
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
File: UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft (raw, json)
Hash identifier: qa7PEQv2gl6QCWabpBaJWnbVuv0hiRJYmZF+NXda+Iw=
Subject key identifier: B3:C9:AD:3F:19:9D:62:80:C4:7A:0A:E2:9C:00:53:DF:1C:92:6B:7E
Authority key identifier: 53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
Certificate issuer: /CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Certificate serial: 2189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
Manifest number: 2164
Signing time: Sat 12 Sep 2026 15:53:20 +0000
Manifest this update: Sat 12 Sep 2026 15:53:20 +0000
Manifest next update: Sat 19 Sep 2026 15:53:20 +0000
Files and hashes: 1: UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl (hash: hwSE/VN32XbhGu+KlrNP3BSO/NK8dJ4JQ8Le7Pg0NK4=)
2: F79267D61E4011E6945BEB0DC4F9AE02.roa (hash: o/MzyN7ge/ypeEuVIYd4HleoRWxXy+d/s8ghiWxojiQ=)
3: 2991FB703EBC11F0B4390D6CC4F9AE02.roa (hash: H6TSFHjxceqzGmdQryqjxQpaN4ogGNNs1wmONNfXYC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Sep 2026 15:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8585 (0x2189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159967, serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Validity
Not Before: Sep 12 15:53:20 2026 GMT
Not After : Sep 19 15:53:20 2026 GMT
Subject: CN=6aa57570-6591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:14:c8:a5:4b:2d:0b:f7:5a:9f:45:1d:dd:0e:
f7:9f:aa:c4:7a:b4:25:68:15:20:63:a4:0b:a2:89:
3f:10:00:e5:1f:b2:e0:26:ea:6e:3a:f8:8d:e3:24:
d4:34:b8:20:4c:c5:2b:ca:2f:21:df:59:5a:27:38:
5c:b9:0a:48:c3:42:5b:2b:5f:ee:9a:29:16:7c:26:
b8:6b:26:f8:85:13:d2:78:66:35:83:87:b1:f2:67:
38:a0:60:d2:d4:c2:37:a4:4b:3f:fb:4e:4c:ac:86:
a7:62:ac:0e:3c:bb:f5:6a:b8:1a:e3:58:53:7c:6a:
d7:21:7c:43:ac:df:16:bf:9e:e3:4b:ce:37:f7:d7:
4c:ea:1f:ec:03:e8:2f:7a:39:06:43:e1:42:93:65:
ab:97:88:80:94:58:11:88:fc:6c:08:23:37:99:30:
d0:fb:df:2a:84:95:7f:00:f8:f6:a8:41:20:e8:05:
ac:e6:37:5c:a1:6d:e4:b5:8a:aa:7a:ca:a8:d7:bd:
05:f7:20:d9:fd:0d:cc:6b:ca:02:76:5c:8c:dc:14:
a0:88:10:32:14:65:82:04:ea:cd:83:84:be:53:2a:
b6:2e:1b:ab:09:94:2b:14:4a:32:ff:54:37:55:74:
91:3f:c2:32:c2:b4:80:10:0c:5d:07:b2:22:f4:97:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C9:AD:3F:19:9D:62:80:C4:7A:0A:E2:9C:00:53:DF:1C:92:6B:7E
X509v3 Authority Key Identifier:
