
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
File: ULpjuT-CkSle5HAxuWtFzaXCSw0.mft (raw, json)
Hash identifier: XFFgksiVt1Cir1zURv9x24CLnWtgoKcceI9rZbgHrYc=
Subject key identifier: 09:FE:8E:4C:6C:7A:3D:A9:D3:D8:B6:9B:92:F1:87:0F:C5:18:BE:42
Authority key identifier: 50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D
Certificate issuer: /CN=A9199CFF/serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D
Certificate serial: D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
Manifest number: D3
Signing time: Sun 01 Mar 2026 07:55:37 +0000
Manifest this update: Sun 01 Mar 2026 07:55:37 +0000
Manifest next update: Sun 08 Mar 2026 07:55:37 +0000
Files and hashes: 1: ULpjuT-CkSle5HAxuWtFzaXCSw0.crl (hash: kGtmQzuXlsY9v1gamzTVxW4pGP2CzRzi1vQjMCj0XeI=)
2: 42D62828962711F0B74FEE0CC4F9AE02.roa (hash: sOFNuw5sW5kqAzcrxtAYzYea6PRb3ZLUqxOeG9XFSaA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl
rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:55:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199CFF, serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D
Validity
Not Before: Mar 1 07:55:37 2026 GMT
Not After : Mar 8 07:55:37 2026 GMT
Subject: CN=69a3f0f9-2a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:bc:5b:a6:23:49:94:37:91:33:ef:ba:1b:
55:bb:ab:fb:ce:e4:e3:81:1b:d5:be:de:9b:15:87:
a3:40:95:c1:4e:12:e5:2f:a2:76:3c:86:05:ad:be:
79:28:01:ca:5d:a4:6d:50:47:92:c1:2c:dc:3f:88:
fd:18:fe:61:ad:0e:84:b6:4b:bf:5f:7c:b2:46:b7:
36:93:33:55:c9:8b:e4:44:9f:21:1f:b1:07:0b:20:
51:5e:0d:c6:f6:ec:46:57:18:4d:f3:df:9c:bb:65:
e0:71:31:44:68:3b:e9:c4:86:de:6c:c2:e0:ae:62:
6a:b0:6a:a1:fb:2d:d4:ae:32:b8:73:8c:ae:94:ab:
f2:e3:39:70:6d:d8:97:4a:34:2b:86:7c:53:48:72:
ab:73:f2:d4:16:28:32:56:f9:d6:a4:d3:3e:ff:10:
75:da:90:d0:0e:fa:b0:37:a8:1c:e8:d4:27:95:a3:
f4:49:cf:26:7f:f5:72:60:e2:e3:94:90:24:a2:14:
74:3c:53:44:f0:ec:b3:b2:74:c8:72:59:ec:5b:d4:
d6:6e:17:a1:24:2b:3e:2d:9d:31:ce:38:1f:c8:8a:
8d:42:8e:68:d5:07:ef:f7:7f:ad:b7:be:77:8e:93:
5a:82:2a:19:73:25:50:1a:39:8d:0c:21:30:ba:1b:
e8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FE:8E:4C:6C:7A:3D:A9:D3:D8:B6:9B:92:F1:87:0F:C5:18:BE:42
X509v3 Authority Key Identifier:
keyid:50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b6:8e:32:1c:69:d5:37:74:ca:27:3b:d3:86:52:bc:49:2b:
cb:19:ea:8a:44:b8:68:77:c4:d9:ec:94:00:75:77:45:59:c1:
f8:48:ce:6d:f4:90:0e:c0:a9:46:77:19:51:8a:88:d5:ab:fe:
b1:b5:8a:3c:b2:1c:6e:45:06:5c:4d:38:85:1c:d0:36:29:8b:
9e:45:5f:30:59:5f:96:d6:c9:d9:46:53:e9:8b:0d:65:6c:ab:
c1:77:ef:2a:47:92:34:3c:67:76:4d:22:dd:54:37:c0:fa:ef:
2e:f0:f3:26:67:42:39:b0:d3:10:96:47:a2:45:14:db:7e:fe:
01:ea:62:cd:57:38:b3:71:4a:e3:4f:2e:4a:ca:58:4a:fa:31:
79:f5:3f:0c:a3:a1:c5:4d:49:2d:d6:98:a4:25:e8:6c:30:06:
69:9e:db:72:4b:8f:1e:16:12:6a:b0:bc:e6:c0:e3:5a:24:16:
63:61:0c:8e:35:07:22:e8:1d:75:59:6a:50:c7:a0:3d:f3:38:
6e:ba:59:5a:cf:09:b3:ac:f5:7b:8d:1c:cf:a7:a0:fc:a0:88:
7c:30:fd:57:20:0a:ee:ce:c3:a1:1c:f5:aa:e4:8c:40:5b:c9:
9a:80:7a:af:a4:dd:7a:83:6c:3e:7c:19:68:2a:20:d9:d4:8f:
a6:82:d3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:39:23 2026 by rpki-client