
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
File: uxh7m1B2e7e7wih3IL02wLjQaJY.mft (raw, json)
Hash identifier: SCtuQYcFTLriAGCXlcMSzalQX8ZhshVyHwInf45VPls=
Subject key identifier: 82:AD:14:16:25:71:13:1F:0D:A9:65:E5:34:E5:68:11:14:B2:69:5D
Authority key identifier: BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96
Certificate issuer: /CN=A9191E43/serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896
Certificate serial: 038C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
Manifest number: 038C
Signing time: Fri 17 Apr 2026 00:41:22 +0000
Manifest this update: Fri 17 Apr 2026 00:41:22 +0000
Manifest next update: Fri 24 Apr 2026 00:41:22 +0000
Files and hashes: 1: uxh7m1B2e7e7wih3IL02wLjQaJY.crl (hash: vmRgPSUs2+BYCQFdFvxdeXpWuMWnYGeDRFlbQbx33x8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl
rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 908 (0x38c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191E43, serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896
Validity
Not Before: Apr 17 00:41:22 2026 GMT
Not After : Apr 24 00:41:22 2026 GMT
Subject: CN=69e181b2-17c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a7:d1:d1:b9:6b:a9:5d:ba:ed:67:2c:06:bf:
fa:2a:f6:78:4d:f4:da:79:d2:65:b2:3c:12:fb:cf:
1e:ae:80:73:11:ea:df:45:a2:be:5b:2e:fb:fd:31:
bf:a7:90:71:f5:1b:ea:17:71:bb:76:fa:e1:ab:9f:
df:b8:1e:3b:d4:d3:71:40:6a:5b:e8:f4:8f:9e:c8:
d6:ee:7b:f2:70:d0:9d:a5:28:34:3b:9a:0b:a6:5d:
34:12:52:15:95:71:4d:00:75:70:43:8d:bc:94:ce:
91:72:24:9d:8f:de:7f:d8:db:96:4c:22:d6:95:ca:
70:86:9d:14:cf:5b:e0:02:db:bb:9e:88:da:bf:87:
19:6f:2c:9f:d2:06:4d:54:d0:49:8c:cb:04:a2:f7:
1f:5d:a9:85:4f:1b:5e:34:80:c1:27:5f:4d:32:0e:
75:fb:d1:87:98:e8:b2:6a:3d:f6:93:e4:58:60:1d:
d6:9c:6b:90:ec:34:6d:4a:e4:2f:1f:df:fa:68:ec:
75:81:ad:77:6f:04:9d:69:03:b3:c6:70:bb:9d:03:
ab:86:89:72:96:eb:7c:75:e7:ac:d5:3a:5c:80:b0:
49:b3:51:3c:8d:15:ea:de:91:fe:7b:1d:9a:5e:a5:
62:f9:76:66:3a:85:ae:62:02:e6:e6:db:02:b5:26:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AD:14:16:25:71:13:1F:0D:A9:65:E5:34:E5:68:11:14:B2:69:5D
X509v3 Authority Key Identifier:
keyid:BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:df:4e:32:59:93:a5:dc:5f:8a:8e:e0:3e:9e:e9:ed:10:10:
2b:e8:90:2a:a1:db:10:cf:0e:f6:af:c8:5d:30:34:c5:3b:ed:
18:8f:ed:70:90:76:c8:0c:aa:67:9e:6c:55:ee:56:93:a6:92:
95:e5:1a:07:90:98:1b:42:04:aa:7c:dc:92:9b:f0:60:c8:5d:
55:8c:39:91:a5:1e:92:25:f2:fa:7f:93:65:38:02:c6:87:0b:
59:55:57:0e:a1:6f:18:03:fe:89:6f:d8:20:84:85:88:2f:af:
3d:b8:66:b9:2d:37:f1:3e:be:ba:6a:96:a9:a1:72:1c:cd:89:
72:28:6e:2f:72:b0:13:63:72:30:e9:0c:39:73:31:e1:1b:cc:
6e:e0:9a:4b:75:81:7b:fa:74:1d:80:c3:44:d5:06:b3:90:88:
98:ac:33:c9:65:7d:f0:29:19:08:6e:3e:ee:7f:aa:c7:3f:8c:
70:90:e2:de:9f:20:67:8f:fd:a9:f8:68:a6:e0:32:b4:02:f8:
f7:1e:ea:41:59:f0:f2:b5:d7:05:60:a0:cc:a1:5f:4a:de:bf:
27:e7:37:65:09:f5:c0:a5:2d:47:2d:1a:47:c2:5d:7b:32:ab:
ec:af:7c:fb:40:1e:08:6c:50:16:09:db:b7:c4:a9:a3:c7:25:
59:d8:e4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:01:37 2026 by rpki-client