
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
File: UG14DtF5dIDxUlE0f8KEQ9culQc.mft (raw, json)
Hash identifier: k6Vfp58YHOwO4p9dKf7aOBL1TNkEMoJYXWSW6KAuRpQ=
Subject key identifier: 63:E6:10:02:80:2A:95:7D:7C:42:81:10:C5:D2:F0:F8:B0:CD:52:AD
Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
Certificate issuer: /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507
Certificate serial: 0CDD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
Manifest number: 0CBA
Signing time: Fri 04 Sep 2026 18:32:25 +0000
Manifest this update: Fri 04 Sep 2026 18:32:25 +0000
Manifest next update: Fri 11 Sep 2026 18:32:25 +0000
Files and hashes: 1: UG14DtF5dIDxUlE0f8KEQ9culQc.crl (hash: MU66V7UHv04l/T8VpB9Mz8Wk76hUWzZ0tDVgitDUSeE=)
2: FB2EC05CA3B111EE92169F16C4F9AE02.roa (hash: ZcWtfkepcoTH3hYySssNcb8QgN4PKAntgG2yhFuPzqs=)
3: E5B6117E2BC611EAB1456E4CC4F9AE02.roa (hash: 4wHwD6cPpHWdIAGlk+QPknVHSXJJAxVoDS9hDjhyH1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl
rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 18:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3293 (0xcdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EB0C, serialNumber=506D780ED1797480F15251347FC28443D72E9507
Validity
Not Before: Sep 4 18:32:25 2026 GMT
Not After : Sep 11 18:32:25 2026 GMT
Subject: CN=6a9b0eb9-2440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0c:e6:0e:c7:89:3a:d3:1b:2b:ce:a7:dc:c8:
7e:ee:60:3b:98:75:9c:d1:84:05:86:3b:d9:15:80:
17:2d:ff:42:4b:77:ea:14:8f:6f:fe:5a:33:ca:18:
ae:59:d0:d1:12:f6:a6:e9:c1:25:51:87:26:ed:d2:
0c:8e:e2:08:d6:04:26:5a:be:78:d0:27:36:c4:c5:
c3:5b:39:2a:58:4d:b2:4c:f7:7f:d6:d3:e2:cc:48:
2a:18:6a:39:65:f8:e0:e5:ce:ee:99:c2:91:fa:21:
cd:53:75:aa:6d:35:46:a2:0d:76:c0:f5:83:70:99:
47:e5:ef:39:34:fd:37:a8:f5:1c:37:e5:a0:78:1d:
1a:8e:2f:3c:cd:19:91:b2:72:29:c8:23:93:25:2c:
f0:0b:70:0c:8e:e2:48:67:19:00:91:da:03:57:20:
91:5a:1c:aa:ce:f0:cb:2e:9e:bd:de:9f:ba:00:66:
9b:d7:6e:52:8a:74:99:f5:d2:7d:a3:31:ce:34:2c:
08:73:46:80:6c:b9:26:00:c1:9b:ac:84:07:65:b0:
7c:45:de:4a:4d:ee:89:ce:89:6e:10:92:96:f9:18:
51:01:96:1d:ff:f8:13:04:d0:e3:3a:49:c3:52:af:
64:2b:b4:b1:d0:a0:37:7f:2b:34:c1:73:97:ff:55:
bd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E6:10:02:80:2A:95:7D:7C:42:81:10:C5:D2:F0:F8:B0:CD:52:AD
X509v3 Authority Key Identifier:
keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:68:fb:05:46:dd:ad:bc:6b:84:8c:c7:ef:5a:58:6b:ff:40:
