
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
File: ujlCdcT_j47yNHSaNvKhkTknlVs.mft (raw, json)
Hash identifier: WI5wXRvYkv21DExF0sCEH8zrc4ym3IHFCUMD8UAUhyY=
Subject key identifier: D2:76:62:62:36:74:30:77:F9:8C:45:71:57:71:10:C4:D0:34:91:77
Authority key identifier: BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B
Certificate issuer: /CN=A9158E7B/serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B
Certificate serial: A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
Manifest number: 9C
Signing time: Sat 03 Oct 2026 08:05:40 +0000
Manifest this update: Sat 03 Oct 2026 08:05:39 +0000
Manifest next update: Sat 10 Oct 2026 08:05:39 +0000
Files and hashes: 1: ujlCdcT_j47yNHSaNvKhkTknlVs.crl (hash: 5AyOQLahSPdQkdba6ZZ9oWVdYuTtqw143+8op2oh9sQ=)
2: B2897A041D1C11F19ECA08BE103D8C67.roa (hash: dDoq0NSsJBrU8GbMwoOGwGBt+swdNtQ2Co9Bt0cv7SU=)
3: B1921BE21D1C11F19ECA08BE103D8C67.roa (hash: OZLEAf2GlkPiBHJVIkEjy99lBk4lg8JxOM/56bdCYlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl
rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:05:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E7B, serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B
Validity
Not Before: Oct 3 08:05:39 2026 GMT
Not After : Oct 10 08:05:39 2026 GMT
Subject: CN=6ac0b753-ab0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:42:4f:61:9c:e7:7c:e7:1d:ac:95:59:17:
1b:7d:2b:05:0e:06:5b:27:62:1e:e2:51:65:a3:2a:
e1:dd:a0:45:19:0c:10:37:5c:e0:f0:7d:83:d1:00:
a2:1a:57:cb:bd:80:98:cb:73:27:38:eb:62:99:f7:
8d:38:f6:6a:a0:da:45:b9:71:53:4f:1d:de:f5:0e:
55:81:62:90:32:45:a5:5e:77:11:91:d3:68:a5:ca:
e4:99:5f:83:38:6b:28:3f:03:42:cf:5e:3b:ff:8e:
c6:ad:43:3a:72:e5:96:36:ba:7a:86:9f:42:20:ff:
98:b1:a6:60:69:28:7e:b4:fa:1a:82:02:bd:11:7d:
f8:3b:3f:a5:d2:98:8d:0a:1c:64:b3:57:17:78:cd:
10:be:c2:36:e9:7f:42:ce:20:e4:25:29:b2:d9:bc:
4f:f5:48:03:6a:44:84:15:a6:ba:0a:97:b2:9c:a4:
33:09:64:c8:2a:e7:65:74:3b:d1:7d:55:c1:1c:fa:
7c:70:12:a6:f7:c6:30:1d:a5:9f:32:9a:95:8f:d1:
44:61:38:55:91:59:c7:7f:a2:63:b9:2d:72:4b:12:
66:8f:5b:57:d3:9a:54:a1:c9:e2:1f:41:52:20:8e:
a5:20:62:46:ec:10:bf:74:c5:c8:fd:70:16:a4:f0:
1c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:76:62:62:36:74:30:77:F9:8C:45:71:57:71:10:C4:D0:34:91:77
X509v3 Authority Key Identifier:
keyid:BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:36:58:96:a5:22:80:45:23:f0:f0:da:08:cb:db:60:e0:96:
