
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
File: S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json)
Hash identifier: KfE3QhYZe0evXx/UxSBXJrPSNNamfed+Xk8+ydQwFiQ=
Subject key identifier: C4:CE:B0:23:B6:98:07:4C:22:AB:AB:4B:2D:E8:9E:1C:57:A2:7D:42
Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA
Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
Certificate serial: 01D6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
Manifest number: 01C8
Signing time: Mon 01 Jun 2026 04:35:41 +0000
Manifest this update: Mon 01 Jun 2026 04:35:41 +0000
Manifest next update: Mon 08 Jun 2026 04:35:41 +0000
Files and hashes: 1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: /DjDPNAQ5dAg/lGyM8TUhdoRl+97QID0GqoVhzbFdT8=)
2: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: QKv7DuW7py1p1eN4Lvl//mFlbdahxq73NkUDVPwAcGE=)
3: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: qPfNRqtUl8ZoRHAU3x9Cq02LILBulhmFpAHU6RhUKSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl
rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 04:35:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
Validity
Not Before: Jun 1 04:35:41 2026 GMT
Not After : Jun 8 04:35:41 2026 GMT
Subject: CN=6a1d0c1d-93d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:27:d6:02:d4:47:94:de:ad:b4:e2:c3:2b:
13:a1:a0:18:9b:60:4d:cc:bb:a8:f7:78:15:12:ea:
8c:67:b6:5f:85:ae:89:88:02:cf:ab:98:09:de:08:
c0:de:f6:1f:43:46:c0:10:e5:07:03:d4:37:6f:a1:
fb:23:73:21:42:74:eb:78:5f:82:66:e3:08:69:f8:
04:14:24:04:dc:5b:e4:31:4a:be:b6:1e:43:a8:54:
45:c3:88:ba:0e:64:5c:60:5f:a9:0d:b6:c0:4b:e5:
28:aa:d3:5b:1b:64:03:25:9c:2e:fb:43:40:c1:97:
00:29:7d:24:e0:c3:cd:74:e5:34:64:35:d3:e1:2c:
76:84:19:03:5d:01:c7:db:a6:ba:80:38:b1:35:44:
df:c8:bb:4b:a3:4a:2e:2b:59:05:11:a2:a5:bd:1b:
0e:9d:d4:d9:85:6a:1e:34:72:af:fd:5f:d4:44:59:
d5:26:58:48:92:ab:0f:36:20:c3:cb:bc:54:da:6d:
75:63:e5:0e:29:87:bd:c8:77:1b:43:6f:f7:21:bd:
8f:c7:a4:bb:b4:cf:97:be:a3:42:da:76:c9:1f:a7:
65:b9:03:d1:fb:92:64:8f:44:96:dc:84:68:e2:ca:
e0:7b:e8:8a:40:63:d4:f7:86:95:aa:3f:87:5e:c1:
f7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CE:B0:23:B6:98:07:4C:22:AB:AB:4B:2D:E8:9E:1C:57:A2:7D:42
X509v3 Authority Key Identifier:
keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:75:a6:89:03:d2:02:49:45:e9:0a:e4:1c:7a:65:40:d1:78:
70:ce:eb:34:94:80:d1:77:23:5a:6d:26:62:ab:bd:13:2e:7a:
9a:25:ec:5f:25:fb:e0:6f:ff:e5:98:c3:07:ba:3f:25:36:a7:
f2:33:eb:de:17:2f:2f:75:12:33:fb:82:43:f3:5f:04:a1:83:
6d:b2:23:cf:76:98:dc:27:d9:56:b9:2b:44:d8:21:87:5e:53:
b0:a0:b9:de:61:4e:23:89:91:d4:1a:f8:5c:66:dd:5e:c0:50:
94:01:34:f3:8c:13:e3:0c:21:9b:ab:57:d6:4c:28:38:2b:cd:
9e:d1:71:a6:e2:59:f3:a1:5f:4e:bb:01:a5:c0:85:57:a9:d8:
60:e2:59:c8:0e:cd:f0:9b:c7:3d:06:4c:44:c2:30:5c:f2:42:
47:d7:f7:85:0e:d6:60:2d:a0:5b:69:d5:72:7e:95:80:b7:c9:
1a:f0:4c:a0:a2:78:2e:d6:c6:da:87:fa:bf:42:be:7a:4c:45:
ad:5e:8f:47:cf:3a:c5:61:8e:36:d3:b6:6a:28:ae:c9:73:d8:
9f:5c:46:3d:dd:a2:b1:19:da:0a:bf:ef:e5:aa:ab:36:ec:8c:
7c:ce:fc:65:19:f7:e2:7d:bc:4d:98:3a:eb:e5:8f:36:09:5c:
69:60:75:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:41:17 2026 by rpki-client