keyid:53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4b:b1:a8:0d:04:4f:26:fa:ac:02:9f:60:97:12:23:cc:02:
19:a0:98:f5:26:a9:9a:8f:53:12:81:53:e4:9e:82:ca:22:4f:
74:f7:f1:e1:6e:a2:58:f6:bb:14:4a:85:02:e4:68:ef:9f:11:
8b:b4:80:ef:e8:7b:ae:b5:3e:1f:a0:29:da:76:2d:d4:f0:fb:
f2:c6:3a:cd:1e:df:ea:2d:61:5e:5f:f2:b6:da:fc:30:24:c7:
d6:ae:49:b5:c7:0f:b5:b7:4c:3c:c1:b4:31:4e:1e:ea:40:7f:
9b:33:30:4a:6f:6f:28:5e:47:7b:a3:4e:ce:f8:65:75:68:1a:
e2:f1:22:6e:f7:44:10:0f:79:24:cd:cc:be:38:d1:aa:47:d2:
d6:b1:54:b1:a3:0f:ff:bd:b3:82:ea:2b:01:ab:b0:29:79:9b:
9f:84:ab:05:67:5a:8a:c3:50:59:74:b1:bf:0b:ef:10:91:d4:
cb:4c:bd:a9:98:4f:52:43:39:db:29:1e:69:73:fe:76:f5:b6:
a8:69:bc:a1:03:5e:f3:42:2d:ca:07:d7:39:5f:f9:a4:0e:f8:
32:4a:a4:f3:f7:66:79:91:e4:ee:4e:e7:c3:d2:20:9b:f4:b8:
3c:09:b9:48:e7:b5:4b:71:10:d5:a8:93:4c:34:2f:b2:d0:c1:
63:58:2a:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTk5NjcxMTAvBgNVBAUTKDUzMzBFRUVFQjBEMEE5NTM1RkFDODUwNUU3MzU4NDNB
RjZDRTYwQUYwHhcNMjYwOTEyMTU1MzIwWhcNMjYwOTE5MTU1MzIwWjAYMRYwFAYD
VQQDEw02YWE1NzU3MC02NTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0BTIpUstC/dan0Ud3Q73n6rEerQlaBUgY6QLook/EADlH7LgJupuOviN4yTU
NLggTMUryi8h31laJzhcuQpIw0JbK1/umikWfCa4ayb4hRPSeGY1g4ex8mc4oGDS
1MI3pEs/+05MrIanYqwOPLv1arga41hTfGrXIXxDrN8Wv57jS84399dM6h/sA+gv
ejkGQ+FCk2Wrl4iAlFgRiPxsCCM3mTDQ+98qhJV/APj2qEEg6AWs5jdcoW3ktYqq
esqo170F9yDZ/Q3Ma8oCdlyM3BSgiBAyFGWCBOrNg4S+Uyq2LhurCZQrFEoy/1Q3
VXSRP8IywrSAEAxdB7Ii9JebcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLPJrT8Z
nWKAxHoK4pwAU98ckmt+MB8GA1UdIwQYMBaAFFMw7u6w0KlTX6yFBec1hDr2zmCv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTk2Ny8wQkJGMjU3ODE1
QTkxMUU2OTEyRDQyM0JDNEY5QUUwMi9VekR1N3JEUXFWTmZySVVGNXpXRU92Yk9Z
SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V6RHU3ckRRcVZOZnJJVUY1eldFT3ZiT1lLOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OTk2Ny8wQkJGMjU3ODE1QTkxMUU2OTEyRDQyM0JDNEY5QUUwMi9VekR1N3JEUXFW
TmZySVVGNXpXRU92Yk9ZSzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGkuxqA0ETyb6rAKfYJcSI8wCGaCY9Sapmo9TEoFT5J6CyiJPdPfx4W6iWPa7
FEqFAuRo758Ri7SA7+h7rrU+H6Ap2nYt1PD78sY6zR7f6i1hXl/yttr8MCTH1q5J
tccPtbdMPMG0MU4e6kB/mzMwSm9vKF5He6NOzvhldWga4vEibvdEEA95JM3MvjjR
qkfS1rFUsaMP/72zguorAauwKXmbn4SrBWdaisNQWXSxvwvvEJHUy0y9qZhPUkM5
2ykeaXP+dvW2qGm8oQNe80ItygfXOV/5pA74Mkqk8/dmeZHk7k7nw9Igm/S4PAm5
SOe1S3EQ1aiTTDQvstDBY1gqZw==
-----END CERTIFICATE-----
Generated at Sun Sep 13 18:16:35 2026 by rpki-client