
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
File: uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft (raw, json)
Hash identifier: YHNiZ2hMVBcgP4P7JrchoioLORR/p2IuhDLdhVbbePw=
Subject key identifier: D6:18:08:A8:E8:41:84:9D:EB:34:7F:10:57:10:75:CA:B0:FA:5B:95
Authority key identifier: B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B
Certificate issuer: /CN=A919D88F/serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
Manifest number: 011F
Signing time: Fri 17 Apr 2026 05:32:36 +0000
Manifest this update: Fri 17 Apr 2026 05:32:35 +0000
Manifest next update: Fri 24 Apr 2026 05:32:35 +0000
Files and hashes: 1: uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl (hash: 9HJN7WqmLztbvNUfUKIRenXfxZB2C3Bf6kBK2aCyGCY=)
2: 17613044905F11EF8B4BC46BC4F9AE02.roa (hash: CHWaj2FyJMKWSBZ+2E7O8yNYSlqC+2eBltmle+urUy8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl
rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D88F, serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
Validity
Not Before: Apr 17 05:32:35 2026 GMT
Not After : Apr 24 05:32:35 2026 GMT
Subject: CN=69e1c5f3-62d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0d:21:bf:d4:75:82:1f:33:1d:2e:45:be:fb:
47:e4:4a:ed:38:cd:5f:6e:a9:f4:4c:f4:58:6f:1b:
f8:9a:71:8b:93:54:51:d4:0d:2f:78:8c:54:31:06:
98:93:15:b4:97:06:13:b8:be:a8:74:a0:84:00:41:
1c:e9:51:72:2a:00:ac:ed:67:37:a6:21:cb:39:01:
ce:e5:66:c1:42:d4:37:0a:28:a5:bf:77:a2:35:29:
23:2e:2b:44:1a:ca:bb:79:7a:14:a5:65:e5:27:9d:
a4:d7:69:e0:79:5d:b6:ad:8a:76:45:53:6c:f6:a7:
7a:06:ba:31:7d:f2:33:39:d6:d3:c2:26:c9:3d:89:
e5:6a:e1:5d:5a:d9:e8:2b:39:60:92:da:68:dd:a4:
33:c2:7c:bc:8d:13:4f:46:29:08:22:d6:bf:60:88:
bb:71:6c:0d:90:2a:71:2b:fb:4e:ec:a9:06:a2:2a:
67:c5:c0:d2:fe:8e:2b:5a:50:59:47:49:94:c6:db:
20:0c:99:72:b8:14:56:06:70:e3:4c:0f:e6:c5:da:
39:6e:09:36:7b:d5:f6:49:e8:fa:5d:6c:e2:06:56:
cd:39:5b:6e:a3:e3:dc:e8:d0:6f:46:d7:89:b1:71:
b5:00:0d:1d:ca:45:42:0a:e5:07:ec:89:a7:69:b6:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:18:08:A8:E8:41:84:9D:EB:34:7F:10:57:10:75:CA:B0:FA:5B:95
X509v3 Authority Key Identifier:
keyid:B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:16:a1:f3:16:f4:cf:07:5a:8a:f3:d6:26:91:9a:ae:dc:a3:
92:0a:8b:23:f4:ba:62:3f:5b:21:88:c8:a0:8b:be:1b:89:cf:
18:dd:e2:f3:42:a0:e8:cd:c4:72:07:60:80:26:1d:c5:31:c6:
05:26:3a:be:67:b2:04:a1:50:c3:f0:7d:4b:ff:6d:2e:c9:5c:
4e:36:3c:15:de:d6:36:8b:f8:67:66:e8:40:5a:dd:64:5f:02:
2d:55:08:fa:28:97:46:df:08:af:b6:1e:c7:19:d3:df:09:9d:
a9:17:db:12:fd:64:08:ee:d3:d8:9a:52:ca:87:d3:44:0c:7b:
4d:fc:a7:94:1f:51:3d:2b:fe:50:26:a2:e9:05:d0:dc:fd:0b:
9b:a9:9b:8c:52:b0:aa:30:5d:fd:3a:02:20:e4:1a:f2:4d:c1:
8e:d7:69:61:26:40:89:14:45:89:4c:69:10:88:7c:b8:a0:6a:
02:9d:29:02:be:6d:f6:bf:f4:9b:ba:8b:fd:2b:48:c4:1e:05:
f9:20:4a:82:48:39:b2:63:72:df:91:25:aa:e9:82:bd:e3:f7:
d4:de:e9:a0:18:98:75:cb:b0:0c:c8:bc:61:78:82:45:68:18:
59:4f:bc:5c:0e:e2:2e:a4:37:4c:41:ac:73:34:61:25:48:32:
b7:0c:54:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:39:48 2026 by rpki-client