
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft
File: UG49HcCtxzidnNuq-lFwdBtVhho.mft (raw, json)
Hash identifier: jzikysYoJU+fMjCH1iHDkoBIhyv+ZZ8V4ZemqDeAXYY=
Subject key identifier: DB:BC:DA:DC:9F:01:95:1F:BA:3E:C8:C6:AE:05:D9:1A:0F:53:31:3B
Authority key identifier: 50:6E:3D:1D:C0:AD:C7:38:9D:9C:DB:AA:FA:51:70:74:1B:55:86:1A
Certificate issuer: /CN=A917FFCC/serialNumber=506E3D1DC0ADC7389D9CDBAAFA5170741B55861A
Certificate serial: 62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft
Manifest number: 60
Signing time: Thu 03 Sep 2026 08:19:25 +0000
Manifest this update: Thu 03 Sep 2026 08:19:24 +0000
Manifest next update: Thu 10 Sep 2026 08:19:24 +0000
Files and hashes: 1: UG49HcCtxzidnNuq-lFwdBtVhho.crl (hash: KvEcviBB/d2r4g3fpSWxKGQstFz7CGvahuAQJdD45D4=)
2: D040E1BC16D311F18D1B19D1303D8C67.roa (hash: FW4iyNzwJYx2pnIdKFnPL+9FFZZIBrzKM+GhxItUIOM=)
3: F780D776194611F1871644483C3D8C67.roa (hash: ho5eEvE3UY6na6Rt/OnfOdSf9aaBbnbQUdpdtiKwfI4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.crl
rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FFCC, serialNumber=506E3D1DC0ADC7389D9CDBAAFA5170741B55861A
Validity
Not Before: Sep 3 08:19:24 2026 GMT
Not After : Sep 10 08:19:24 2026 GMT
Subject: CN=6a992d8d-c407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:0f:b1:3a:8d:ec:46:1f:8d:5f:b5:7f:d9:
ea:7d:a5:b7:de:80:34:d2:c2:9d:ce:f4:92:4a:4b:
74:aa:3b:68:c6:13:11:2f:ab:06:05:f5:e5:d0:ff:
f8:45:37:87:89:ed:98:7f:20:50:18:59:60:b4:3f:
5a:ce:af:16:30:52:a8:82:f4:c7:ff:45:52:05:26:
7b:4d:73:77:5c:c2:51:dc:c1:aa:92:a7:cf:6e:38:
db:ea:8f:74:d9:85:2f:c1:17:3b:59:04:ea:6a:2d:
a4:e1:c9:8e:4d:e9:bb:f0:f1:ad:50:ba:8b:92:4f:
3b:72:d4:15:2c:c5:78:0a:b6:c0:67:cb:63:1e:d5:
e9:9a:3e:c8:c4:1c:2a:a5:b4:5a:34:8e:14:6e:29:
72:d7:d5:f7:34:e7:3b:81:31:a6:6e:a3:49:0e:18:
20:9f:da:6f:f8:75:05:fa:bd:7f:61:43:37:ce:7d:
0e:41:11:ec:84:5b:d4:22:49:a2:1e:b5:86:c0:85:
a3:e9:e7:eb:7b:fc:3c:8d:3f:3a:b3:e1:f9:9f:bb:
8c:9a:63:bf:d6:49:9d:d3:fb:aa:3d:b9:4f:06:7b:
4a:3c:74:d9:ac:f9:dd:83:e0:4f:1c:d9:ff:90:2d:
81:0f:68:cf:e6:ad:f3:ed:a0:a1:ef:1f:e5:59:d3:
ba:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BC:DA:DC:9F:01:95:1F:BA:3E:C8:C6:AE:05:D9:1A:0F:53:31:3B
X509v3 Authority Key Identifier:
keyid:50:6E:3D:1D:C0:AD:C7:38:9D:9C:DB:AA:FA:51:70:74:1B:55:86:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:91:0f:dd:f0:7b:e0:f3:99:52:e6:67:de:7e:75:21:9b:a9:
