
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft
File: uftCI-sDug7mzge0ZgIXr69xbV0.mft (raw, json)
Hash identifier: 8szvGEraACDENujdG8NxM+0Jyjht9tEVaNpSDGm7ACo=
Subject key identifier: C0:40:DE:29:34:2C:51:08:CC:AA:4D:C4:D0:1C:48:88:3A:57:51:3A
Authority key identifier: B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D
Certificate issuer: /CN=A916D5A2/serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D
Certificate serial: 0777
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft
Manifest number: 076B
Signing time: Sun 04 Oct 2026 01:09:34 +0000
Manifest this update: Sun 04 Oct 2026 01:09:34 +0000
Manifest next update: Sun 11 Oct 2026 01:09:34 +0000
Files and hashes: 1: uftCI-sDug7mzge0ZgIXr69xbV0.crl (hash: nSo+DpyE3NnmzOky1twKyMVc1BFVA8VJxic5kGjBeM0=)
2: 40146F80BF9011F190E01D7C4811F970.roa (hash: mnH1V7+qhYnpsBiEZJWOV/9HnEmBR8CdBJisx6vAVKs=)
3: 2F674400BF9011F1A576726A4811F970.roa (hash: zG7u2vvpERC/GipBSFLMlpQQRzHNeiPJKHmzjHgfBS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl
rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 01:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1911 (0x777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D5A2, serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D
Validity
Not Before: Oct 4 01:09:34 2026 GMT
Not After : Oct 11 01:09:34 2026 GMT
Subject: CN=6ac1a74e-151b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e3:c8:31:64:fa:e9:07:f2:92:3a:0d:34:a9:
04:cc:a6:6d:4d:6d:62:8a:76:b9:f7:ef:72:58:9f:
19:26:20:e2:ac:a3:02:37:4f:ca:f0:a5:a6:37:66:
b7:db:91:57:24:94:59:c1:58:c7:3c:93:e7:80:18:
dc:43:e1:cb:4c:1b:07:ab:67:8c:8f:85:a7:d2:28:
5a:c2:ef:29:62:3d:8a:7e:e4:e3:a9:8b:82:43:56:
68:52:f9:dd:e5:dc:b0:58:37:93:d6:99:de:de:d3:
2f:f5:93:62:53:9c:ad:52:97:38:11:96:ad:6b:c6:
13:b4:40:18:8c:ae:b3:38:3f:99:79:63:3a:b0:6e:
78:1d:ea:2c:bd:58:14:4c:9d:f6:60:77:f3:43:95:
8e:ed:47:c1:f1:e3:d9:b3:a5:ec:3c:90:d7:bf:a6:
aa:89:27:2c:1a:67:d4:71:35:67:0c:6f:64:f6:61:
f8:23:70:57:ca:d3:a3:9b:51:67:fb:9d:44:3e:ba:
c0:e8:c2:6f:9d:ff:95:64:d2:aa:26:70:1a:6f:bf:
76:40:9b:03:46:b4:43:6a:e4:6b:2b:45:2b:20:93:
22:8c:9f:94:3e:73:44:c8:8d:d8:46:63:e0:10:46:
32:ba:82:28:62:e6:d4:2e:38:83:8c:4d:41:7f:3f:
84:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:40:DE:29:34:2C:51:08:CC:AA:4D:C4:D0:1C:48:88:3A:57:51:3A
X509v3 Authority Key Identifier:
