
$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
File: UN4cYHM-ori3boQDYJGOHyXEbkM.mft (raw, json)
Hash identifier: hIc/Qs+m96HQ1ZDuUtYGrmfh+CarIFGMLQKEVBd6SWQ=
Subject key identifier: 2D:D7:5D:83:DA:69:FD:A9:49:2E:BF:19:9C:97:9A:C0:3D:82:2B:52
Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
Certificate issuer: /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Certificate serial: 0CE4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
Manifest number: 0CCB
Signing time: Wed 12 Aug 2026 18:22:10 +0000
Manifest this update: Wed 12 Aug 2026 18:22:09 +0000
Manifest next update: Wed 19 Aug 2026 18:22:09 +0000
Files and hashes: 1: UN4cYHM-ori3boQDYJGOHyXEbkM.crl (hash: T5B4afSav02ZK9VtvAsqgc0OYW2zLyPXtYoZUcYwN2w=)
2: FNdaP_tlvzdOkRkygoSbG2qvE4Q.asa (hash: HtM4cT1n0OKEJjnde1/o9+CymoCiMyNjl/BcEhdS6xk=)
3: 46C5452E0DD711EF85707821C4F9AE02.roa (hash: VXncP0PhzyqKm2QEziAfAuVtMG/akEU8trZDQTOKPw8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 19 Aug 2026 18:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3300 (0xce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Validity
Not Before: Aug 12 18:22:09 2026 GMT
Not After : Aug 19 18:22:09 2026 GMT
Subject: CN=6a7cb9d2-ff2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cf:ec:6a:ea:05:d4:81:f7:e1:48:48:9d:fb:
b4:17:f3:fd:90:f2:23:1e:bc:f2:59:23:6d:00:f6:
20:ed:91:6d:e9:24:29:a9:aa:95:cf:11:a5:63:cb:
e0:d5:56:79:5e:ea:1c:ea:c9:dd:62:5e:b2:96:c7:
1d:b2:5b:e9:e5:0c:66:23:f6:bf:07:0a:21:fa:65:
5b:6f:c2:d6:98:1a:eb:8f:b2:97:e3:fc:4b:a6:93:
31:45:74:21:41:b0:25:ee:3f:0f:8a:3f:5e:93:68:
8a:f6:04:88:6d:55:f0:c4:9d:5a:34:53:9c:3e:cc:
13:34:46:ee:81:aa:49:74:e9:33:b3:64:f4:01:30:
3f:9b:d3:ba:3b:0b:ab:80:5c:dd:21:0e:e5:fb:76:
b1:11:2b:31:23:ab:3c:dc:f3:e3:30:0d:10:e3:a4:
8e:57:87:f9:cc:b6:8c:9c:56:61:59:10:05:48:b1:
7e:71:51:fe:89:58:e0:7e:41:63:f5:d3:49:88:09:
f1:32:d8:a8:c3:b2:c1:7e:f6:aa:32:7e:9e:cd:84:
b7:45:bd:62:43:39:e2:3a:b8:1d:aa:fa:6f:97:d6:
5a:aa:f8:9e:28:9f:d0:d2:cb:0b:ff:74:2b:df:bc:
c2:45:0e:d8:cc:39:cf:12:69:f2:65:8e:2c:43:a4:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D7:5D:83:DA:69:FD:A9:49:2E:BF:19:9C:97:9A:C0:3D:82:2B:52
X509v3 Authority Key Identifier:
keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7f:8b:93:d1:62:6c:80:08:b6:90:7d:7b:0f:af:11:bf:bf:
b4:79:cc:d7:54:6a:10:3a:31:fa:59:e2:d0:ce:2b:9f:d9:92:
98:39:27:bb:b4:6a:e8:71:49:11:35:97:21:ab:59:24:f0:7f:
bd:8d:4a:6f:5d:b1:07:49:cb:3c:46:59:c8:2d:4c:82:ed:b6:
5c:1a:41:46:af:46:1b:a7:bf:98:bb:10:9c:fe:52:ff:3f:86:
a3:d0:58:c2:3b:09:33:c9:bc:c4:ea:ad:46:0a:39:08:36:25:
7c:0b:f9:35:f9:60:7e:a9:11:d3:4d:d4:c8:5a:4b:d8:81:aa:
7e:17:2a:81:00:29:84:3f:89:fb:7c:b6:ea:c0:ff:44:71:f5:
c2:9d:c4:c8:e6:f0:30:61:ab:44:11:af:e8:2a:97:34:0b:37:
e1:cc:de:8a:7f:3a:96:5f:ad:16:38:0b:43:e3:93:15:a3:02:
06:4e:a0:b9:75:16:e2:6c:8b:fb:96:57:c0:26:73:49:16:61:
73:10:9a:b3:52:74:b8:a8:e9:a8:48:14:4f:3f:7c:2a:12:cf:
76:70:8e:57:99:31:03:a3:1a:bf:50:8f:4b:7c:0d:4f:ef:7f:
6a:88:4b:03:ae:b0:c3:51:5a:7d:82:19:37:d8:35:ec:89:3b:
19:93:91:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:53 2026 by rpki-client