2e:16:56:33:8c:63:92:64:08:05:ac:5e:fb:ce:58:4e:c6:a9:
70:46:eb:07:26:fe:be:4a:79:2c:2d:e5:26:87:88:51:f5:84:
aa:8c:ca:a9:aa:78:9a:29:d5:93:a4:95:d5:1c:77:64:7a:6c:
8a:11:01:cd:5e:5e:3a:6c:64:8f:5a:8a:50:e5:5f:b2:f7:ed:
b0:97:0e:3b:36:cf:94:cd:54:03:53:40:fb:93:de:59:d4:6d:
e7:6a:51:f5:c1:be:00:6a:9e:48:c0:ce:d0:92:6a:09:bd:4d:
b2:2e:06:47:1f:88:18:70:8f:d7:54:f6:a3:be:01:31:da:ec:
e2:9c:2f:f9:b8:78:d4:9e:e6:c4:81:66:6e:34:a7:3e:fc:2b:
9c:22:4b:9d:41:d0:b5:3b:eb:75:98:11:f1:17:54:a1:f8:9b:
50:ba:4c:71:b9:1d:05:1d:a4:98:ea:cf:f8:7c:06:67:9f:0a:
b0:0f:9f:e6:f7:52:75:1a:f0:46:e7:5a:28:5f:b6:11:f4:bc:
c5:d2:a5:06:0a:f8:d6:eb:f5:6a:77:a9:96:27:61:3b:73:00:
92:d0:74:3a:74:1d:d7:44:81:a5:d3:1f:d0:3a:14:93:0e:e8:
fe:53:f4:1b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RkZDQzExMC8GA1UEBRMoNTA2RTNEMURDMEFEQzczODlEOUNEQkFBRkE1MTcwNzQx
QjU1ODYxQTAeFw0yNjA5MDMwODE5MjRaFw0yNjA5MTAwODE5MjRaMBgxFjAUBgNV
BAMTDTZhOTkyZDhkLWM0MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8NA+xOo3sRh+NX7V/2ep9pbfegDTSwp3O9JJKS3SqO2jGExEvqwYF9eXQ//hF
N4eJ7Zh/IFAYWWC0P1rOrxYwUqiC9Mf/RVIFJntNc3dcwlHcwaqSp89uONvqj3TZ
hS/BFztZBOpqLaThyY5N6bvw8a1QuouSTzty1BUsxXgKtsBny2Me1emaPsjEHCql
tFo0jhRuKXLX1fc05zuBMaZuo0kOGCCf2m/4dQX6vX9hQzfOfQ5BEeyEW9QiSaIe
tYbAhaPp5+t7/DyNPzqz4fmfu4yaY7/WSZ3T+6o9uU8Ge0o8dNms+d2D4E8c2f+Q
LYEPaM/mrfPtoKHvH+VZ07rrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU27za3J8B
lR+6PsjGrgXZGg9TMTswHwYDVR0jBBgwFoAUUG49HcCtxzidnNuq+lFwdBtVhhow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGRkNDLzA2QzU1QUU4MTZE
MzExRjFCQUE0MTBDODMwM0Q4QzY3L1VHNDlIY0N0eHppZG5OdXEtbEZ3ZEJ0Vmho
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvVUc0OUhjQ3R4emlkbk51cS1sRndkQnRWaGhvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG
RkNDLzA2QzU1QUU4MTZEMzExRjFCQUE0MTBDODMwM0Q4QzY3L1VHNDlIY0N0eHpp
ZG5OdXEtbEZ3ZEJ0Vmhoby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAhkQ/d8Hvg85lS5mfefnUhm6kuFlYzjGOSZAgFrF77zlhOxqlwRusHJv6+Snks
LeUmh4hR9YSqjMqpqniaKdWTpJXVHHdkemyKEQHNXl46bGSPWopQ5V+y9+2wlw47
Ns+UzVQDU0D7k95Z1G3nalH1wb4Aap5IwM7QkmoJvU2yLgZHH4gYcI/XVPajvgEx
2uzinC/5uHjUnubEgWZuNKc+/CucIkudQdC1O+t1mBHxF1Sh+JtQukxxuR0FHaSY
6s/4fAZnnwqwD5/m91J1GvBG51ooX7YR9LzF0qUGCvjW6/Vqd6mWJ2E7cwCS0HQ6
dB3XRIGl0x/QOhSTDuj+U/Qb
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:01:04 2026 by rpki-client