
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
File: uc1X4v9PWLuVmpVBoxz99ml2GLI.mft (raw, json)
Hash identifier: 8ahqUhkR4oG6x0O0m19gD2yxGiBjPLwF7Z3tkH+hRqE=
Subject key identifier: BA:16:51:20:A4:2E:9B:6A:48:6E:88:53:3E:D3:B3:A3:45:50:73:73
Authority key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
Certificate issuer: /CN=A918E023/serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
Manifest number: FA
Signing time: Mon 27 Jul 2026 08:23:18 +0000
Manifest this update: Mon 27 Jul 2026 08:23:17 +0000
Manifest next update: Mon 03 Aug 2026 08:23:17 +0000
Files and hashes: 1: uc1X4v9PWLuVmpVBoxz99ml2GLI.crl (hash: EmCceu0YMNBkmpjI/+IDpTgqtQKefaXpgRfb8O1wb5E=)
2: 3A6DC4F4829C11F1A9F8AFE869A30FBC.roa (hash: WUHe+xm2s7KQRGDEn1dhB4Wm51SPdg0ugPZNxSGnrGQ=)
3: 8601959679DF11F193D499DB65A30FBC.roa (hash: dJ72wAJA0nbSV+h9SeoXcj3siEq/Cclo9TYNDcphMSQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Validity
Not Before: Jul 27 08:23:17 2026 GMT
Not After : Aug 3 08:23:17 2026 GMT
Subject: CN=6a671576-1832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:bd:89:eb:a9:81:4c:3a:88:0e:f0:64:8b:
19:4a:6f:97:83:f8:ff:bc:d7:20:6b:ca:58:cf:26:
88:ee:c2:c5:75:bb:4d:a7:71:16:72:c7:04:fc:9a:
39:b3:98:45:0b:f0:1c:6d:b3:6b:23:32:96:63:2b:
43:26:4e:7b:73:f7:a6:78:d1:f0:13:d5:76:51:0e:
56:40:43:5e:d6:96:b8:26:07:30:94:8c:ef:52:7b:
e0:b9:95:f4:aa:fc:74:b2:0e:bf:59:f8:45:f4:3c:
e3:1d:30:e5:b2:a2:1e:a8:ad:53:10:f4:9e:9f:2d:
70:5d:2f:1e:68:fd:d7:07:94:9a:80:64:33:ed:cc:
9d:9c:a4:38:e4:ef:82:27:70:51:93:8c:0f:19:55:
63:a5:fd:d4:92:d8:f8:7a:44:9b:92:94:c6:8e:a1:
47:63:9f:aa:30:51:b6:39:ba:93:f1:c0:2e:30:d2:
4c:1c:c8:d0:f8:e7:53:6b:eb:02:cc:83:6b:d2:0c:
5e:96:cb:fa:95:31:3e:88:9f:25:80:ca:ca:10:64:
e3:97:a5:bc:9b:a0:95:47:75:7f:f0:18:09:ef:15:
d4:ab:20:cc:7a:3c:9e:4c:7f:9f:6e:d3:63:04:8a:
00:66:5b:13:88:a9:29:de:56:a4:11:ab:fe:a9:0d:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:16:51:20:A4:2E:9B:6A:48:6E:88:53:3E:D3:B3:A3:45:50:73:73
X509v3 Authority Key Identifier:
keyid:B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a7:6a:60:cc:7b:ea:e5:d6:5e:d3:46:33:07:b2:60:4a:ad:
52:b2:36:ac:42:d2:4c:2d:d8:36:7b:c7:9e:63:e9:4e:c3:21:
6a:b6:b0:42:2d:4c:b1:88:56:2d:be:9b:69:a4:02:fa:71:12:
21:6c:4d:dc:be:64:29:f8:12:02:0e:bc:6c:1d:35:6e:2b:3c:
35:29:48:4a:16:94:43:23:31:92:18:1c:f8:9a:eb:77:c7:40:
e8:16:ee:2a:ca:4f:df:b3:de:df:81:9a:a0:b2:7f:d9:ce:37:
9a:c7:55:a5:dc:be:3f:48:4e:ad:c6:1f:3a:51:6e:dd:dd:2b:
c4:70:77:65:c9:35:1b:9f:ef:41:05:75:5a:32:92:d7:66:91:
d8:53:f4:86:49:74:48:61:c7:d0:88:a4:44:d1:85:b2:3d:77:
2d:47:71:26:9a:04:66:5b:2f:7b:4c:73:a5:31:42:8a:a9:c8:
94:2c:d0:67:a6:91:cf:2a:da:fe:6a:32:41:26:fe:28:c0:db:
e1:12:19:36:6f:ad:66:56:3e:1f:e9:db:c3:68:38:2f:31:ab:
7d:5f:f2:77:c1:5d:57:77:82:7e:1a:05:3c:4d:c9:0d:70:8a:
08:ba:37:4b:7d:8d:55:d7:1b:d5:e6:31:10:28:42:61:57:d4:
64:8f:df:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:47:50 2026 by rpki-client