
$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json)
Hash identifier: pYNAeiSEGpbrhyxzdM3FLCwWywK3YWi6uV/3cZjg3js=
Subject key identifier: 60:54:7E:28:A6:6F:9D:EB:4D:6D:7C:25:82:08:EC:CC:EE:6C:CB:88
Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17
Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517
Certificate serial: 0978
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
Manifest number: 0966
Signing time: Thu 16 Apr 2026 20:00:54 +0000
Manifest this update: Thu 16 Apr 2026 20:00:53 +0000
Manifest next update: Thu 23 Apr 2026 20:00:53 +0000
Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: 5CWtj17le0iw3RkfqjdyLyr/S2oYtmaRmAjfC1ZWlSc=)
2: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: oLP/jKOtL4Ffh6w6dK/dJZMBr+6GxoUP/Gc5UVj8ghc=)
3: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: ChWEYoSwPWyO7zRK4VL3WyQc574q+WUYB0OYthzNWRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl
rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2424 (0x978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919123C, serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517
Validity
Not Before: Apr 16 20:00:53 2026 GMT
Not After : Apr 23 20:00:53 2026 GMT
Subject: CN=69e13ff6-1077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:65:1f:34:26:89:2a:92:a4:af:ec:25:e3:dc:
c8:8a:64:b4:b3:de:59:03:d5:0d:4f:41:11:6f:4b:
09:31:e4:c4:6a:10:23:f4:1c:83:b1:ef:ab:83:eb:
a9:6b:3d:2a:ae:5e:43:ed:c1:a3:7f:6e:37:16:64:
df:75:80:c0:db:d0:76:84:ae:62:9b:14:6f:db:36:
fe:e0:65:55:0d:da:82:34:22:fb:f0:90:79:b7:65:
36:c7:9e:a4:33:69:42:c1:12:3c:43:51:96:7a:7c:
12:60:0b:03:5f:86:ed:85:ff:59:5a:f2:66:69:6e:
a0:bc:c9:c7:34:11:3d:bc:8c:5f:94:51:dc:4c:3d:
60:b1:9c:b0:9b:7e:89:ee:60:97:fd:e6:b5:14:82:
25:85:d1:e0:5f:8f:01:50:f6:d5:98:cd:5b:4c:19:
8e:da:11:bb:58:6b:30:ea:e3:76:16:07:fb:a3:c8:
9f:ef:10:d5:00:1c:87:f1:79:6f:97:ba:52:dd:32:
2e:f3:ff:b3:12:b9:37:25:5b:81:1a:06:ef:bf:a5:
30:3e:e3:2a:0c:13:36:ce:b9:0b:30:1c:a9:20:22:
7a:69:86:e1:56:2c:7b:f1:15:4a:e3:0c:43:99:80:
7d:ce:bc:e2:40:8e:fa:6f:13:a2:aa:fc:65:f7:2f:
59:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:54:7E:28:A6:6F:9D:EB:4D:6D:7C:25:82:08:EC:CC:EE:6C:CB:88
X509v3 Authority Key Identifier:
keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:37:d2:b3:f8:cf:d0:fd:ae:64:4f:b2:72:5a:32:b3:72:7c:
83:c0:ed:1c:8a:25:dd:6e:73:b6:f8:4f:13:1b:df:21:64:4d:
ca:8b:6d:ac:b8:ff:12:b4:aa:55:dd:60:85:03:49:df:2e:d6:
09:73:30:06:13:8b:3c:08:c4:fd:91:a4:5b:03:6e:47:9c:23:
b4:99:71:22:86:d3:b8:34:22:bc:f5:14:ae:71:fe:3b:cf:a9:
0a:2d:dd:d0:6f:fe:3c:9f:f0:f5:5d:27:ed:a0:a1:10:f5:2d:
d5:b8:bf:ec:bb:9c:ba:a4:79:f3:e6:17:c8:52:76:65:b1:9c:
e8:e7:57:68:8d:9f:6b:2e:67:1e:15:7f:99:43:0d:4b:d3:56:
d5:84:9c:90:e7:a1:a8:ac:69:a4:18:b6:0c:8d:7d:8a:0a:cb:
7a:81:c8:b1:23:5f:8d:0f:a7:1c:04:40:75:44:c4:25:7b:70:
69:ad:70:02:8d:33:0c:6d:b0:45:75:6d:e4:66:da:7c:73:55:
4a:a1:3e:13:bd:8a:ac:a7:51:5c:61:85:7d:b8:2a:30:0d:71:
e2:bd:e3:da:a6:a1:c4:dd:8c:66:b5:fe:63:de:1c:e8:bd:2e:
b4:b2:cb:60:f5:a0:13:80:1f:c1:6a:eb:0f:3c:23:6d:0f:84:
63:8f:2f:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTEyM0MxMTAvBgNVBAUTKEJCMURFRDU0NEIyN0ExMzcxOUI0OEZCMDAzNzNDRDQ5
RTBERTg1MTcwHhcNMjYwNDE2MjAwMDUzWhcNMjYwNDIzMjAwMDUzWjAYMRYwFAYD
VQQDEw02OWUxM2ZmNi0xMDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo2UfNCaJKpKkr+wl49zIimS0s95ZA9UNT0ERb0sJMeTEahAj9ByDse+rg+up
az0qrl5D7cGjf243FmTfdYDA29B2hK5imxRv2zb+4GVVDdqCNCL78JB5t2U2x56k
M2lCwRI8Q1GWenwSYAsDX4bthf9ZWvJmaW6gvMnHNBE9vIxflFHcTD1gsZywm36J
7mCX/ea1FIIlhdHgX48BUPbVmM1bTBmO2hG7WGsw6uN2Fgf7o8if7xDVAByH8Xlv
l7pS3TIu8/+zErk3JVuBGgbvv6UwPuMqDBM2zrkLMBypICJ6aYbhVix78RVK4wxD
mYB9zrziQI76bxOiqvxl9y9ZVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGBUfiim
b53rTW18JYII7MzubMuIMB8GA1UdIwQYMBaAFLsd7VRLJ6E3GbSPsANzzUng3oUX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTIzQy9FNTYyMUE2OEI1
NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9UY1p0SS13QTNQTlNlRGVo
UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V4M3RWRXNub1RjWnRJLXdBM1BOU2VEZWhSYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTIzQy9FNTYyMUE2OEI1NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9U
Y1p0SS13QTNQTlNlRGVoUmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaDfSs/jP0P2uZE+ycloys3J8g8DtHIol3W5ztvhPExvfIWRNyottrLj/ErSq
Vd1ghQNJ3y7WCXMwBhOLPAjE/ZGkWwNuR5wjtJlxIobTuDQivPUUrnH+O8+pCi3d
0G/+PJ/w9V0n7aChEPUt1bi/7LucuqR58+YXyFJ2ZbGc6OdXaI2fay5nHhV/mUMN
S9NW1YSckOehqKxppBi2DI19igrLeoHIsSNfjQ+nHARAdUTEJXtwaa1wAo0zDG2w
RXVt5GbafHNVSqE+E72KrKdRXGGFfbgqMA1x4r3j2qahxN2MZrX+Y94c6L0utLLL
YPWgE4AfwWrrDzwjbQ+EY48vrA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:14:23 2026 by rpki-client