
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.mft
File: ulHQnhOT5woFhzID_3zE4f1-pw8.mft (raw, json)
Hash identifier: pufrfWobqNX9y+r6yisAL0HQJn2RIwqqlKdwIKuoS7o=
Subject key identifier: 33:3B:AA:9A:3B:FD:5D:2D:C0:85:2A:93:19:5A:49:FB:11:87:FB:F9
Authority key identifier: BA:51:D0:9E:13:93:E7:0A:05:87:32:03:FF:7C:C4:E1:FD:7E:A7:0F
Certificate issuer: /CN=A9168B03/serialNumber=BA51D09E1393E70A05873203FF7CC4E1FD7EA70F
Certificate serial: 1CA9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulHQnhOT5woFhzID_3zE4f1-pw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.mft
Manifest number: 1C99
Signing time: Mon 22 Jun 2026 16:09:24 +0000
Manifest this update: Mon 22 Jun 2026 16:09:23 +0000
Manifest next update: Mon 29 Jun 2026 16:09:23 +0000
Files and hashes: 1: ulHQnhOT5woFhzID_3zE4f1-pw8.crl (hash: ad35L+i1YPT/k8g+sJHQ0QHQt7+ABsIxPdBk3nuWZPs=)
2: D3EAE1500B5911EA8CC1114BC4F9AE02.roa (hash: kb+dyeOwVVg/Z6TRUEqLhtnoMRAUu0DJXJFO0yQHy+M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.crl
rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulHQnhOT5woFhzID_3zE4f1-pw8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 16:09:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7337 (0x1ca9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168B03, serialNumber=BA51D09E1393E70A05873203FF7CC4E1FD7EA70F
Validity
Not Before: Jun 22 16:09:23 2026 GMT
Not After : Jun 29 16:09:23 2026 GMT
Subject: CN=6a395e34-aba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:51:f9:d3:db:aa:02:7c:68:db:32:a4:fc:
c3:14:51:ab:c0:e0:d4:79:be:53:92:03:c4:04:2a:
a1:21:2c:21:50:0e:20:5e:bc:d8:41:c5:93:9e:c5:
31:6e:ab:3a:71:ee:ef:82:90:e1:f8:58:83:ce:f7:
dc:77:6b:7f:b0:38:42:f5:b0:b1:31:00:01:a3:92:
42:85:3a:d0:be:4e:62:88:6c:81:2e:c2:f5:4c:b2:
90:ac:7e:89:d6:8f:48:0c:69:9b:5c:b3:7e:39:83:
b3:78:2c:3f:67:14:89:c3:5c:75:f6:a6:51:60:be:
8e:dd:56:80:e8:ad:7b:a9:83:29:31:96:a5:61:7d:
11:f7:da:8f:a6:cb:d2:c7:3d:a8:f6:0d:39:b3:ac:
42:cf:7d:6e:ac:8f:a0:dc:30:4e:96:93:86:ce:eb:
0e:c3:cb:62:73:21:dd:05:34:7f:4c:d9:0b:ae:0e:
74:e2:f8:42:d9:d3:64:60:d0:d2:50:38:ca:17:cc:
3f:ca:9b:e3:ce:9b:cf:8a:fa:3b:b0:e7:92:7c:76:
33:c2:03:78:af:eb:db:34:54:1c:78:d0:75:9c:12:
00:94:9a:99:06:a7:b9:db:10:07:ff:4d:5b:79:97:
8f:1a:6e:0a:51:42:98:96:ac:f1:10:a1:b0:42:2f:
ae:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3B:AA:9A:3B:FD:5D:2D:C0:85:2A:93:19:5A:49:FB:11:87:FB:F9
X509v3 Authority Key Identifier:
