d:0e:
c6:0c:f8:56:e3:38:35:89:40:a8:35:4e:be:ee:84:
85:39:7a:e5:17:07:1e:8e:06:59:17:42:91:11:1b:
c6:05:a2:39:39:b8:11:c7:7a:2b:0f:19:16:74:2a:
8f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:28:50:CF:F5:8F:67:40:F5:C3:02:12:CF:41:2D:46:CC:18:F4:75
X509v3 Authority Key Identifier:
keyid:B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:30:f2:8a:13:21:3f:2a:c2:b4:cb:63:f9:f1:4c:ec:61:09:
7a:7b:d7:9a:ac:fb:28:7f:8a:28:71:74:7e:c9:f9:db:ce:a0:
16:8c:3e:06:04:43:c1:43:dc:7e:4d:7e:ec:e8:d9:40:d0:e8:
92:3d:1c:1e:6e:45:c6:9c:7f:f8:01:a7:73:45:d6:8d:92:e6:
0b:ec:f8:a2:c0:59:b1:50:f1:07:7f:f3:8c:ff:0a:70:e2:04:
83:ee:62:db:10:6e:78:03:1a:5f:b3:ff:ef:5f:f3:b6:a6:f8:
9a:37:bb:70:77:75:cb:01:06:df:eb:35:99:40:ff:34:47:7f:
a4:0d:b0:65:1a:17:1b:ed:f0:9f:ef:62:e4:a6:50:7b:9c:e5:
ab:d8:57:8c:c8:ba:53:64:9d:5b:ad:18:c8:3b:97:13:0d:ec:
fa:39:f9:65:06:5a:49:2a:b0:04:d5:b3:44:16:ef:83:fa:aa:
82:0b:e4:89:ab:da:98:09:d1:e9:af:fe:25:90:ba:2d:a0:93:
d6:ef:48:3a:61:57:39:55:ec:2c:a3:ba:84:bf:ed:22:33:15:
5f:82:5f:b6:6c:73:57:82:4e:68:63:0c:45:41:53:28:05:9f:
48:c4:9c:39:e2:b7:93:07:13:35:47:7b:85:88:78:00:23:2c:
82:93:04:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:31 2026 by rpki-client