
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
File: uYUInIuVHhACl2u9XU0d0kGB8Z8.mft (raw, json)
Hash identifier: 88cuJsm8V5KAaYVgyM7dmBj/gokIv9c5yQZNfaJU1e4=
Subject key identifier: F0:0D:54:73:30:7F:1F:BA:35:D4:93:20:4F:A1:BA:77:56:71:E2:61
Authority key identifier: B9:85:08:9C:8B:95:1E:10:02:97:6B:BD:5D:4D:1D:D2:41:81:F1:9F
Certificate issuer: /CN=A919CA3C/serialNumber=B985089C8B951E1002976BBD5D4D1DD24181F19F
Certificate serial: 0670
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
Manifest number: 0668
Signing time: Tue 14 Apr 2026 22:28:29 +0000
Manifest this update: Tue 14 Apr 2026 22:28:28 +0000
Manifest next update: Tue 21 Apr 2026 22:28:28 +0000
Files and hashes: 1: uYUInIuVHhACl2u9XU0d0kGB8Z8.crl (hash: o7sdFdiFjhLFXX8AXMk/SUwMo0R+utrHtYdEoN4CYIU=)
2: 432BBA90C1F611EBAD8D7477C4F9AE02.roa (hash: YXsZx0M5qaxKqHxvqZPF6y5uWQS4vjuAZKUzPFPxG9Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.crl
rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 22:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1648 (0x670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CA3C, serialNumber=B985089C8B951E1002976BBD5D4D1DD24181F19F
Validity
Not Before: Apr 14 22:28:28 2026 GMT
Not After : Apr 21 22:28:28 2026 GMT
Subject: CN=69debf8c-6bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:74:f1:66:aa:42:0d:04:0b:60:9d:c5:d9:
a5:b5:c8:ee:5c:28:1e:4f:fd:76:73:44:c0:6b:be:
7d:07:cc:2c:e8:64:92:f8:f5:4b:82:80:c1:50:42:
65:89:84:44:8b:43:f7:7d:cd:bc:5f:de:31:cf:d8:
2f:7e:5f:fc:74:00:66:3b:2e:5f:bb:94:8c:e5:68:
96:94:8c:c7:d0:82:13:e2:a5:1d:f1:c9:7b:20:8a:
68:7d:90:aa:1b:a3:72:0e:1b:03:34:5c:a3:78:80:
8b:f7:b1:54:1c:7d:5c:ee:91:00:a1:02:62:36:96:
96:bb:0a:c7:3c:8e:1b:20:8e:ee:30:94:ec:19:74:
98:fe:f9:4c:e2:3b:5b:1e:76:49:9a:3b:54:7c:69:
a2:ac:70:c0:61:91:88:51:92:7e:e0:da:32:6d:55:
97:de:e4:72:8e:52:52:84:b5:40:b2:52:70:e3:6c:
86:86:b5:f7:6e:53:17:d2:4c:93:b5:3f:67:79:80:
99:e7:63:08:c5:bb:66:53:8f:00:2d:d1:12:76:04:
00:0b:3e:11:81:74:89:d4:7d:b8:a8:ce:f1:09:b7:
fa:ea:f7:9a:16:b3:dc:6d:94:35:b2:50:6a:a6:16:
7f:b8:45:6e:6d:ec:7a:44:94:78:7f:15:91:c9:fc:
9b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0D:54:73:30:7F:1F:BA:35:D4:93:20:4F:A1:BA:77:56:71:E2:61
X509v3 Authority Key Identifier:
keyid:B9:85:08:9C:8B:95:1E:10:02:97:6B:BD:5D:4D:1D:D2:41:81:F1:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:04:f5:55:a1:df:8e:a7:f2:62:4d:11:8a:5d:4f:96:e1:f1:
36:a9:54:4f:39:ee:78:39:cf:90:64:ed:a7:28:2d:c3:bd:ce:
85:39:4c:8c:a6:11:b3:49:63:ef:64:d7:9f:0d:6e:4b:46:bb:
27:36:45:15:cf:66:68:ad:c7:3b:1c:a5:cb:36:f8:c5:f5:fd:
9d:79:f7:72:ba:58:a3:80:f4:50:08:af:97:1b:94:91:0f:44:
59:5d:6b:12:21:40:f5:ba:9c:bb:31:a0:4f:cf:01:76:52:d3:
c8:91:66:70:de:5f:de:6b:34:5f:ce:ed:c9:67:9f:44:2f:30:
bc:2c:a8:49:b8:2a:a0:af:4c:37:03:42:02:c9:0d:a4:09:cf:
b3:b5:7b:5f:c6:d5:8d:07:30:59:ac:42:c5:ce:68:e1:f4:7d:
ae:6d:63:22:ee:ff:0c:ac:2e:18:6d:01:63:e0:42:f2:8d:5d:
6f:98:da:df:49:5e:c0:45:c2:72:de:4d:8a:12:d2:ee:18:9f:
f9:10:e7:7d:85:55:52:ed:01:6d:39:2e:bb:f0:e4:86:8e:84:
34:96:0a:97:ed:61:85:94:70:33:27:0f:22:27:08:0b:6e:3c:
01:e1:cf:7b:58:2c:f3:c5:7b:e0:4c:f1:95:d0:0a:db:b5:d1:
16:c0:38:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:56:25 2026 by rpki-client