
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
File: UDJy2j7wq-3pU5x-JDobhoaxYfs.mft (raw, json)
Hash identifier: AcH9CNEZoAt+3DKvgX5DbU9FkEgiNsWqAoyxZYZqaZw=
Subject key identifier: 4D:D3:D4:BA:2A:A6:14:6D:F6:78:64:69:F3:08:8B:F1:A5:E9:62:FC
Authority key identifier: 50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB
Certificate issuer: /CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
Certificate serial: 01A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
Manifest number: 0192
Signing time: Mon 11 May 2026 04:25:57 +0000
Manifest this update: Mon 11 May 2026 04:25:56 +0000
Manifest next update: Mon 18 May 2026 04:25:56 +0000
Files and hashes: 1: UDJy2j7wq-3pU5x-JDobhoaxYfs.crl (hash: xwVnYdaMy9JWvz9Tp/iorjohph07TZzBsB8c4dFVQsg=)
2: DADBB0C033A411EF8E99B625C4F9AE02.roa (hash: uj7aSF5U3lrEwAf5AMXaMNocSkTapCA+NNk0S8T44wI=)
3: C3A77BE8391F11EFBFAB6D66C4F9AE02.roa (hash: xag7piZxRalbVehikGhY7Y5TfIzZyOjEtv8ww1qYwCA=)
4: C32999EE391F11EFBFAB6D66C4F9AE02.roa (hash: M4sCC9h+jOw1aprcitO1VbFmajV+N+fzu/Vlxn3AA6E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl
rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:25:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146906, serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
Validity
Not Before: May 11 04:25:56 2026 GMT
Not After : May 18 04:25:56 2026 GMT
Subject: CN=6a015a54-dd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:8c:29:a8:22:93:99:60:4f:76:bc:dc:df:
a6:b3:27:07:48:c2:90:72:cd:17:74:95:84:3d:c1:
8f:2e:b6:0d:8e:bf:26:73:08:f6:a7:bc:2c:b8:98:
22:a5:f3:66:67:31:83:cd:3f:da:d7:7f:0d:9f:e6:
b3:7f:18:73:73:8e:32:11:58:2e:9b:8e:18:4b:5e:
dc:89:c1:f9:4a:69:9d:01:92:89:8e:6a:11:29:cc:
3d:50:37:42:68:03:1c:e5:6c:b2:7f:0a:5b:97:75:
6c:86:bc:fa:6b:84:e8:c8:1f:9c:1b:4b:71:32:66:
28:57:83:f3:e8:dd:06:f6:a2:de:dd:f1:f3:d6:93:
2a:c4:95:ca:a7:96:d1:c1:3d:19:c4:df:ac:59:c0:
63:39:c8:32:7b:75:05:df:30:e4:29:93:20:c1:35:
81:d4:18:5d:d8:9b:b5:0d:e4:d7:e5:44:95:ca:06:
5c:8b:2b:55:da:07:18:31:d7:bc:7d:ab:c3:92:24:
60:eb:58:16:17:b8:9c:ee:06:84:77:33:55:0d:10:
23:75:0c:54:f8:cd:e6:8f:d5:59:37:36:03:73:48:
ce:17:60:7d:02:10:ce:b8:b5:57:4d:8b:c2:cb:26:
12:ce:a7:22:01:44:be:49:58:45:be:fc:cc:72:28:
70:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D3:D4:BA:2A:A6:14:6D:F6:78:64:69:F3:08:8B:F1:A5:E9:62:FC
X509v3 Authority Key Identifier:
keyid:50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:49:1d:33:4a:cb:e7:a2:00:b0:ad:ba:3a:8a:77:9b:5b:4f:
0d:35:8a:83:45:8a:69:4d:47:41:e7:27:fe:87:39:91:e1:ea:
d1:56:a5:87:c5:34:4c:bf:5b:e5:89:e5:39:b7:6f:81:fc:ef:
11:7e:6b:8e:03:30:50:b7:38:c8:3e:51:34:fb:60:a7:34:e7:
d2:37:03:bf:88:34:71:b4:3d:d3:5e:98:b1:5e:f7:52:bb:23:
8b:a6:3d:33:11:0d:96:b5:6d:a4:54:4a:d4:0d:49:48:19:f3:
16:b6:d9:c7:a0:52:6c:77:4a:b0:61:d4:c3:6c:8e:12:e6:3b:
66:50:a9:65:5e:25:38:c1:a6:c1:c1:59:0e:c0:7b:e9:97:22:
96:1a:4b:b8:94:94:18:a6:1e:bb:f7:09:e9:42:ae:ac:9d:0e:
78:d9:72:66:f6:9f:c2:9b:f6:b5:19:67:c5:9f:a5:eb:91:ec:
0c:ae:82:c6:33:37:23:a5:64:51:53:53:48:25:3b:34:75:d8:
5f:b0:97:3b:b9:2d:48:75:5f:c8:f4:8c:92:21:80:9b:e1:00:
41:40:20:fd:0b:5b:85:7f:ae:5a:e8:59:ee:70:8d:96:38:73:
f1:61:af:e9:86:00:8a:92:09:48:3e:dd:88:01:2f:b0:52:8c:
1e:bc:fd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:03:54 2026 by rpki-client