keyid:BA:51:D0:9E:13:93:E7:0A:05:87:32:03:FF:7C:C4:E1:FD:7E:A7:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulHQnhOT5woFhzID_3zE4f1-pw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:d5:3c:4c:43:67:16:0d:75:15:41:7d:c8:07:63:f7:45:42:
8b:d3:62:fc:a1:e5:d5:7e:05:5e:05:4a:27:20:82:cd:e0:ad:
63:ba:15:c4:3d:21:ac:77:a5:e7:8a:af:ca:7c:51:1a:4a:fc:
6a:09:8e:de:1e:82:bc:0d:5c:50:2d:c9:97:17:ae:00:13:f1:
72:b0:a8:ca:c4:4d:cb:17:b2:55:a5:80:76:47:56:e9:55:79:
ab:65:2c:29:e1:31:d1:4e:6f:cd:5b:63:59:f9:ae:d9:3b:e3:
b0:7e:ba:6c:64:11:2c:c6:bb:b2:15:13:e4:11:6a:ab:7e:dc:
a5:9f:fc:65:aa:43:34:47:86:e5:ea:82:a8:4e:60:08:d2:35:
6b:34:f2:52:93:7c:3e:93:d7:1a:47:15:14:c1:9e:6e:cd:1a:
92:2a:fb:48:a2:66:c4:ff:b3:7d:f9:70:ba:3c:3d:5c:de:82:
48:c4:8b:d5:59:2e:ea:56:fb:f3:50:82:6f:c3:98:43:a6:80:
ac:59:d4:78:11:b6:60:41:a0:bc:da:91:73:f9:0e:6a:8c:5a:
82:a1:11:1c:0a:eb:7b:2c:50:7f:61:87:a9:b7:de:dd:ae:b4:
e0:e8:82:ec:bd:8a:fd:9c:7d:24:7a:f1:51:f9:c9:a3:7c:ab:
d5:f2:23:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjhCMDMxMTAvBgNVBAUTKEJBNTFEMDlFMTM5M0U3MEEwNTg3MzIwM0ZGN0NDNEUx
RkQ3RUE3MEYwHhcNMjYwNjIyMTYwOTIzWhcNMjYwNjI5MTYwOTIzWjAYMRYwFAYD
VQQDEw02YTM5NWUzNC1hYmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxARR+dPbqgJ8aNsypPzDFFGrwODUeb5TkgPEBCqhISwhUA4gXrzYQcWTnsUx
bqs6ce7vgpDh+FiDzvfcd2t/sDhC9bCxMQABo5JChTrQvk5iiGyBLsL1TLKQrH6J
1o9IDGmbXLN+OYOzeCw/ZxSJw1x19qZRYL6O3VaA6K17qYMpMZalYX0R99qPpsvS
xz2o9g05s6xCz31urI+g3DBOlpOGzusOw8ticyHdBTR/TNkLrg504vhC2dNkYNDS
UDjKF8w/ypvjzpvPivo7sOeSfHYzwgN4r+vbNFQceNB1nBIAlJqZBqe52xAH/01b
eZePGm4KUUKYlqzxEKGwQi+udwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDM7qpo7
/V0twIUqkxlaSfsRh/v5MB8GA1UdIwQYMBaAFLpR0J4Tk+cKBYcyA/98xOH9fqcP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEIwMy9EMTE4RTY3OEY5
OUQxMUU2Qjg3MjcwMTNDNEY5QUUwMi91bEhRbmhPVDV3b0ZoeklEXzN6RTRmMS1w
dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VsSFFuaE9UNXdvRmh6SURfM3pFNGYxLXB3OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OEIwMy9EMTE4RTY3OEY5OUQxMUU2Qjg3MjcwMTNDNEY5QUUwMi91bEhRbmhPVDV3
b0ZoeklEXzN6RTRmMS1wdzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWdU8TENnFg11FUF9yAdj90VCi9Ni/KHl1X4FXgVKJyCCzeCtY7oVxD0hrHel
54qvynxRGkr8agmO3h6CvA1cUC3JlxeuABPxcrCoysRNyxeyVaWAdkdW6VV5q2Us
KeEx0U5vzVtjWfmu2TvjsH66bGQRLMa7shUT5BFqq37cpZ/8ZapDNEeG5eqCqE5g
CNI1azTyUpN8PpPXGkcVFMGebs0akir7SKJmxP+zfflwujw9XN6CSMSL1Vku6lb7
81CCb8OYQ6aArFnUeBG2YEGgvNqRc/kOaoxagqERHArreyxQf2GHqbfe3a604OiC
7L2K/Zx9JHrxUfnJo3yr1fIjZw==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:52 2026 by rpki-client