keyid:B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:13:2f:42:57:44:b4:04:be:f2:69:b9:f7:e6:be:40:9a:a9:
77:53:cd:57:06:86:4d:29:dd:f8:53:de:7a:ce:d9:f5:fc:cc:
07:9c:15:90:10:85:92:f0:32:41:8b:f3:71:bb:54:c5:f6:45:
73:2e:cb:97:db:87:96:9b:b3:ec:46:34:aa:40:47:a9:ff:c9:
4c:42:4a:7d:8b:ef:08:45:17:3d:04:68:10:4f:64:ae:da:93:
57:0d:dc:0b:2e:a8:3f:2a:3b:a6:e1:f8:17:80:62:6d:90:85:
06:4f:9e:67:e9:06:7b:47:e8:06:6a:ed:11:32:23:7e:a4:22:
59:59:ed:b4:5e:8f:9a:a1:28:b9:30:22:8d:81:16:e3:98:f1:
73:bb:a2:c2:73:00:b6:16:56:ca:e8:d4:ce:e5:89:95:91:7f:
ed:60:bc:21:56:f4:53:61:ce:68:9a:b8:b5:45:b7:88:60:2d:
88:c5:f6:9b:96:6a:30:21:1e:93:f2:70:5b:6d:19:d3:30:49:
7a:cd:92:43:08:59:db:07:45:23:68:2b:0b:bc:0c:9c:67:21:
9a:bf:10:ea:0a:9b:a7:a5:19:45:1e:da:4b:a9:96:09:6c:5d:
ab:f6:38:47:f8:60:70:93:4f:d9:39:0c:13:2e:74:5c:0f:c7:
ca:2f:be:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQ1QTIxMTAvBgNVBAUTKEI5RkI0MjIzRUIwM0JBMEVFNkNFMDdCNDY2MDIxN0FG
QUY3MTZENUQwHhcNMjYxMDA0MDEwOTM0WhcNMjYxMDExMDEwOTM0WjAYMRYwFAYD
VQQDEw02YWMxYTc0ZS0xNTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4uPIMWT66QfykjoNNKkEzKZtTW1iina59+9yWJ8ZJiDirKMCN0/K8KWmN2a3
25FXJJRZwVjHPJPngBjcQ+HLTBsHq2eMj4Wn0ihawu8pYj2KfuTjqYuCQ1ZoUvnd
5dywWDeT1pne3tMv9ZNiU5ytUpc4EZata8YTtEAYjK6zOD+ZeWM6sG54HeosvVgU
TJ32YHfzQ5WO7UfB8ePZs6XsPJDXv6aqiScsGmfUcTVnDG9k9mH4I3BXytOjm1Fn
+51EPrrA6MJvnf+VZNKqJnAab792QJsDRrRDauRrK0UrIJMijJ+UPnNEyI3YRmPg
EEYyuoIoYubULjiDjE1Bfz+EwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMBA3ik0
LFEIzKpNxNAcSIg6V1E6MB8GA1UdIwQYMBaAFLn7QiPrA7oO5s4HtGYCF6+vcW1d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDVBMi9DMjFBNTM4Njgw
QjgxMUVCQkVCMTlFODNDNEY5QUUwMi91ZnRDSS1zRHVnN216Z2UwWmdJWHI2OXhi
VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VmdENJLXNEdWc3bXpnZTBaZ0lYcjY5eGJWMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDVBMi9DMjFBNTM4NjgwQjgxMUVCQkVCMTlFODNDNEY5QUUwMi91ZnRDSS1zRHVn
N216Z2UwWmdJWHI2OXhiVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABhMvQldEtAS+8mm59+a+QJqpd1PNVwaGTSnd+FPees7Z9fzMB5wVkBCFkvAy
QYvzcbtUxfZFcy7Ll9uHlpuz7EY0qkBHqf/JTEJKfYvvCEUXPQRoEE9krtqTVw3c
Cy6oPyo7puH4F4BibZCFBk+eZ+kGe0foBmrtETIjfqQiWVnttF6PmqEouTAijYEW
45jxc7uiwnMAthZWyujUzuWJlZF/7WC8IVb0U2HOaJq4tUW3iGAtiMX2m5ZqMCEe
k/JwW20Z0zBJes2SQwhZ2wdFI2grC7wMnGchmr8Q6gqbp6UZRR7aS6mWCWxdq/Y4
R/hgcJNP2TkMEy50XA/Hyi++Tw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:29:49 2026 by rpki-client