
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
File: uc1X4v9PWLuVmpVBoxz99ml2GLI.mft (raw, json)
Hash identifier: Um7ygVji/pnmm5rFwBIcDPQuTBR5vryWE/7HnnHqo0o=
Subject key identifier: A1:B8:0D:F5:C6:BA:AF:2B:D1:F4:F4:84:C0:7F:6D:35:40:68:0C:2D
Authority key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
Certificate issuer: /CN=A918E023/serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
Manifest number: A9
Signing time: Sun 01 Mar 2026 08:29:21 +0000
Manifest this update: Sun 01 Mar 2026 08:29:20 +0000
Manifest next update: Sun 08 Mar 2026 08:29:20 +0000
Files and hashes: 1: uc1X4v9PWLuVmpVBoxz99ml2GLI.crl (hash: qTrX7V+cKLvbyAzzkwMrDzHV9HNyYMgrD9Adj5SpbW4=)
2: C420B2B6111D11F0BE9ABA7AC4F9AE02.roa (hash: prE9EyvOyNfHIglYsxqj47xctVFyrjvR30YVs38FCp4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Validity
Not Before: Mar 1 08:29:20 2026 GMT
Not After : Mar 8 08:29:20 2026 GMT
Subject: CN=69a3f8e1-eb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:96:64:1a:29:24:7e:a3:26:33:7c:74:f7:fb:
96:99:ab:01:e8:5a:55:3c:c5:78:25:93:4c:01:be:
cd:61:dc:13:9b:fd:f4:ab:b5:5f:8d:c9:5e:0f:e1:
7b:40:84:c0:c7:c4:0e:d1:c3:3e:68:ba:44:4d:06:
da:7b:3c:85:a1:23:c5:aa:74:64:42:b3:8b:bc:fd:
9b:07:9c:71:e7:94:c9:1c:c4:48:02:bf:e5:34:bd:
96:f2:fe:af:09:3d:c2:1f:61:22:89:e8:2c:f4:53:
04:13:c9:b3:48:ba:5e:04:cd:8c:c3:2d:64:4c:3c:
7b:00:94:f2:12:ba:96:fd:8e:2b:12:6b:f2:86:ef:
42:0d:30:e6:e8:82:0d:62:00:de:9c:08:c6:6e:51:
75:08:65:87:bb:6f:e9:31:ae:fe:2f:96:ec:e5:f5:
50:03:90:c8:f4:93:1d:ee:64:f7:aa:ea:1c:81:6c:
d5:83:41:cd:8c:8d:33:29:82:24:9b:7b:b2:92:ad:
7d:76:51:b3:d6:7d:bc:cf:5b:5f:62:10:de:31:77:
a8:17:f5:f7:f9:a7:c6:cc:cc:19:a9:ff:a6:9f:44:
32:ee:a5:74:0b:05:85:70:6f:da:f3:46:11:ca:87:
2b:36:5b:0d:04:41:a7:86:c8:2f:9b:6a:66:0b:f8:
b7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B8:0D:F5:C6:BA:AF:2B:D1:F4:F4:84:C0:7F:6D:35:40:68:0C:2D
X509v3 Authority Key Identifier:
keyid:B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:15:36:68:1c:93:32:76:b4:24:4a:97:81:a6:24:19:9e:46:
f8:37:59:dc:5b:ef:09:ae:36:87:a9:69:26:f5:33:2e:6c:f1:
c5:4f:a9:d8:f4:15:e1:01:21:8e:d4:63:5c:2f:30:28:15:6b:
78:64:d8:c6:98:05:d9:e8:3c:c0:d8:4d:c6:f1:9c:52:2b:a2:
a3:d4:95:64:85:83:3d:b9:61:4e:64:7f:ef:5c:b3:16:52:24:
84:e0:da:ce:6e:b1:a3:95:77:8b:6f:7a:d8:68:ac:59:49:5b:
7f:2f:91:54:bb:76:37:0b:98:10:c3:f4:ff:c0:c0:d6:7a:f4:
79:da:36:69:10:54:80:50:99:9a:82:bb:b7:80:48:6d:99:82:
80:18:8d:92:3a:c7:ed:cd:52:bc:7d:6d:42:28:63:55:7a:f6:
bc:9d:68:5c:ed:b0:6a:39:01:aa:62:29:ea:52:5f:d2:be:ce:
aa:97:49:d9:34:ab:cf:c1:df:f9:23:17:a6:09:bb:a1:2c:7e:
8a:b3:c0:88:86:31:aa:96:56:e5:7d:30:bc:67:16:90:8b:6e:
dc:0b:b7:52:e8:fd:e0:9a:43:b7:c5:b3:b6:c0:c9:55:9f:0e:
2e:70:ed:1d:c4:fe:bf:8c:f0:c2:9c:04:32:16:d8:a0:96:64:
c6:33:9f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:20 2026 by rpki-client