
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
File: UG14DtF5dIDxUlE0f8KEQ9culQc.mft (raw, json)
Hash identifier: Q6ca338wnf/EuxTgPfDxGBsk9/PGPN1ElfKD+m6VQeI=
Subject key identifier: E5:57:D6:70:2C:A3:E3:0D:A1:F1:42:DE:EE:53:47:91:62:E1:D1:80
Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
Certificate issuer: /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507
Certificate serial: 0C8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
Manifest number: 0C6C
Signing time: Sat 04 Apr 2026 18:33:21 +0000
Manifest this update: Sat 04 Apr 2026 18:33:21 +0000
Manifest next update: Sat 11 Apr 2026 18:33:21 +0000
Files and hashes: 1: UG14DtF5dIDxUlE0f8KEQ9culQc.crl (hash: UqqVOjf7wpWuuXkbNkpxvwonjuKEO8pZzgr4rU0AnNM=)
2: FB2EC05CA3B111EE92169F16C4F9AE02.roa (hash: ZcWtfkepcoTH3hYySssNcb8QgN4PKAntgG2yhFuPzqs=)
3: E5B6117E2BC611EAB1456E4CC4F9AE02.roa (hash: 4wHwD6cPpHWdIAGlk+QPknVHSXJJAxVoDS9hDjhyH1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl
rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3215 (0xc8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EB0C, serialNumber=506D780ED1797480F15251347FC28443D72E9507
Validity
Not Before: Apr 4 18:33:21 2026 GMT
Not After : Apr 11 18:33:21 2026 GMT
Subject: CN=69d15971-a067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:23:1c:9c:e0:2e:6d:3c:0c:e8:e0:6e:ed:3f:
b4:b0:1f:90:4f:08:de:2b:a7:ba:2f:52:77:35:b0:
dc:2e:a8:80:a5:39:9a:c0:79:ed:21:52:34:db:72:
e8:a2:86:ca:6b:16:70:da:aa:30:5d:0a:e6:b1:8f:
24:a0:91:7d:a0:79:b3:84:58:4e:29:0f:1f:a8:f5:
77:dd:48:73:12:07:5a:fd:dc:30:2a:66:77:27:2a:
8c:3c:20:22:57:19:5e:d3:e4:65:9e:6d:33:7d:55:
5c:bf:a9:49:2d:29:3a:b6:09:b6:a1:df:ba:49:82:
92:3d:bb:d6:c3:60:86:d0:f1:d0:37:27:89:33:5d:
1e:f8:3b:53:15:a7:53:e1:b7:cf:73:48:1f:d4:78:
a7:a7:41:76:b3:4a:de:ba:8c:fd:b9:8c:70:ef:a7:
9f:8d:bc:5c:51:23:f7:9d:ae:a4:66:c1:8b:0d:5f:
3e:9b:22:78:50:21:d9:98:bb:7b:61:17:f8:1c:9b:
e5:55:8e:f8:4d:cb:90:93:d9:2e:c0:ab:54:5a:48:
f0:13:ab:71:45:2f:c8:0d:fd:bf:f7:79:b1:be:d7:
c9:a8:99:b2:93:cc:0e:14:ea:38:56:78:52:f1:52:
67:21:9d:2d:5c:ee:f0:f1:36:18:95:a0:29:4f:9d:
fc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:57:D6:70:2C:A3:E3:0D:A1:F1:42:DE:EE:53:47:91:62:E1:D1:80
X509v3 Authority Key Identifier:
keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:48:64:3a:65:11:b3:7f:be:b3:7b:da:24:6b:6a:45:c3:fd:
7a:e5:b7:81:bc:7b:58:1f:88:0b:1e:f6:49:17:61:4f:5a:4a:
0c:68:62:8e:ce:32:25:40:a6:1a:8d:c7:fb:bf:00:3e:5b:6e:
8c:6b:e7:11:9c:58:0b:92:60:2b:2d:71:54:ed:69:12:74:64:
64:d6:c7:06:96:74:95:79:62:1f:43:a5:60:02:46:ec:16:b8:
ac:b3:dc:0b:5a:60:49:9b:18:b7:3f:52:33:f0:fc:83:5b:1b:
14:80:a5:10:de:9a:b6:f3:0b:b1:5c:19:c9:58:40:c1:98:c6:
a9:df:12:50:1d:c0:fb:ae:d5:57:38:54:03:24:08:2b:10:27:
b5:c2:32:c1:11:a1:14:b4:38:5c:3e:53:1c:70:25:84:d7:cc:
ea:98:f1:28:07:16:26:9a:60:0e:ad:e2:8a:49:9a:3b:49:73:
6b:4f:35:02:57:68:2c:84:9b:90:72:f2:08:75:72:b5:a6:56:
3d:0a:ed:09:50:01:0c:48:45:33:5b:df:39:c3:f7:dd:db:9f:
8a:bc:de:57:d9:20:e5:96:01:da:af:65:b6:23:f3:78:aa:cf:
b9:3e:b0:39:57:b4:5b:9e:80:9f:74:09:0b:dc:49:b5:ac:49:
e5:f1:df:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:40:39 2026 by rpki-client