
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
File: UG14DtF5dIDxUlE0f8KEQ9culQc.mft (raw, json)
Hash identifier: S3P5EbdkMcod0KpE0EjX/zx/pdsdEoO65Nq4DfDgHUI=
Subject key identifier: 7D:46:1E:8E:95:E2:16:C3:3E:FB:1A:1A:A3:F2:B0:29:32:94:58:47
Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
Certificate issuer: /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507
Certificate serial: 0D00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
Manifest number: 0CD8
Signing time: Sat 24 Oct 2026 18:33:05 +0000
Manifest this update: Sat 24 Oct 2026 18:33:05 +0000
Manifest next update: Sat 31 Oct 2026 18:33:05 +0000
Files and hashes: 1: UG14DtF5dIDxUlE0f8KEQ9culQc.crl (hash: l28qz7INtNMERG97lH6675k57qmlmSppFxhds1utatY=)
2: FB2EC05CA3B111EE92169F16C4F9AE02.roa (hash: ZcWtfkepcoTH3hYySssNcb8QgN4PKAntgG2yhFuPzqs=)
3: 7AD39862C6E311F184065DC14911F970.roa (hash: xr9RYPY8/JGc3iYG3m1kXzZ6mI9lFVA73AH8tEODsgc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl
rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 18:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3328 (0xd00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EB0C, serialNumber=506D780ED1797480F15251347FC28443D72E9507
Validity
Not Before: Oct 24 18:33:05 2026 GMT
Not After : Oct 31 18:33:05 2026 GMT
Subject: CN=6adcf9e1-0b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0f:de:ba:c9:13:4d:d3:ef:93:9d:e5:14:c0:
74:e1:bc:ca:1d:d8:61:a4:cd:5e:86:f1:ad:e3:2b:
60:e6:23:b8:a5:ba:f8:3a:bd:e2:a3:91:2b:2b:a2:
fc:e7:72:9d:ca:77:ef:be:cc:59:7b:3e:d1:5d:7c:
48:9d:b7:ac:9f:b3:21:04:ac:33:e7:33:1c:4f:f0:
d7:ce:c4:d1:76:e5:09:4d:95:28:e3:ff:f2:5d:96:
51:87:5d:9d:e2:0c:af:e2:a6:2d:bc:13:0b:62:1d:
3b:13:ef:a9:e6:dc:36:05:e5:23:f5:82:2f:b9:3d:
14:9a:cd:82:b2:99:ad:4b:58:e5:ba:6f:62:0d:51:
f6:9a:96:0c:de:df:3d:a0:c9:9d:34:df:26:a9:df:
75:b0:75:2a:4c:40:2c:a8:ae:79:64:f3:c4:64:b6:
73:f4:a7:2c:92:f2:3e:fa:ad:22:3a:fb:e3:52:2e:
b0:96:82:27:ed:39:1c:f4:8c:98:35:53:b1:67:2d:
0e:ab:da:26:36:33:1e:7e:74:d0:f4:64:e6:c3:98:
e5:02:0c:8b:3b:4c:fc:aa:6e:80:ad:c2:c3:72:22:
f8:9f:3f:17:ba:47:21:20:21:7d:4e:f4:f4:56:4b:
1c:06:a9:01:43:c7:ef:70:1a:56:20:19:d1:8e:4c:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:46:1E:8E:95:E2:16:C3:3E:FB:1A:1A:A3:F2:B0:29:32:94:58:47
X509v3 Authority Key Identifier:
keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:42:b7:ac:e5:18:e4:95:f7:f2:47:a6:37:9d:64:8a:59:ba:
df:45:4f:6d:60:c2:8d:45:1d:5c:dc:6a:01:76:44:59:0d:08:
d2:8f:4d:a6:6f:a4:a8:88:e3:0a:2a:0f:7c:4d:a9:cb:0c:33:
22:5b:8c:2d:4e:e3:31:bb:4c:6b:90:33:c1:3d:1b:6d:e4:b5:
98:ef:a3:18:9b:e3:3a:e0:4d:09:2e:78:6e:86:49:2f:96:8e:
32:a1:21:59:01:ec:08:bf:60:3d:d0:39:36:65:13:93:f5:93:
7b:3d:8e:51:40:17:87:f3:a9:5b:99:d8:43:97:d2:8e:b5:4f:
d3:db:6e:40:97:1c:c6:42:82:b3:6e:0d:f4:46:0b:b5:d1:37:
20:06:9f:90:4c:50:f9:c1:0a:df:1a:43:28:51:3d:cd:7a:6e:
60:30:17:7d:c3:4f:ba:2c:09:2d:95:18:76:50:ec:a6:c1:34:
60:d3:f2:1f:a2:1f:4f:cc:86:08:2a:ad:fd:39:f9:1f:12:12:
41:98:e0:63:01:40:d4:ee:ea:8e:9a:e7:58:c2:ce:9e:14:52:
65:db:09:cb:bb:dd:85:cb:78:db:c9:0e:f1:36:e6:e3:b1:1b:
48:6b:a0:5b:0a:e1:75:7a:9d:fd:33:5e:a1:b2:2a:92:2f:61:
7e:7b:1d:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VCMEMxMTAvBgNVBAUTKDUwNkQ3ODBFRDE3OTc0ODBGMTUyNTEzNDdGQzI4NDQz
RDcyRTk1MDcwHhcNMjYxMDI0MTgzMzA1WhcNMjYxMDMxMTgzMzA1WjAYMRYwFAYD
VQQDEw02YWRjZjllMS0wYjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyw/euskTTdPvk53lFMB04bzKHdhhpM1ehvGt4ytg5iO4pbr4Or3io5ErK6L8
53KdynfvvsxZez7RXXxInbesn7MhBKwz5zMcT/DXzsTRduUJTZUo4//yXZZRh12d
4gyv4qYtvBMLYh07E++p5tw2BeUj9YIvuT0Ums2CspmtS1jlum9iDVH2mpYM3t89
oMmdNN8mqd91sHUqTEAsqK55ZPPEZLZz9KcskvI++q0iOvvjUi6wloIn7Tkc9IyY
NVOxZy0Oq9omNjMefnTQ9GTmw5jlAgyLO0z8qm6ArcLDciL4nz8XukchICF9TvT0
VkscBqkBQ8fvcBpWIBnRjkzrvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1GHo6V
4hbDPvsaGqPysCkylFhHMB8GA1UdIwQYMBaAFFBteA7ReXSA8VJRNH/ChEPXLpUH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUIwQy82MTM3NUI2QTIy
MkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJRHhVbEUwZjhLRVE5Y3Vs
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VHMTREdEY1ZElEeFVsRTBmOEtFUTljdWxRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RUIwQy82MTM3NUI2QTIyMkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJ
RHhVbEUwZjhLRVE5Y3VsUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAkK3rOUY5JX38kemN51kilm630VPbWDCjUUdXNxqAXZEWQ0I0o9Npm+kqIjj
CioPfE2pywwzIluMLU7jMbtMa5AzwT0bbeS1mO+jGJvjOuBNCS54boZJL5aOMqEh
WQHsCL9gPdA5NmUTk/WTez2OUUAXh/OpW5nYQ5fSjrVP09tuQJccxkKCs24N9EYL
tdE3IAafkExQ+cEK3xpDKFE9zXpuYDAXfcNPuiwJLZUYdlDspsE0YNPyH6IfT8yG
CCqt/Tn5HxISQZjgYwFA1O7qjprnWMLOnhRSZdsJy7vdhct428kO8Tbm47EbSGug
WwrhdXqd/TNeobIqki9hfnsdsg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 19:34:56 2026 by rpki-client