
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.mft
File: UYdFx6LySigtdUZZUC_WYh3HYYQ.mft (raw, json)
Hash identifier: 7rM03YDwrpU9gG1iA9QKMl3QitdIt/1+4RRoZ2gx74s=
Subject key identifier: D9:C4:5A:C9:47:C6:BE:A8:54:48:F6:F9:7D:BD:94:DD:78:08:C1:A3
Authority key identifier: 51:87:45:C7:A2:F2:4A:28:2D:75:46:59:50:2F:D6:62:1D:C7:61:84
Certificate issuer: /CN=A915FE2E/serialNumber=518745C7A2F24A282D754659502FD6621DC76184
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UYdFx6LySigtdUZZUC_WYh3HYYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.mft
Manifest number: 16
Signing time: Thu 01 Oct 2026 10:28:57 +0000
Manifest this update: Thu 01 Oct 2026 10:28:56 +0000
Manifest next update: Thu 08 Oct 2026 10:28:56 +0000
Files and hashes: 1: UYdFx6LySigtdUZZUC_WYh3HYYQ.crl (hash: QnGXjwenYxWY3+c8htby2HmGZdh0aTgNTmK8DH5A8l4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.crl
rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UYdFx6LySigtdUZZUC_WYh3HYYQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 10:28:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FE2E, serialNumber=518745C7A2F24A282D754659502FD6621DC76184
Validity
Not Before: Oct 1 10:28:56 2026 GMT
Not After : Oct 8 10:28:56 2026 GMT
Subject: CN=6abe35e8-9e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:97:f9:59:ef:c4:76:22:f8:09:6c:e0:35:d9:
18:1c:31:62:62:59:e4:c9:1b:f1:49:15:ac:8c:36:
07:49:81:02:95:76:81:8e:5e:08:52:88:9e:fc:4b:
f0:9f:c4:1b:2d:4c:70:7f:c5:50:42:18:36:ea:c5:
08:57:cf:67:0f:00:5e:c0:3f:d9:6f:77:a4:7c:e5:
d9:de:4a:9b:d6:3a:bd:ec:c9:b9:9b:98:48:17:49:
83:a2:07:36:9c:87:85:fe:a9:b1:8a:6e:40:41:af:
cc:58:07:b8:4a:da:d5:b6:d5:3f:02:fa:9b:9e:5b:
39:ae:1f:11:cb:1f:54:cc:ae:e4:f7:d0:37:22:db:
6a:0f:79:01:b1:5a:e3:32:c3:cb:f8:bc:6c:1c:a7:
07:05:48:3a:76:af:06:23:ac:eb:7c:cb:c7:7d:e1:
ce:36:bb:9b:c4:79:a9:39:6c:1a:94:fa:8b:79:3b:
69:6d:81:78:e2:82:9e:df:f0:7c:1c:65:35:38:69:
89:e4:1a:e3:41:3b:ff:0d:b5:ea:32:5f:52:80:48:
77:47:2d:89:99:3a:60:e9:2b:2d:92:e6:4e:15:d0:
b4:eb:45:9e:2b:ce:e6:84:05:df:75:c5:41:da:79:
f0:a0:06:de:a5:85:43:2d:a0:70:1a:54:ed:2a:0b:
6d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C4:5A:C9:47:C6:BE:A8:54:48:F6:F9:7D:BD:94:DD:78:08:C1:A3
X509v3 Authority Key Identifier:
keyid:51:87:45:C7:A2:F2:4A:28:2D:75:46:59:50:2F:D6:62:1D:C7:61:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UYdFx6LySigtdUZZUC_WYh3HYYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:c0:03:84:e9:b3:ac:a0:36:ef:62:69:48:47:bb:5d:f9:82:
fe:e1:46:df:0a:73:a7:86:ec:b3:4b:37:de:6b:98:b8:07:3f:
51:ed:93:e8:a4:90:43:d3:89:46:b4:e0:60:73:23:98:aa:77:
90:6e:f3:0c:d3:50:9f:5f:c1:8e:bb:ab:5d:b2:77:73:d5:7c:
e6:99:62:b1:c0:2e:99:b4:11:39:3b:ad:79:ca:01:1a:e1:f7:
4f:8b:e1:d9:f4:04:17:76:7c:88:ee:63:a5:6e:98:6e:1b:a3:
ce:73:a5:ad:12:52:e8:f3:32:fa:87:7d:7b:5f:2f:c8:7f:fc:
cb:0c:31:80:9f:c8:c9:e3:85:b9:98:0d:eb:3f:20:fa:cd:7a:
08:26:d0:2e:4b:8b:fc:07:28:dc:b1:ca:18:fd:61:45:a0:fe:
65:27:bd:9c:ff:49:d8:b9:b5:e6:b1:3e:5b:d3:db:ea:d3:96:
11:59:82:cf:02:cd:07:07:b5:8b:9c:6d:46:9a:a5:91:74:5c:
82:84:65:5f:c0:ab:3b:79:21:42:58:b7:7b:f3:d4:88:02:11:
7d:11:d5:7e:4e:84:c5:22:01:69:c4:87:49:bd:2b:6e:e8:12:
1b:f3:ad:95:f0:30:cb:1f:9a:be:9c:e7:fa:09:d2:98:00:16:
4c:3d:08:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:46:47 2026 by rpki-client