0e:c0:50:cb:43:60:4a:89:ac:3a:b4:32:47:e5:91:1d:66:35:
49:0f:ec:af:dc:fa:32:67:1b:d3:50:e8:b8:69:19:a6:e1:12:
30:26:b6:ce:d4:17:b5:a1:cd:f5:cf:97:65:a1:6e:e8:e3:73:
23:81:fb:81:57:c4:e1:e9:54:6f:4b:d0:63:d0:22:d0:de:12:
53:c6:39:ad:e9:55:e4:a5:1e:b8:55:14:4f:8f:c9:30:74:68:
98:72:dd:b2:4e:dd:0f:8c:02:5b:c3:12:4d:1e:80:9f:0d:2e:
95:ea:25:d0:2e:a8:0b:bf:fa:b0:d7:02:96:5d:73:fa:96:86:
52:b8:c7:43:e1:6e:fc:d1:db:75:18:33:c2:42:fd:52:5a:3b:
9b:38:73:a6:a3:f6:80:c7:d0:8d:73:58:d7:4c:02:2f:24:4b:
b0:6c:1e:6f:24:e8:9b:e8:73:b8:22:4b:4e:1b:75:4a:80:9f:
7c:a9:98:68:14:2f:d5:79:57:08:f5:47:43:31:a8:35:86:21:
0a:e6:ed:f2:e0:79:3e:da:2e:24:29:28:d6:05:17:2a:72:14:
fb:0d:af:9a:ca:3e:79:4f:c2:d8:c0:36:e3:2b:9f:3c:23:86:
b6:6f:1d:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VCMEMxMTAvBgNVBAUTKDUwNkQ3ODBFRDE3OTc0ODBGMTUyNTEzNDdGQzI4NDQz
RDcyRTk1MDcwHhcNMjYwOTA0MTgzMjI1WhcNMjYwOTExMTgzMjI1WjAYMRYwFAYD
VQQDEw02YTliMGViOS0yNDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlAzmDseJOtMbK86n3Mh+7mA7mHWc0YQFhjvZFYAXLf9CS3fqFI9v/lozyhiu
WdDREvam6cElUYcm7dIMjuII1gQmWr540Cc2xMXDWzkqWE2yTPd/1tPizEgqGGo5
Zfjg5c7umcKR+iHNU3WqbTVGog12wPWDcJlH5e85NP03qPUcN+WgeB0aji88zRmR
snIpyCOTJSzwC3AMjuJIZxkAkdoDVyCRWhyqzvDLLp693p+6AGab125SinSZ9dJ9
ozHONCwIc0aAbLkmAMGbrIQHZbB8Rd5KTe6JzoluEJKW+RhRAZYd//gTBNDjOknD
Uq9kK7Sx0KA3fys0wXOX/1W9fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGPmEAKA
KpV9fEKBEMXS8PiwzVKtMB8GA1UdIwQYMBaAFFBteA7ReXSA8VJRNH/ChEPXLpUH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUIwQy82MTM3NUI2QTIy
MkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJRHhVbEUwZjhLRVE5Y3Vs
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VHMTREdEY1ZElEeFVsRTBmOEtFUTljdWxRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RUIwQy82MTM3NUI2QTIyMkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJ
RHhVbEUwZjhLRVE5Y3VsUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqGj7BUbdrbxrhIzH71pYa/9ADsBQy0NgSomsOrQyR+WRHWY1SQ/sr9z6Mmcb
01DouGkZpuESMCa2ztQXtaHN9c+XZaFu6ONzI4H7gVfE4elUb0vQY9Ai0N4SU8Y5
relV5KUeuFUUT4/JMHRomHLdsk7dD4wCW8MSTR6Anw0uleol0C6oC7/6sNcCll1z
+paGUrjHQ+Fu/NHbdRgzwkL9Ulo7mzhzpqP2gMfQjXNY10wCLyRLsGwebyTom+hz
uCJLTht1SoCffKmYaBQv1XlXCPVHQzGoNYYhCubt8uB5PtouJCko1gUXKnIU+w2v
mso+eU/C2MA24yufPCOGtm8d2w==
-----END CERTIFICATE-----
Generated at Sat Sep 5 05:16:14 2026 by rpki-client