
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
File: 5ufguvNPIMPZye8md2gF84JGO4Y.mft (raw, json)
Hash identifier: wK0s9Y4EXj7PfUDyq/Bw6nURvfZDUS+YA3XKSzIYaYI=
Subject key identifier: 2E:CD:A7:74:DB:75:92:3C:D1:AB:65:83:50:AF:BB:F3:43:25:E8:2C
Authority key identifier: E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86
Certificate issuer: /CN=A9160BD2/serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86
Certificate serial: 076E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
Manifest number: 0766
Signing time: Tue 22 Sep 2026 21:25:39 +0000
Manifest this update: Tue 22 Sep 2026 21:25:38 +0000
Manifest next update: Tue 29 Sep 2026 21:25:38 +0000
Files and hashes: 1: 5ufguvNPIMPZye8md2gF84JGO4Y.crl (hash: ercMZr44XjoBVHSFXNKuvsCGtYDYSn+LpdRnpeT93AI=)
2: 159A3C967D7211EBA0A7FF60C4F9AE02.roa (hash: OEMpa1KlXpQKnwSOPbdVNFMo4hIhQv2n0cr4lbB8s+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl
rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1902 (0x76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160BD2, serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86
Validity
Not Before: Sep 22 21:25:38 2026 GMT
Not After : Sep 29 21:25:38 2026 GMT
Subject: CN=6ab2f253-60ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:df:2c:d7:21:bd:1f:43:25:c4:99:6c:b3:a8:
84:ff:a7:f3:38:da:5a:58:23:2a:92:6d:6a:fd:0d:
92:76:c8:8c:29:34:be:82:40:77:af:6d:90:74:58:
3c:5f:96:0e:ba:1c:24:bf:8a:fd:95:5f:ca:64:74:
4f:cf:2f:34:0e:48:d7:c6:e8:48:f5:d9:28:d2:81:
74:16:eb:85:8e:72:de:5b:c1:54:55:5d:20:6e:99:
50:ea:93:bb:fa:b1:c3:89:1a:27:8c:d5:45:bf:53:
af:b7:e7:a8:f4:a8:a1:b3:84:57:44:a5:8b:44:51:
49:cf:5e:26:ff:69:bc:9c:e3:43:57:79:f1:b6:0a:
b8:d5:1e:cf:f0:4d:f1:61:12:90:41:71:7f:ba:fd:
96:9e:d5:80:4e:6f:98:ce:7f:6c:f7:ac:bb:ac:6f:
9c:4f:52:ef:42:55:1a:50:95:f6:6b:ba:ab:6d:d5:
fa:bf:bc:7a:bd:63:2b:e5:14:ff:b7:aa:ce:05:a3:
16:0a:4e:43:5c:b3:e1:00:52:5b:a8:3a:c3:de:60:
21:b0:e3:e1:6c:40:fe:ec:75:96:70:c2:2d:0c:1f:
b5:6a:4a:5e:3b:b1:69:8f:67:54:dc:fa:b5:79:73:
1b:ba:d8:a0:53:29:36:53:b1:ba:f9:74:4f:0e:9f:
cd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CD:A7:74:DB:75:92:3C:D1:AB:65:83:50:AF:BB:F3:43:25:E8:2C
X509v3 Authority Key Identifier:
keyid:E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:55:38:b0:14:03:70:5a:68:18:21:24:ca:1f:a1:6d:9f:03:
4c:8e:e9:f9:6a:68:a5:b6:23:82:64:86:7b:fa:4b:f5:7d:9f:
f7:47:c7:1e:b7:dd:14:a1:7d:39:8e:26:59:be:db:36:4b:28:
b9:29:97:11:46:98:29:a7:17:cb:02:60:e7:e1:e0:51:58:a0:
9f:67:9b:2d:b4:48:7b:99:84:01:fb:e3:46:e4:45:4a:2d:9b:
15:38:ba:de:39:be:4c:08:f1:92:2e:ba:b8:b8:02:ec:7d:93:
b1:96:e8:25:ce:5b:02:e9:ef:3b:73:18:11:b0:eb:18:58:2f:
69:a5:56:58:5f:ac:35:92:ad:a2:96:54:b3:df:12:00:55:fb:
39:6e:35:b1:ca:1c:d7:33:27:dc:5b:d1:04:4e:8c:7f:c9:40:
c6:11:47:d4:40:a5:0c:6d:8e:94:b3:2d:93:5e:1e:03:30:5b:
c6:37:6a:1d:5a:69:83:b1:62:02:84:51:b8:fc:a8:bf:9a:7c:
2a:f6:69:ef:07:96:84:a7:51:17:28:01:ca:76:4d:71:61:ea:
b1:9b:4b:7d:34:bc:ea:f1:39:0a:2f:90:51:75:27:99:0b:4c:
33:fe:b4:5d:a9:ad:82:0f:20:5c:9d:13:1e:b3:a1:b4:37:bb:
53:87:c3:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBCRDIxMTAvBgNVBAUTKEU2RTdFMEJBRjM0RjIwQzNEOUM5RUYyNjc3NjgwNUYz
ODI0NjNCODYwHhcNMjYwOTIyMjEyNTM4WhcNMjYwOTI5MjEyNTM4WjAYMRYwFAYD
VQQDEw02YWIyZjI1My02MGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7d8s1yG9H0MlxJlss6iE/6fzONpaWCMqkm1q/Q2SdsiMKTS+gkB3r22QdFg8
X5YOuhwkv4r9lV/KZHRPzy80DkjXxuhI9dko0oF0FuuFjnLeW8FUVV0gbplQ6pO7
+rHDiRonjNVFv1Ovt+eo9Kihs4RXRKWLRFFJz14m/2m8nONDV3nxtgq41R7P8E3x
YRKQQXF/uv2WntWATm+Yzn9s96y7rG+cT1LvQlUaUJX2a7qrbdX6v7x6vWMr5RT/
t6rOBaMWCk5DXLPhAFJbqDrD3mAhsOPhbED+7HWWcMItDB+1akpeO7Fpj2dU3Pq1
eXMbutigUyk2U7G6+XRPDp/NLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC7Np3Tb
dZI80atlg1Cvu/NDJegsMB8GA1UdIwQYMBaAFObn4LrzTyDD2cnvJndoBfOCRjuG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJEMi9FN0U5MDQwMDdE
NkYxMUVCODYxMTExNDdDNEY5QUUwMi81dWZndXZOUElNUFp5ZThtZDJnRjg0SkdP
NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV1Zmd1dk5QSU1QWnllOG1kMmdGODRKR080WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEJEMi9FN0U5MDQwMDdENkYxMUVCODYxMTExNDdDNEY5QUUwMi81dWZndXZOUElN
UFp5ZThtZDJnRjg0SkdPNFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC1U4sBQDcFpoGCEkyh+hbZ8DTI7p+WpopbYjgmSGe/pL9X2f90fHHrfdFKF9
OY4mWb7bNksouSmXEUaYKacXywJg5+HgUVign2ebLbRIe5mEAfvjRuRFSi2bFTi6
3jm+TAjxki66uLgC7H2TsZboJc5bAunvO3MYEbDrGFgvaaVWWF+sNZKtopZUs98S
AFX7OW41scoc1zMn3FvRBE6Mf8lAxhFH1EClDG2OlLMtk14eAzBbxjdqHVppg7Fi
AoRRuPyov5p8KvZp7weWhKdRFygBynZNcWHqsZtLfTS86vE5Ci+QUXUnmQtMM/60
Xamtgg8gXJ0THrOhtDe7U4fDSA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:14:48 2026 by rpki-client