
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
File: UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft (raw, json)
Hash identifier: 31QiNwuCxNze97yZOvNsnQH9nwslnLoXSaxzdlpcrkQ=
Subject key identifier: 51:54:16:50:CA:BE:CE:15:7A:6E:54:7F:E8:19:1C:A3:C8:23:D5:98
Authority key identifier: 53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
Certificate issuer: /CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Certificate serial: 21A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
Manifest number: 217F
Signing time: Wed 04 Nov 2026 15:57:50 +0000
Manifest this update: Wed 04 Nov 2026 15:57:49 +0000
Manifest next update: Wed 11 Nov 2026 15:57:49 +0000
Files and hashes: 1: UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl (hash: baRSyHYXgOSxLydVmctXnrEm7FMD7/o2FH5TKY3/Tb4=)
2: 2991FB703EBC11F0B4390D6CC4F9AE02.roa (hash: H6TSFHjxceqzGmdQryqjxQpaN4ogGNNs1wmONNfXYC4=)
3: F79267D61E4011E6945BEB0DC4F9AE02.roa (hash: o/MzyN7ge/ypeEuVIYd4HleoRWxXy+d/s8ghiWxojiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 14:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8612 (0x21a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159967, serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Validity
Not Before: Nov 4 15:57:49 2026 GMT
Not After : Nov 11 15:57:49 2026 GMT
Subject: CN=6aeb55fe-e824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5b:6b:1a:9a:cc:cc:22:17:39:48:bb:86:22:
17:6c:aa:c4:cc:01:a0:84:c6:48:31:b8:d8:b8:8e:
8c:d8:e5:63:cf:d6:dc:03:02:1a:06:4a:0b:e9:f0:
76:19:22:60:34:f2:3f:72:00:a9:78:13:1d:90:10:
05:78:69:a2:1d:6b:ed:7e:c0:7d:30:25:76:77:2a:
f2:f3:be:fa:bd:20:65:f1:38:56:98:03:29:0b:5b:
96:69:75:b2:bd:19:29:41:2e:82:61:7a:e7:7b:7c:
6c:3d:a9:7c:70:81:8e:67:d5:14:cb:f8:2d:0d:89:
e2:bd:cb:50:af:f4:87:e7:25:21:fa:3e:9f:d4:25:
a9:c8:7d:13:66:95:37:ed:7b:02:a8:88:92:65:0e:
c3:75:bf:52:94:76:b0:4b:2e:86:50:7b:f4:03:ab:
88:40:03:2f:09:0e:b6:b6:e1:4a:17:d1:4a:a1:7c:
5a:de:9d:ef:2d:29:88:1a:b1:d6:4a:4f:26:a9:e5:
6a:cb:b2:a1:cf:77:71:8d:c6:80:47:cf:1d:ae:77:
ce:30:de:9d:bc:7e:b4:6d:b1:3e:e8:1a:0b:21:98:
4f:98:88:98:50:e3:5e:b8:dc:38:e1:77:7a:f1:59:
58:d2:86:fb:88:bf:8c:58:ab:79:33:f3:86:4d:ac:
05:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:54:16:50:CA:BE:CE:15:7A:6E:54:7F:E8:19:1C:A3:C8:23:D5:98
X509v3 Authority Key Identifier:
