
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
File: uRM0fmudd6kbsHSCrkXNdBFrAi0.mft (raw, json)
Hash identifier: hWCUa47oUfTR5wTsOh3J4EMN5/qmuwO5l5InwwSWJSg=
Subject key identifier: D9:82:A5:4E:F0:71:30:66:4E:4D:93:04:1D:17:1D:AA:39:A0:A2:BD
Authority key identifier: B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D
Certificate issuer: /CN=A919FBF3/serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
Certificate serial: 31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
Manifest number: 2D
Signing time: Sun 01 Mar 2026 10:09:48 +0000
Manifest this update: Sun 01 Mar 2026 10:09:48 +0000
Manifest next update: Sun 08 Mar 2026 10:09:48 +0000
Files and hashes: 1: uRM0fmudd6kbsHSCrkXNdBFrAi0.crl (hash: gFXzRR2Y+Kv4eYyuNyqNAxz1sqtX6b1WYHqVlVBdS/I=)
2: 8F11CB5CDF1511F0B37EABD4606F56BC.roa (hash: a7XG21OzlLkH67XaDgIrUzNocp3sS2ISxq1DVxvGiPI=)
3: 8F8FBABCDF1511F0B37EABD4606F56BC.roa (hash: PwN2gSK20w/Pz7qRbG5vVVSpGtOH+yYiveWXPy/+Clg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl
rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:09:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FBF3, serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
Validity
Not Before: Mar 1 10:09:48 2026 GMT
Not After : Mar 8 10:09:48 2026 GMT
Subject: CN=69a4106c-0198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:23:7b:dc:4b:8f:dc:b8:e4:b2:68:89:35:
c9:95:fd:9f:9f:19:5c:92:fe:83:3d:8b:58:99:72:
78:f7:2f:fc:49:ef:83:8f:d4:7a:f5:eb:54:91:7e:
4f:d3:0d:7e:97:86:41:cd:ea:af:29:0d:89:11:02:
28:ab:d5:1f:66:e6:ae:12:0b:2d:eb:f1:e5:9f:dd:
51:e0:01:13:b8:62:b5:ef:4a:73:70:f8:18:02:0f:
04:e9:31:7a:1a:8c:67:a7:be:9c:e3:01:6c:97:87:
99:e7:c0:96:aa:29:5f:72:81:3f:a7:69:77:65:10:
d8:55:88:f3:c7:16:6e:d0:0f:d1:6f:0e:d7:a5:2f:
fd:61:a9:2e:d8:32:42:3a:9a:dc:19:74:9c:ef:cb:
bc:8f:2b:28:dd:fe:0d:9b:aa:ab:0d:18:57:71:fa:
42:20:a0:7f:2d:34:84:cf:88:e2:6d:49:1a:1f:54:
7c:b6:70:5b:9e:07:42:a3:7f:b9:ec:81:39:4d:1b:
ab:13:40:f6:37:4a:c9:04:ac:b1:1d:90:1e:6b:6e:
78:13:5b:34:3c:45:3c:3d:25:8d:ce:dc:34:ae:a6:
1b:4f:2b:e0:99:40:ab:60:02:76:ab:08:8f:c6:5e:
8c:e4:cf:db:f1:2b:50:7f:55:01:2a:bf:b4:be:0e:
95:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:82:A5:4E:F0:71:30:66:4E:4D:93:04:1D:17:1D:AA:39:A0:A2:BD
X509v3 Authority Key Identifier:
keyid:B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:43:8b:cc:72:68:46:5d:02:e5:db:ed:bc:ea:c8:3e:7c:0f:
13:e1:37:19:f1:ce:8a:f8:5f:46:36:83:7c:12:ed:c9:4b:7f:
b4:fd:f6:5d:ba:b8:65:e3:e2:7b:d1:8d:72:db:ab:27:a3:8e:
c2:c9:a3:65:79:b8:da:4a:11:88:4e:69:76:7f:d0:81:5d:96:
7c:11:dd:6b:60:43:0d:9b:3c:e0:d0:ed:ed:d2:b9:41:ad:b2:
ef:50:0e:58:0d:71:eb:9c:f8:f4:b5:8b:52:5d:26:52:f4:41:
60:26:a7:de:bd:a8:15:51:97:67:d1:af:70:72:1a:f5:4d:61:
af:fb:6d:30:e4:29:b0:1a:51:a2:7a:6e:e2:11:0f:fb:40:b1:
5f:e4:70:29:6a:c5:b3:a1:c0:26:c5:8b:58:2f:75:2f:72:89:
c0:35:d7:e7:10:ed:b4:00:6a:8f:f2:d8:09:a7:24:75:46:b1:
6e:c9:34:55:ab:ec:7d:b1:b2:0a:cf:c9:5f:9c:20:79:e4:d6:
4c:2f:47:1e:35:9b:12:95:97:3e:43:8b:97:e2:58:93:2f:10:
c9:19:f8:dd:ff:70:d7:75:a0:2c:81:14:c0:dd:26:70:83:d5:
13:5d:57:d4:ff:fa:23:86:9a:b6:b5:ed:81:51:dd:57:94:08:
23:37:27:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:20 2026 by rpki-client