
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft
File: U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft (raw, json)
Hash identifier: 3flA8xOZkz9vyeF3q17izAKLVFeXsRMLq+K1ReeLXBI=
Subject key identifier: 14:73:BD:41:5C:EB:E0:C1:97:DA:30:A0:0D:0C:FD:ED:EA:08:92:C3
Authority key identifier: 53:C0:8B:DA:04:BC:05:32:21:EB:27:3A:A2:15:CC:D9:5C:00:C3:92
Certificate issuer: /CN=A9187325/serialNumber=53C08BDA04BC053221EB273AA215CCD95C00C392
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft
Manifest number: 0129
Signing time: Sat 13 Jun 2026 05:43:51 +0000
Manifest this update: Sat 13 Jun 2026 05:43:50 +0000
Manifest next update: Sat 20 Jun 2026 05:43:50 +0000
Files and hashes: 1: U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl (hash: o2J3c1SMlDvX+1dJ6jInf8cYque+g2RdPlwA1bMx8XA=)
2: 30BF0192D5B411F0BA49041CC4F9AE02.roa (hash: 7Xq/xrlaF1i6pCbhVMnZT3OZ5U9fhM3Ebdid2BeEwH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl
rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187325, serialNumber=53C08BDA04BC053221EB273AA215CCD95C00C392
Validity
Not Before: Jun 13 05:43:50 2026 GMT
Not After : Jun 20 05:43:50 2026 GMT
Subject: CN=6a2cee16-dfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:0a:ac:a5:fe:ec:3e:8f:05:27:bd:74:74:
33:d5:21:c5:45:3a:6e:5f:85:23:da:e3:c8:26:5c:
bd:ba:78:cc:37:53:77:e1:32:ca:51:a9:79:ff:59:
ed:c0:63:06:ee:61:3f:88:96:a6:da:8c:b9:ce:53:
4a:ec:24:96:6c:a8:8e:ab:41:2c:56:29:c7:cb:0b:
df:09:b6:d9:4e:40:03:fd:bd:53:b2:bb:36:c1:f4:
c9:16:aa:e1:6b:92:6d:d8:7a:66:25:d1:a1:e6:71:
b7:f5:d6:63:47:66:11:70:17:c6:6f:5c:f7:19:c0:
89:9b:74:75:40:00:5c:df:a3:15:26:03:63:44:31:
02:10:b1:2b:31:9d:36:a1:64:03:c9:5b:45:2b:3d:
e1:04:b1:a1:58:84:7e:9e:35:da:b9:cf:5a:d1:b0:
7c:2b:7c:51:cd:63:39:e9:57:40:f6:dc:26:41:31:
ad:df:83:56:9b:89:1a:40:d5:ca:fb:29:55:af:87:
73:73:85:87:00:80:1c:06:fb:21:42:dd:38:26:7f:
58:c0:29:f2:1d:d5:7f:c3:6e:a5:e7:8f:43:5f:b5:
41:9d:57:4f:b2:7a:ae:9e:50:a1:3a:95:f4:c9:91:
49:db:2e:1a:b6:91:12:84:db:86:0b:d1:4a:05:63:
0f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:73:BD:41:5C:EB:E0:C1:97:DA:30:A0:0D:0C:FD:ED:EA:08:92:C3
X509v3 Authority Key Identifier:
keyid:53:C0:8B:DA:04:BC:05:32:21:EB:27:3A:A2:15:CC:D9:5C:00:C3:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:3c:e2:e4:47:d3:23:d0:d6:b7:73:34:23:44:bf:26:2d:5a:
b9:9e:fe:91:89:3d:b9:47:95:c9:9c:74:36:12:38:75:f1:e9:
bb:84:c5:93:85:5a:e6:d6:81:07:e3:2e:d7:22:2e:10:48:58:
16:a2:8a:ba:9d:cc:cd:11:09:24:bc:60:da:8a:b6:b6:92:0f:
b8:3d:f3:8f:36:ce:dc:82:c6:00:37:fa:03:8a:4d:70:d2:3a:
8a:2c:cd:78:b0:37:11:5e:58:50:5d:13:55:f6:03:1c:97:f3:
b8:67:41:f1:6e:07:98:60:9e:5a:06:78:bd:6b:ff:8a:ce:86:
af:38:e5:77:b5:60:ae:f8:f3:fe:86:3f:59:ec:46:47:8b:0c:
9d:ca:35:bb:14:1e:23:a3:29:3f:30:02:4f:c2:b9:a2:aa:fe:
eb:46:a6:74:ac:20:27:f0:42:c1:c5:f9:db:12:b4:d3:5f:f8:
be:17:82:65:71:c1:80:ea:a2:fe:19:7d:4f:36:66:f3:a7:b5:
5e:fb:83:0b:11:d9:37:9f:38:30:fc:af:14:c4:b0:b8:5f:f5:
8d:2b:d9:be:1b:6f:ca:54:6b:d4:a5:ee:ff:17:7b:a7:34:8b:
2a:16:28:8e:1a:51:e2:06:c1:d5:3c:93:c6:b8:9d:62:77:d7:
35:27:54:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:16:00 2026 by rpki-client