keyid:53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:67:11:c9:52:31:52:75:29:04:cf:5d:d2:6d:46:dc:0d:73:
a2:b7:e6:9f:9c:6c:75:b3:7f:0f:14:20:3a:e4:c2:f9:a4:5c:
f3:b9:59:af:2b:94:5c:14:07:fa:3d:3e:4b:4a:12:b1:1b:c8:
aa:72:a9:c8:10:57:68:c6:bf:66:a0:73:0d:07:6a:8c:51:ab:
fa:46:bb:6a:94:a2:f4:f8:dc:b0:f6:d4:a0:55:82:ad:32:29:
9c:96:71:b6:b2:c5:13:0e:38:1b:91:1b:a7:2a:71:af:dc:08:
0b:1f:cc:84:90:fc:9e:6d:82:c8:7b:eb:f1:67:b4:5d:ce:3a:
ab:60:45:7e:7f:4c:01:68:b4:00:f8:bd:da:90:bc:99:16:18:
9d:16:55:37:dd:76:e6:b7:4d:ab:c1:4b:4d:3f:dc:99:15:8a:
b1:e4:30:cd:5e:f0:c2:11:06:b0:b0:bf:d7:21:11:69:25:62:
c9:33:a7:8c:68:0a:50:45:6d:89:76:e7:31:8a:ea:6d:c5:37:
61:7d:73:cd:c4:41:0e:b0:91:85:ef:ef:4d:b0:ac:e2:dd:67:
d2:8d:2d:11:01:96:7a:a4:95:6d:02:23:e6:65:53:78:34:ec:
a4:96:c3:26:9f:20:40:66:24:b8:63:93:82:3d:d1:03:06:06:
d7:40:da:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTk5NjcxMTAvBgNVBAUTKDUzMzBFRUVFQjBEMEE5NTM1RkFDODUwNUU3MzU4NDNB
RjZDRTYwQUYwHhcNMjYxMTA0MTU1NzQ5WhcNMjYxMTExMTU1NzQ5WjAYMRYwFAYD
VQQDEw02YWViNTVmZS1lODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnVtrGprMzCIXOUi7hiIXbKrEzAGghMZIMbjYuI6M2OVjz9bcAwIaBkoL6fB2
GSJgNPI/cgCpeBMdkBAFeGmiHWvtfsB9MCV2dyry8776vSBl8ThWmAMpC1uWaXWy
vRkpQS6CYXrne3xsPal8cIGOZ9UUy/gtDYnivctQr/SH5yUh+j6f1CWpyH0TZpU3
7XsCqIiSZQ7Ddb9SlHawSy6GUHv0A6uIQAMvCQ62tuFKF9FKoXxa3p3vLSmIGrHW
Sk8mqeVqy7Khz3dxjcaAR88drnfOMN6dvH60bbE+6BoLIZhPmIiYUONeuNw44Xd6
8VlY0ob7iL+MWKt5M/OGTawFUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFFUFlDK
vs4Vem5Uf+gZHKPII9WYMB8GA1UdIwQYMBaAFFMw7u6w0KlTX6yFBec1hDr2zmCv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTk2Ny8wQkJGMjU3ODE1
QTkxMUU2OTEyRDQyM0JDNEY5QUUwMi9VekR1N3JEUXFWTmZySVVGNXpXRU92Yk9Z
SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V6RHU3ckRRcVZOZnJJVUY1eldFT3ZiT1lLOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OTk2Ny8wQkJGMjU3ODE1QTkxMUU2OTEyRDQyM0JDNEY5QUUwMi9VekR1N3JEUXFW
TmZySVVGNXpXRU92Yk9ZSzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAmcRyVIxUnUpBM9d0m1G3A1zorfmn5xsdbN/DxQgOuTC+aRc87lZryuUXBQH
+j0+S0oSsRvIqnKpyBBXaMa/ZqBzDQdqjFGr+ka7apSi9PjcsPbUoFWCrTIpnJZx
trLFEw44G5Ebpypxr9wICx/MhJD8nm2CyHvr8We0Xc46q2BFfn9MAWi0APi92pC8
mRYYnRZVN9125rdNq8FLTT/cmRWKseQwzV7wwhEGsLC/1yERaSViyTOnjGgKUEVt
iXbnMYrqbcU3YX1zzcRBDrCRhe/vTbCs4t1n0o0tEQGWeqSVbQIj5mVTeDTspJbD
Jp8gQGYkuGOTgj3RAwYG10Dadg==
-----END CERTIFICATE-----
Generated at Wed Nov 4 20:15:01 2026 by rpki-client