
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.mft
File: -UBKpSTUNX4MzGnH1A0-ZqLk5t8.mft (raw, json)
Hash identifier: F0Ok3pqgnZIQ5L4gzOP9vZ7/66BZqsAw72Wo9z0Jf3I=
Subject key identifier: 9A:0A:4B:95:5C:DD:8D:16:42:7A:C2:BC:0F:C6:F2:68:B3:47:73:0F
Authority key identifier: F9:40:4A:A5:24:D4:35:7E:0C:CC:69:C7:D4:0D:3E:66:A2:E4:E6:DF
Certificate issuer: /CN=A9170C53/serialNumber=F9404AA524D4357E0CCC69C7D40D3E66A2E4E6DF
Certificate serial: 0264
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.mft
Manifest number: 0260
Signing time: Sat 19 Sep 2026 01:56:58 +0000
Manifest this update: Sat 19 Sep 2026 01:56:57 +0000
Manifest next update: Sat 26 Sep 2026 01:56:57 +0000
Files and hashes: 1: -UBKpSTUNX4MzGnH1A0-ZqLk5t8.crl (hash: xZ0gKrFKJwQGaCSgemHLeh6V3/S0s+uuS7v+29laKIs=)
2: C3BB51160DAC11EFB00E6B16C4F9AE02.roa (hash: +cbg7WTVhCN77TjlGhzVzZ8b4DdK8TdFQRR1HQcoMJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.crl
rsync://rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 612 (0x264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170C53, serialNumber=F9404AA524D4357E0CCC69C7D40D3E66A2E4E6DF
Validity
Not Before: Sep 19 01:56:57 2026 GMT
Not After : Sep 26 01:56:57 2026 GMT
Subject: CN=6aadebea-28ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:b1:55:7c:91:74:ea:5f:d3:20:49:65:d9:
af:3a:be:7e:41:9a:49:17:72:e7:4a:de:f3:a9:e4:
e6:b9:fb:2d:25:9d:5e:21:8f:5d:65:dd:58:44:97:
8d:38:69:ce:01:48:2e:f1:38:de:f8:8f:c4:b9:cc:
20:69:e8:37:fc:8b:98:c5:32:73:54:47:dd:8f:66:
99:a3:69:36:9a:c6:f7:a7:5a:13:a4:d3:14:79:0d:
56:31:58:eb:45:0a:86:39:f3:9f:17:7d:75:3b:05:
d8:8c:0d:d4:c1:63:6f:c2:24:d7:d1:8c:27:5e:4a:
ad:a6:1d:28:c9:f1:bc:56:0f:2e:59:33:86:39:5e:
9e:93:34:0f:25:78:15:f0:ea:48:ff:b0:ee:64:ea:
e2:fd:42:08:90:a4:d7:69:fe:bc:fd:a0:42:ae:0e:
0e:6b:f3:1e:87:8b:83:6b:88:d4:f3:76:38:20:0c:
e3:4a:e1:3f:88:a4:70:a2:16:c3:e6:5b:ef:6a:6a:
1b:b4:d8:36:54:9d:d1:ce:c3:82:1f:69:61:34:1e:
17:a4:d0:fd:88:09:88:d6:c9:52:75:e3:21:cf:34:
0c:69:46:8b:b0:a2:89:b3:6e:f4:a7:38:23:bc:f6:
5a:6c:bd:df:80:ed:b1:1c:a4:3a:a4:7c:e8:8a:4a:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0A:4B:95:5C:DD:8D:16:42:7A:C2:BC:0F:C6:F2:68:B3:47:73:0F
X509v3 Authority Key Identifier:
keyid:F9:40:4A:A5:24:D4:35:7E:0C:CC:69:C7:D4:0D:3E:66:A2:E4:E6:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:3b:bc:3b:12:b7:b6:99:0f:68:e2:7a:b9:02:a4:69:50:b5:
cd:7b:53:41:f1:1a:d9:ad:51:71:aa:f1:04:bc:6e:ca:a3:bd:
58:24:d1:70:3f:21:3c:51:2b:12:38:4e:50:27:95:b2:da:9e:
35:c5:8b:10:fe:ad:70:d0:5f:e9:d7:2b:c1:26:50:dc:03:a7:
21:a7:2b:0b:35:2f:b0:18:7b:49:02:ab:a1:7b:53:d2:53:92:
ab:58:b8:e6:9f:f2:77:05:0d:6b:a4:bb:c9:76:8f:f7:d7:6e:
4a:ac:f0:b6:dd:43:58:96:24:24:c5:51:7c:cc:c8:e4:0b:c9:
74:ca:36:ad:a5:48:d9:73:f9:d8:5d:3a:1f:ad:14:01:58:0d:
ef:da:68:f6:b7:61:70:9d:83:a4:69:72:e8:e8:e1:da:bb:47:
4a:cd:76:4f:bc:72:4d:aa:b9:b9:fb:a7:07:df:07:00:48:d2:
dd:2f:67:b1:b4:18:64:f5:8e:2e:a7:8b:df:a8:30:96:e9:59:
ea:38:24:14:9c:ff:d1:96:f9:be:84:6d:fe:53:b6:a6:84:85:
3f:01:e9:cc:82:b2:f0:68:37:f6:3c:24:2d:1f:5c:d0:a9:3f:
8c:c0:a7:82:ba:28:b0:6f:9c:cb:cb:78:e3:e1:46:15:d3:a8:
52:27:58:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 13:27:05 2026 by rpki-client