
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
File: UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json)
Hash identifier: MtiFOqfmdxvH9q9EkkpCDSzL4v9ApCEcK/++sUMeg3A=
Subject key identifier: 2B:7F:60:D6:6E:2A:DE:4D:44:1D:85:7A:36:22:1C:32:F5:D6:B7:AC
Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A
Certificate issuer: /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A
Certificate serial: 1A2F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
Manifest number: 1A2F
Signing time: Fri 16 Oct 2026 16:24:06 +0000
Manifest this update: Fri 16 Oct 2026 16:24:05 +0000
Manifest next update: Fri 23 Oct 2026 16:24:05 +0000
Files and hashes: 1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: dVlGFpO958CnX6c46UxywuYj8DR83Mymvebfz6ayBHY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl
rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Oct 2026 16:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6703 (0x1a2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED18, serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A
Validity
Not Before: Oct 16 16:24:05 2026 GMT
Not After : Oct 23 16:24:05 2026 GMT
Subject: CN=6ad24fa5-f14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2d:79:3a:6e:64:24:e0:55:c4:a7:8e:b7:41:
a9:0a:e9:ff:91:12:7f:c8:8c:15:e5:8e:4c:e3:92:
64:7e:a5:49:ba:e5:a0:f7:ec:1c:cb:b3:63:c3:1e:
a6:e2:b7:e9:8a:a6:12:76:6a:06:6b:5b:a1:68:10:
64:a0:d5:ef:38:09:29:fd:2a:d7:76:af:14:23:d5:
f7:e5:27:e1:92:4a:5a:eb:5c:4e:7f:78:b3:2f:58:
30:fe:03:fb:03:a2:08:dd:a6:83:d1:5d:d5:01:e9:
6f:1a:ac:04:12:47:32:29:a1:9e:bd:08:8f:3d:d7:
cb:12:4d:cb:91:7a:6d:71:6b:87:b9:8f:e9:e2:2b:
0f:7b:da:df:c2:b6:94:57:4e:43:8c:69:45:d2:c3:
8e:75:29:90:a5:db:73:d5:7f:31:32:53:42:ae:9d:
f5:be:cb:f1:55:33:e2:3e:0a:e5:97:30:61:24:07:
48:79:34:c8:bf:71:3c:1f:30:0d:9f:44:16:7d:e2:
95:6c:ab:a8:84:30:75:57:81:b4:a2:60:02:b7:f3:
71:e9:59:33:ac:9b:db:04:b6:cd:3f:b8:1d:a0:98:
53:49:92:ad:e0:87:4d:c7:40:b4:b7:02:f0:b9:89:
31:ae:e8:37:04:61:55:39:e2:14:55:90:bc:57:5d:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7F:60:D6:6E:2A:DE:4D:44:1D:85:7A:36:22:1C:32:F5:D6:B7:AC
X509v3 Authority Key Identifier:
keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:a8:e5:10:cf:65:77:11:97:ac:3d:41:6f:1a:69:90:05:4d:
18:bd:fb:d3:4d:bf:65:5e:43:d7:60:56:d7:a4:08:cb:48:33:
21:0e:ed:1b:ac:9d:e0:72:3b:b2:0e:b3:29:95:78:1e:14:a5:
3c:40:d0:77:83:71:d5:88:9f:87:0e:8c:32:aa:41:66:33:f7:
40:c1:31:e0:02:23:61:da:c4:dc:53:e1:71:90:28:c2:3f:f3:
6a:93:2f:52:fc:5f:00:86:a5:c6:13:c9:63:d1:53:23:f6:ed:
42:23:45:d3:d6:d9:97:ab:b2:62:16:30:80:b2:9e:c6:aa:00:
f6:c4:bd:7a:41:8b:70:7d:7c:03:64:b1:2b:3c:00:a0:6d:f1:
34:f6:38:18:56:92:67:ff:22:1d:f1:7b:bf:f9:d9:15:7c:75:
16:96:b0:06:ed:b6:d2:7c:3f:da:70:46:26:bf:68:84:e3:0c:
6d:8d:f2:d5:a5:99:a0:05:8c:07:71:71:a5:a0:20:9f:76:b6:
28:f7:d8:d7:3b:e7:75:00:e1:40:50:b0:f3:1f:51:97:24:b4:
74:b0:1b:0c:09:da:2b:75:57:78:20:a1:26:9d:37:10:99:14:
7d:51:8e:36:02:b0:34:75:04:40:e4:ef:21:e4:fe:0f:10:48:
ed:f7:35:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVEMTgxMTAvBgNVBAUTKDUwM0QyNzY1MTEzQ0I2RDEzQjk4NkZCQjRDQjc5RkYx
OENBQjc3NUEwHhcNMjYxMDE2MTYyNDA1WhcNMjYxMDIzMTYyNDA1WjAYMRYwFAYD
VQQDEw02YWQyNGZhNS1mMTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0y15Om5kJOBVxKeOt0GpCun/kRJ/yIwV5Y5M45JkfqVJuuWg9+wcy7Njwx6m
4rfpiqYSdmoGa1uhaBBkoNXvOAkp/SrXdq8UI9X35Sfhkkpa61xOf3izL1gw/gP7
A6II3aaD0V3VAelvGqwEEkcyKaGevQiPPdfLEk3LkXptcWuHuY/p4isPe9rfwraU
V05DjGlF0sOOdSmQpdtz1X8xMlNCrp31vsvxVTPiPgrllzBhJAdIeTTIv3E8HzAN
n0QWfeKVbKuohDB1V4G0omACt/Nx6VkzrJvbBLbNP7gdoJhTSZKt4IdNx0C0twLw
uYkxrug3BGFVOeIUVZC8V10dJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCt/YNZu
Kt5NRB2FejYiHDL11resMB8GA1UdIwQYMBaAFFA9J2URPLbRO5hvu0y3n/GMq3da
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GNzI3RkU5RTdB
RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0RTdtRy03VExlZjhZeXJk
MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VEMG5aUkU4dHRFN21HLTdUTGVmOFl5cmQxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RUQxOC9GNzI3RkU5RTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0
RTdtRy03VExlZjhZeXJkMW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkKjlEM9ldxGXrD1BbxppkAVNGL37002/ZV5D12BW16QIy0gzIQ7tG6yd4HI7
sg6zKZV4HhSlPEDQd4Nx1Yifhw6MMqpBZjP3QMEx4AIjYdrE3FPhcZAowj/zapMv
UvxfAIalxhPJY9FTI/btQiNF09bZl6uyYhYwgLKexqoA9sS9ekGLcH18A2SxKzwA
oG3xNPY4GFaSZ/8iHfF7v/nZFXx1FpawBu220nw/2nBGJr9ohOMMbY3y1aWZoAWM
B3FxpaAgn3a2KPfY1zvndQDhQFCw8x9RlyS0dLAbDAnaK3VXeCChJp03EJkUfVGO
NgKwNHUEQOTvIeT+DxBI7fc16g==
-----END CERTIFICATE-----
Generated at Sun Oct 18 09:41:54 2026 by rpki-client