
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
File: UN4cYHM-ori3boQDYJGOHyXEbkM.mft (raw, json)
Hash identifier: aJqDMKjPWO3dnx3MjZXrgM2o91IJ53QtF084Y7T4Fw8=
Subject key identifier: BC:BD:79:96:D6:30:14:EE:6A:13:61:94:55:9B:CA:05:E0:A0:0E:FC
Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
Certificate issuer: /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Certificate serial: 0CFF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
Manifest number: 0CE4
Signing time: Sat 26 Sep 2026 18:34:59 +0000
Manifest this update: Sat 26 Sep 2026 18:34:59 +0000
Manifest next update: Sat 03 Oct 2026 18:34:59 +0000
Files and hashes: 1: UN4cYHM-ori3boQDYJGOHyXEbkM.crl (hash: IWD1vs5qrhghwRuK4DPjxU6yeSgK120ea/C7DuhJCAQ=)
2: FNdaP_tlvzdOkRkygoSbG2qvE4Q.asa (hash: HtM4cT1n0OKEJjnde1/o9+CymoCiMyNjl/BcEhdS6xk=)
3: 46C5452E0DD711EF85707821C4F9AE02.roa (hash: eIKcx/tRIBK3MeiC+4l3jtKDacHvx/6DmpdUtabZ10s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3327 (0xcff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Validity
Not Before: Sep 26 18:34:59 2026 GMT
Not After : Oct 3 18:34:59 2026 GMT
Subject: CN=6ab81053-1953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6b:23:d5:83:03:3f:f0:b8:ed:ce:95:b6:be:
73:cc:24:1d:3d:2d:c0:0b:d0:d7:4e:6a:28:95:8d:
59:96:b5:e1:2c:7e:c5:0e:bf:0f:bf:7b:9b:ca:2b:
0f:f9:34:13:c2:dc:2c:95:75:d1:9b:c5:fd:ef:4f:
8f:b5:ce:6f:46:0c:38:06:43:aa:23:0f:ab:9c:d3:
c0:85:35:c8:66:43:8b:b9:99:59:ea:d7:23:dc:8f:
0b:19:6c:4b:0d:ca:6d:fc:08:51:2e:35:5d:3a:cd:
07:50:9a:ba:38:f7:61:09:b8:ab:f6:20:69:75:7f:
2e:7a:eb:73:99:2c:a0:6f:8b:c3:a7:55:98:14:84:
1f:eb:b4:b5:1d:95:2e:9e:9c:66:75:ff:72:8d:ca:
92:92:70:c5:97:45:22:f2:15:36:6a:a1:1e:2d:88:
c3:07:9f:46:8b:c0:57:8f:5b:01:e8:66:a6:d8:1c:
0e:9e:0f:bd:c4:e5:22:09:08:87:51:85:52:90:7b:
de:4b:cc:db:39:3b:5b:cf:35:15:6c:53:fb:df:66:
a0:d4:5e:bd:c8:3d:56:3c:c2:e2:6a:f4:33:25:d3:
14:e6:70:cd:22:9a:64:92:24:bc:1d:2a:3c:54:8a:
43:01:60:93:81:17:f5:f3:88:d4:0d:7f:65:5e:53:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BD:79:96:D6:30:14:EE:6A:13:61:94:55:9B:CA:05:E0:A0:0E:FC
X509v3 Authority Key Identifier:
keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:f0:28:d9:70:2c:5e:27:e9:c3:f8:9a:e4:29:88:84:02:45:
2f:25:53:57:26:1f:56:1e:32:92:bf:01:5d:4d:14:bc:35:a2:
72:a1:42:7d:0e:87:8b:cc:94:91:fb:4a:82:74:fb:e9:8c:81:
63:94:55:af:72:df:c4:39:a0:4a:51:d1:0b:b5:59:9c:b3:d5:
07:61:60:6d:63:14:6a:5b:28:df:61:ba:57:69:9c:2f:41:a0:
c5:46:16:86:83:ad:2f:26:7d:3c:f5:8c:7c:ce:c2:08:bc:d7:
ce:0e:15:d4:88:da:6c:f3:58:5f:9f:3e:e8:2d:00:ff:f7:5a:
fd:ff:d9:58:8f:a1:de:dc:d7:ee:55:b8:88:db:ab:f5:29:13:
6a:95:cf:19:e4:a4:95:1e:9a:54:90:c6:79:40:0f:17:33:a9:
f9:c7:c6:28:4b:4e:e8:96:08:a9:93:7a:d9:5f:26:ef:ae:d5:
0b:0b:c9:07:64:2a:ad:58:d5:84:86:84:44:21:70:3f:e2:9e:
1f:1e:08:ac:c2:6d:1e:44:2e:27:1d:22:0f:b6:6e:4a:90:ba:
54:a7:03:78:8a:c9:5f:44:96:1c:27:5e:11:0d:cb:77:a4:e5:
07:56:28:a6:66:55:8b:df:ff:45:cb:01:5e:da:25:cc:7f:e0:
e2:ab:35:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:57:18 2026 by rpki-client