6c:28:06:85:78:60:f5:f4:20:fe:3d:41:d9:8b:f2:66:53:ae:
bc:ea:17:73:8c:1b:29:d3:d0:4d:ef:58:8d:ed:af:94:c5:ce:
5c:a3:fd:cb:26:43:b2:2f:4e:b7:3a:f4:c1:c3:43:e5:6f:bc:
85:d6:9b:2b:79:3c:9b:f4:fa:9f:ff:27:73:b7:6e:04:26:cf:
9f:1c:aa:a8:c8:10:10:7a:4b:69:54:7b:43:fb:62:00:71:93:
47:33:ab:19:89:93:4f:29:45:55:77:2f:dc:68:c6:86:e5:7b:
f8:bd:ae:7d:0e:62:46:0a:9e:ee:11:d1:f0:b3:dc:89:a2:0d:
d7:ee:a9:43:c0:27:81:63:f4:5e:3b:21:78:92:5b:b1:8c:71:
fc:b6:6f:ba:b1:c0:b6:a7:77:1e:0c:d6:32:da:cb:6c:65:61:
51:62:f7:93:b8:7c:b9:fe:2a:dd:4f:1d:ca:02:67:87:41:e3:
28:2d:07:d7:8f:67:31:4c:ee:b8:1f:fa:62:84:1c:ae:90:82:
3f:d1:dd:0d:7a:33:bc:b1:e6:1b:66:cc:14:a8:03:96:ca:35:
0b:be:69:c9:64:68:3e:95:ae:62:62:95:cb:17:df:39:42:99:
91:0b:30:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NThFN0IxMTAvBgNVBAUTKEJBMzk0Mjc1QzRGRjhGOEVGMjM0NzQ5QTM2RjJBMTkx
MzkyNzk1NUIwHhcNMjYxMDAzMDgwNTM5WhcNMjYxMDEwMDgwNTM5WjAYMRYwFAYD
VQQDEw02YWMwYjc1My1hYjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAni9CT2Gc53znHayVWRcbfSsFDgZbJ2Ie4lFloyrh3aBFGQwQN1zg8H2D0QCi
GlfLvYCYy3MnOOtimfeNOPZqoNpFuXFTTx3e9Q5VgWKQMkWlXncRkdNopcrkmV+D
OGsoPwNCz147/47GrUM6cuWWNrp6hp9CIP+YsaZgaSh+tPoaggK9EX34Oz+l0piN
Chxks1cXeM0QvsI26X9CziDkJSmy2bxP9UgDakSEFaa6CpeynKQzCWTIKudldDvR
fVXBHPp8cBKm98YwHaWfMpqVj9FEYThVkVnHf6JjuS1ySxJmj1tX05pUocniH0FS
II6lIGJG7BC/dMXI/XAWpPAcVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNJ2YmI2
dDB3+YxFcVdxEMTQNJF3MB8GA1UdIwQYMBaAFLo5QnXE/4+O8jR0mjbyoZE5J5Vb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEU3Qi81MTFCM0IxQUQ5
OUExMUYwOEQ0OTM4QjA2NUQzNjQxRC91amxDZGNUX2o0N3lOSFNhTnZLaGtUa25s
VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VqbENkY1RfajQ3eU5IU2FOdktoa1RrbmxWcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OEU3Qi81MTFCM0IxQUQ5OUExMUYwOEQ0OTM4QjA2NUQzNjQxRC91amxDZGNUX2o0
N3lOSFNhTnZLaGtUa25sVnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZzZYlqUigEUj8PDaCMvbYOCWbCgGhXhg9fQg/j1B2YvyZlOuvOoXc4wbKdPQ
Te9Yje2vlMXOXKP9yyZDsi9Otzr0wcND5W+8hdabK3k8m/T6n/8nc7duBCbPnxyq
qMgQEHpLaVR7Q/tiAHGTRzOrGYmTTylFVXcv3GjGhuV7+L2ufQ5iRgqe7hHR8LPc
iaIN1+6pQ8AngWP0XjsheJJbsYxx/LZvurHAtqd3HgzWMtrLbGVhUWL3k7h8uf4q
3U8dygJnh0HjKC0H149nMUzuuB/6YoQcrpCCP9HdDXozvLHmG2bMFKgDlso1C75p
yWRoPpWuYmKVyxffOUKZkQsw6Q==
-----END CERTIFICATE-----
Generated at Sun Oct 4 07:20:29 2026 by rpki-client