
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft
File: Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft (raw, json)
Hash identifier: zkbUTPZERiN0A82+nHEo7KQrynm3hR5pCt8FiVNxrag=
Subject key identifier: 8A:76:D7:2E:EB:62:74:D3:30:33:8A:C8:68:16:DA:B4:D6:C5:4A:1A
Authority key identifier: 52:5E:D5:31:69:81:A5:0B:DC:02:AC:5B:D3:C5:AF:D4:11:61:49:7F
Certificate issuer: /CN=A9159558/serialNumber=525ED5316981A50BDC02AC5BD3C5AFD41161497F
Certificate serial: 57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft
Manifest number: 56
Signing time: Sun 11 Oct 2026 08:50:35 +0000
Manifest this update: Sun 11 Oct 2026 08:50:35 +0000
Manifest next update: Sun 18 Oct 2026 08:50:35 +0000
Files and hashes: 1: Ul7VMWmBpQvcAqxb08Wv1BFhSX8.crl (hash: PAjRuBg3hkUXOL33m/QaqiDl5w+3jwKB4q2vNdFevxs=)
2: C8CE775E435C11F18454B6E5B6833773.roa (hash: plcT4dsgJqUos2P4lyFZDl4QJQLWQP6vKlNauLCZCuI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.crl
rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 08:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159558, serialNumber=525ED5316981A50BDC02AC5BD3C5AFD41161497F
Validity
Not Before: Oct 11 08:50:35 2026 GMT
Not After : Oct 18 08:50:35 2026 GMT
Subject: CN=6acb4ddb-9f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:8c:c8:31:34:1c:aa:bb:36:1e:b2:61:f1:
49:21:2a:73:2f:0b:27:d0:2b:42:28:58:1e:38:99:
1b:2a:d8:74:ac:95:db:32:c0:26:1f:b6:5e:af:e5:
46:59:20:2e:e7:43:15:0f:79:93:07:37:f5:0b:67:
f2:10:f2:ed:1b:49:18:55:fe:a5:29:64:4d:da:dc:
4d:c5:ed:b1:87:0d:70:ba:d0:00:47:12:a4:df:36:
2f:29:71:1b:30:3b:44:99:75:4e:f0:dd:fe:79:2a:
11:bb:22:c6:a0:2b:bb:80:5f:20:f0:76:16:3d:e0:
60:51:a9:fc:e5:19:ce:41:59:33:7f:4d:8b:3e:58:
aa:7f:ba:a7:b7:66:57:34:2d:dc:95:64:e9:2a:fd:
6c:ab:c0:e8:3f:24:77:d7:50:fd:6c:3d:75:a5:cd:
34:7c:bc:38:71:dc:c3:a8:94:51:61:1b:24:0e:e1:
ce:53:ff:f2:49:27:1e:56:62:5d:d4:17:d0:86:e3:
c7:05:ab:54:e2:61:c8:a3:f2:8d:c9:2d:fb:c7:aa:
90:80:b2:7f:d9:58:8b:b4:a9:db:62:4f:09:5d:a8:
98:da:af:e0:41:94:db:5a:5b:c7:be:9a:8c:0c:25:
f5:eb:80:67:2f:cb:1e:fb:f1:91:4d:16:95:bb:0c:
f8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:76:D7:2E:EB:62:74:D3:30:33:8A:C8:68:16:DA:B4:D6:C5:4A:1A
X509v3 Authority Key Identifier:
keyid:52:5E:D5:31:69:81:A5:0B:DC:02:AC:5B:D3:C5:AF:D4:11:61:49:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:cb:16:2d:ba:5f:d2:1c:90:24:df:aa:b0:73:47:27:2a:7d:
fe:48:df:b6:56:40:e9:09:f5:37:99:ef:ad:4d:99:fb:7d:74:
d1:8d:9e:f2:e5:97:28:8f:8c:41:d1:68:e2:08:45:f3:7b:7d:
7a:c5:f3:ea:44:94:3f:26:bd:9f:99:3a:71:b9:6d:06:25:ee:
ae:7c:3f:6f:93:1a:6d:fa:f7:ea:85:95:dc:9d:a0:f9:2d:29:
a9:3f:e0:f9:56:94:b1:27:c3:1f:2b:d3:bb:81:c2:46:0b:e0:
4f:a9:6c:dc:a5:22:df:ab:25:ad:21:a2:b3:10:4f:c0:26:33:
32:5b:1a:df:74:95:45:88:06:76:84:f4:bf:7b:89:0f:da:81:
82:d2:58:30:87:c3:d7:83:e9:f7:51:aa:ca:5b:72:e3:85:7d:
be:e1:3a:bc:ab:76:db:2c:0a:a2:8d:9e:6f:f6:5c:89:f9:a2:
40:64:30:93:3c:49:d3:cc:98:b4:fb:81:82:56:66:23:7c:39:
88:11:bd:a0:71:b9:d2:1c:57:38:34:da:88:80:ed:05:11:d5:
a7:bb:c2:e4:89:23:a0:28:0b:0a:c0:f4:f5:5e:78:cb:4d:64:
e4:0a:b8:0a:63:7b:03:91:47:b5:fb:f1:3c:6b:25:f5:35:d9:
7a:0b:92:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:21:26 2026 by rpki-client