
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft
File: U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft (raw, json)
Hash identifier: 0Sk16PmvYeviGGRjHh5KGBjq3Ql9Pd5VuNhAqPwkviA=
Subject key identifier: 52:F9:3A:2F:EB:21:3F:A7:DA:A9:36:0F:CB:97:F9:C9:DF:EA:C6:BF
Authority key identifier: 53:C0:8B:DA:04:BC:05:32:21:EB:27:3A:A2:15:CC:D9:5C:00:C3:92
Certificate issuer: /CN=A9187325/serialNumber=53C08BDA04BC053221EB273AA215CCD95C00C392
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft
Manifest number: 0162
Signing time: Sat 03 Oct 2026 05:46:11 +0000
Manifest this update: Sat 03 Oct 2026 05:46:10 +0000
Manifest next update: Sat 10 Oct 2026 05:46:10 +0000
Files and hashes: 1: U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl (hash: dXBDfqrOuZVdxYgYCBcOvOCZlpCJjn1cp+fsqBsdibM=)
2: 30BF0192D5B411F0BA49041CC4F9AE02.roa (hash: 7Xq/xrlaF1i6pCbhVMnZT3OZ5U9fhM3Ebdid2BeEwH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl
rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 05:46:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187325, serialNumber=53C08BDA04BC053221EB273AA215CCD95C00C392
Validity
Not Before: Oct 3 05:46:10 2026 GMT
Not After : Oct 10 05:46:10 2026 GMT
Subject: CN=6ac096a2-0491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8f:32:70:48:dc:a0:3a:e9:c1:94:28:b9:4a:
bc:38:74:dc:db:e1:e9:9c:72:44:35:92:1b:8a:06:
c1:e4:ae:95:e8:af:91:58:c2:d1:21:d3:73:4b:28:
16:a9:8e:42:5b:15:06:d5:da:7d:27:bb:5b:8d:09:
f5:bb:be:ba:df:b3:f3:ea:d2:53:c7:89:8f:fd:ca:
76:0f:06:4c:ca:24:94:ea:73:bc:2a:5a:2e:e1:3d:
94:95:5f:8e:a2:3e:c3:3f:06:01:76:87:e0:f2:b7:
5e:d4:4d:1c:82:bd:bd:0d:4e:9b:f7:6a:f7:36:ea:
f2:4d:4b:d2:1f:cd:09:db:40:d4:d1:25:2a:c0:15:
68:94:eb:80:ff:b6:6c:5e:e3:ea:d5:68:ae:6b:a3:
51:95:28:fc:f5:8a:e9:83:72:4a:f6:cc:4a:5f:e8:
5d:f6:0f:52:a8:41:2b:aa:eb:a3:57:74:79:1e:1d:
2a:e6:4a:27:65:5e:bf:87:27:5a:ee:2d:19:63:f7:
2d:0e:fa:6a:e5:93:ae:b3:6e:a7:21:c2:70:f9:ac:
73:1f:62:ac:21:b6:dc:5c:24:fc:67:15:51:43:51:
0b:aa:dc:34:57:3e:95:4e:5b:3c:38:4f:79:42:75:
ca:89:fe:62:7e:85:48:4a:11:ba:76:97:f8:80:91:
7e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F9:3A:2F:EB:21:3F:A7:DA:A9:36:0F:CB:97:F9:C9:DF:EA:C6:BF
X509v3 Authority Key Identifier:
keyid:53:C0:8B:DA:04:BC:05:32:21:EB:27:3A:A2:15:CC:D9:5C:00:C3:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fb:08:9a:7f:e4:5c:2e:64:e3:f0:b6:28:ff:f8:ba:51:35:
4a:7d:f9:71:2f:79:28:86:a7:b0:18:1a:e9:96:d5:59:4b:69:
7f:93:a4:20:01:79:de:da:bb:5c:6c:c8:64:32:5f:2b:b2:26:
ed:63:4d:fa:8a:28:f3:49:61:77:47:f4:c4:52:7c:2d:e0:f1:
b2:e0:b6:7f:43:56:71:16:e8:36:17:97:06:99:34:cc:3f:69:
3b:8c:cf:97:1e:73:91:e5:9c:f3:39:75:d7:b0:1b:98:20:bd:
5c:18:27:92:96:86:25:6b:9e:d9:18:82:3d:bf:c0:41:ee:88:
42:aa:e1:a7:53:92:95:dc:1e:4a:5d:bf:75:62:8e:05:e3:61:
e0:a7:0e:88:90:aa:3d:da:c3:15:a7:58:44:b8:45:29:de:3a:
8b:5b:34:2d:95:2f:22:1a:b3:11:03:19:6d:52:6d:71:02:9d:
f2:cb:10:a8:34:95:42:f8:a3:3f:24:08:84:f4:bb:6b:5a:26:
83:76:8e:4c:06:a5:2a:0a:d5:ad:00:e0:c5:23:54:c7:79:f2:
6d:52:c0:53:4a:7d:2a:a4:dc:fd:63:5c:62:e9:24:48:11:19:
fb:7c:9e:28:15:40:b1:e0:36:2d:aa:02:99:74:07:2d:93:1d:
1a:59:67:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:56:59 2026 by rpki-client