
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
File: UDJy2j7wq-3pU5x-JDobhoaxYfs.mft (raw, json)
Hash identifier: le5aOwsMucROmx+r7wI6Nuj8BXGgAiNMzaEl+EFOj/4=
Subject key identifier: 83:94:5C:66:E2:A2:85:B2:7A:44:EB:A3:59:48:25:6A:44:33:1D:4C
Authority key identifier: 50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB
Certificate issuer: /CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
Certificate serial: 01F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
Manifest number: 01D8
Signing time: Wed 23 Sep 2026 03:29:22 +0000
Manifest this update: Wed 23 Sep 2026 03:29:21 +0000
Manifest next update: Wed 30 Sep 2026 03:29:21 +0000
Files and hashes: 1: UDJy2j7wq-3pU5x-JDobhoaxYfs.crl (hash: t3D3mqWFDC3ou4Ky/ifaa6zmyjIXOBo0maDnYze3RqM=)
2: C32999EE391F11EFBFAB6D66C4F9AE02.roa (hash: NwgLsmJQFQZ7JnzcAe2b4izRbdQW8izgpQyoJV+sBCM=)
3: C3A77BE8391F11EFBFAB6D66C4F9AE02.roa (hash: wuFURizk5QLGwFsHMNFlb2bZylsK126zQn7tqbHxnKQ=)
4: DADBB0C033A411EF8E99B625C4F9AE02.roa (hash: CQPM9/Fl6ZbXuauzzpWSYxQSwy70daOMtjNk9KjElnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl
rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496 (0x1f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146906, serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
Validity
Not Before: Sep 23 03:29:21 2026 GMT
Not After : Sep 30 03:29:21 2026 GMT
Subject: CN=6ab34792-115d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:40:9c:f6:eb:a4:16:56:ee:45:d4:04:6f:
8f:23:ac:d5:9c:21:f2:12:0c:ed:5e:83:96:c9:3d:
43:26:cb:d6:80:fa:cb:1c:10:25:89:ba:e9:5f:a7:
3a:e5:14:76:15:8e:9f:97:54:96:92:f9:b9:23:6a:
71:11:96:ca:a6:65:cc:86:7e:71:73:ae:58:b7:62:
b1:fe:9e:c5:d3:93:d5:de:e7:9f:f1:fd:cb:5d:5b:
a9:8d:eb:03:c3:22:96:02:df:85:d3:ac:07:7f:d0:
05:dc:1a:b0:17:cb:2f:95:83:fe:b7:8b:d9:e9:78:
7d:67:d5:30:07:56:11:a1:35:b9:41:07:f9:75:51:
f1:68:c4:b5:be:fd:8a:be:82:0e:3b:f3:6e:5d:d7:
99:61:3f:88:8d:cd:68:e3:58:33:a7:19:46:75:72:
db:81:2f:72:c7:c5:ea:ee:ae:94:7b:85:95:63:06:
2e:1e:bb:24:60:8d:e6:45:c7:5d:8f:e3:a4:11:b0:
c6:5f:f7:89:16:6c:40:eb:27:4d:5e:2f:5c:28:bf:
d3:42:76:de:6e:0b:b3:1e:4c:a9:21:e7:09:bb:3f:
e4:b9:29:52:dc:7b:a3:69:9a:04:5c:3a:88:27:9b:
5e:b8:dd:e7:83:eb:a8:8e:89:13:50:7e:f1:d0:e3:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:94:5C:66:E2:A2:85:B2:7A:44:EB:A3:59:48:25:6A:44:33:1D:4C
X509v3 Authority Key Identifier:
keyid:50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:66:f0:1b:53:3c:2f:49:21:85:25:da:ed:90:54:b1:b9:e5:
27:32:c9:f0:a7:01:66:c1:25:96:41:dd:fd:31:ff:4a:16:2e:
39:ea:88:5f:76:5c:af:d3:3e:d5:cf:b8:c3:15:7c:81:ba:5d:
35:95:b5:30:54:45:f0:8d:a4:49:43:b1:35:cc:bb:9f:b5:74:
bf:48:7e:75:b9:d0:a1:28:b2:12:63:8d:04:a3:1f:67:a4:54:
59:4d:e9:f9:61:54:f1:80:b1:e6:e7:3e:2e:71:35:0e:dc:be:
dd:fc:cd:80:87:9c:84:fa:8e:3a:af:62:f6:96:48:cf:62:b5:
cd:fe:4c:5f:17:8a:0b:4d:0f:46:f0:4d:c8:c3:4e:a5:c0:e3:
6c:fc:cd:59:02:78:3e:39:7f:bc:9d:67:5b:27:3b:51:c3:0e:
8a:48:7d:6a:f2:1a:ff:97:4d:66:18:ee:4f:67:42:a5:d3:37:
f8:b0:90:c7:f5:71:9f:7a:48:e0:20:74:ce:b6:17:76:e3:bc:
62:5e:11:a3:2b:bd:55:42:3b:d1:c7:19:11:ae:9d:3b:51:7d:
40:8c:0a:c6:54:32:4e:1f:02:4c:2f:3c:10:28:2e:63:15:ba:
6f:1c:b8:95:40:4e:4d:d9:36:a2:94:e4:75:6f:39:fe:68:a9:
e0:18:a6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:59:30 2026 by rpki-client