
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft
File: _U2MY5rcFYR8e0kRFZ3nG9gTk64.mft (raw, json)
Hash identifier: ulqx6RHiiSZmkRkLlzNVztJTFzWCwbcUTcxA+URVZTQ=
Subject key identifier: B3:A6:40:47:1C:CE:5B:DB:17:29:F8:99:3A:F7:B9:17:8C:83:B9:B4
Authority key identifier: FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE
Certificate issuer: /CN=A9152462/serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE
Certificate serial: 08FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft
Manifest number: 08F4
Signing time: Tue 18 Aug 2026 20:39:31 +0000
Manifest this update: Tue 18 Aug 2026 20:39:31 +0000
Manifest next update: Tue 25 Aug 2026 20:39:31 +0000
Files and hashes: 1: _U2MY5rcFYR8e0kRFZ3nG9gTk64.crl (hash: IvpgwNFNpYi8cS9TBU87Vj01VNZ6hfyzZzYLnddNaRg=)
2: 4149D206DC4711EA80D5D916C4F9AE02.roa (hash: c4VC0uZLIwEYMCTYEDFpqIYkNUoeZb1I54lM3XwQmNk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl
rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2302 (0x8fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152462, serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE
Validity
Not Before: Aug 18 20:39:31 2026 GMT
Not After : Aug 25 20:39:31 2026 GMT
Subject: CN=6a84c303-7b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7f:c0:e0:13:7b:93:cd:ef:17:62:a0:06:74:
1d:80:99:02:5c:88:a6:3f:4a:ea:fe:56:f4:99:76:
86:c1:17:2a:ff:61:52:eb:29:50:db:ff:17:79:7b:
b3:59:f6:05:41:95:6e:26:32:4f:e8:18:b8:0c:a5:
e9:57:06:ae:4a:b7:89:90:f8:49:42:ea:46:c1:6e:
49:10:90:f5:0d:f8:0d:81:e3:82:98:7f:2f:3f:dc:
8d:45:c6:2d:af:8f:ed:4a:0d:a7:05:6c:92:5f:46:
6c:49:10:96:86:07:a7:45:5d:f6:a4:5b:e5:d7:14:
e1:90:7f:5f:71:e6:59:80:8d:db:55:96:df:23:fe:
be:cc:6f:a4:9a:51:25:d6:08:c4:05:22:68:b5:c4:
de:c7:02:42:77:c3:18:c0:a0:da:7d:2b:7c:85:f4:
69:3f:68:88:d6:55:e8:02:b4:68:49:c6:de:5a:75:
2c:e9:a7:32:d4:f4:07:e3:52:ba:92:a8:24:b1:98:
c1:5d:ca:98:15:00:d4:d4:55:58:14:07:a4:0c:bc:
f8:42:46:6d:99:8c:cf:e1:0d:61:9f:99:94:19:ec:
0a:7d:ca:fb:89:0c:b1:ba:50:5a:e8:fa:e0:0a:01:
fc:39:41:51:67:de:de:0f:69:b8:f7:1d:46:d5:98:
77:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A6:40:47:1C:CE:5B:DB:17:29:F8:99:3A:F7:B9:17:8C:83:B9:B4
X509v3 Authority Key Identifier:
keyid:FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7e:08:45:ab:1f:c2:11:55:c6:92:33:89:78:59:49:b6:91:
75:f0:01:ac:60:86:48:c2:7f:b1:98:8a:12:b0:0d:e7:73:17:
3e:bd:b2:6a:38:07:49:5d:d4:b4:75:9a:8e:d7:43:93:4a:82:
92:2d:00:86:38:68:12:24:f9:98:89:e5:a6:e3:c0:3d:c6:94:
2a:12:79:ff:60:07:b0:dc:17:3b:b7:5a:90:e9:95:7d:31:32:
e1:6e:e0:91:c5:33:92:d9:cc:48:01:c9:8f:31:22:49:52:90:
90:ad:ed:a6:15:95:40:7d:d2:b0:23:2f:97:4a:06:86:73:32:
31:0e:f4:15:fb:68:e9:ca:a8:c2:fd:04:73:1f:fe:8c:cc:fe:
e8:64:2b:b0:7a:fc:bb:6d:3e:68:15:dc:57:1f:42:ae:fd:ad:
14:33:39:70:7a:e3:9a:8a:6f:52:69:96:b7:94:d3:e6:87:9e:
ef:5c:12:3d:ec:12:3b:72:d7:a8:20:75:8d:80:cc:dd:d5:4c:
0a:b1:75:96:49:67:51:47:5f:7f:57:15:65:8e:14:5e:47:f1:
34:f0:6a:33:65:c2:39:c4:c5:98:43:de:42:8a:40:56:97:f6:
a2:28:4e:68:68:9d:e8:4b:ee:aa:64:c3:99:90:84:10:de:13:
ec:f6:f2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:48:18 2026 by rpki-client