
$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
File: UN4cYHM-ori3boQDYJGOHyXEbkM.mft (raw, json)
Hash identifier: qG/aqC+okwOXcindseoojDQcojpQ/qVkcaVUQqyys3s=
Subject key identifier: 25:AB:21:93:83:2F:F2:BA:BC:98:44:43:E8:5A:05:91:DB:1B:FB:61
Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
Certificate issuer: /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Certificate serial: 0CB3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
Manifest number: 0C9B
Signing time: Tue 12 May 2026 18:38:56 +0000
Manifest this update: Tue 12 May 2026 18:38:56 +0000
Manifest next update: Tue 19 May 2026 18:38:56 +0000
Files and hashes: 1: UN4cYHM-ori3boQDYJGOHyXEbkM.crl (hash: o0WkqI/b+Y5u6WIQ5VlnEdkD3JlBH3W/gMkjPd0NUyY=)
2: 46C5452E0DD711EF85707821C4F9AE02.roa (hash: VXncP0PhzyqKm2QEziAfAuVtMG/akEU8trZDQTOKPw8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3251 (0xcb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Validity
Not Before: May 12 18:38:56 2026 GMT
Not After : May 19 18:38:56 2026 GMT
Subject: CN=6a0373c0-5e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:2e:dc:6c:35:b4:1f:30:fb:c3:96:73:f2:
24:61:c7:29:3e:31:d0:35:95:d8:40:41:3a:38:a7:
9b:c0:0d:8c:27:94:0d:ae:7c:b7:42:ca:49:82:92:
ab:c3:64:b7:4f:fa:c5:2e:a0:ad:6c:6b:e1:79:ee:
69:90:6c:25:e1:22:04:20:72:d1:b5:89:58:4b:c6:
d9:f2:9f:fa:1a:b5:e6:99:28:6c:fc:99:8e:9f:df:
79:c4:96:b1:e6:59:7d:af:18:22:9e:e9:e3:b1:52:
f8:2f:aa:71:78:e8:bd:dd:7b:ec:40:25:fb:69:e2:
4a:1c:1f:29:7a:10:b3:5b:71:ac:96:99:a3:48:93:
94:b4:8a:0d:32:37:3d:c9:ff:14:b6:5f:08:7b:59:
ff:c6:6f:74:85:9f:3d:9c:62:e4:bf:55:29:50:80:
c3:62:d9:07:3a:d9:cd:f9:ae:d1:23:02:a5:c1:93:
14:5b:dc:a8:f7:bb:2d:45:70:1d:8b:7a:4e:17:54:
7c:4b:da:97:28:c8:6b:d9:ba:ad:96:ba:1f:ee:9c:
80:63:49:6e:e7:c4:a4:d8:2f:dc:5e:3d:e0:0f:ef:
99:21:62:34:da:d0:47:01:69:96:36:59:0d:e6:83:
6a:6f:e7:a4:fb:7a:a5:67:40:5c:4e:cc:aa:32:44:
b4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AB:21:93:83:2F:F2:BA:BC:98:44:43:E8:5A:05:91:DB:1B:FB:61
X509v3 Authority Key Identifier:
keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:52:78:cd:58:b5:41:23:c6:dd:fe:80:da:27:7a:b7:4e:9a:
77:63:81:2d:dc:e4:ba:65:3e:40:80:78:ff:98:e1:68:94:14:
50:0e:cc:f8:da:ca:ff:e5:ec:5d:7f:bc:d9:40:81:d7:9b:20:
2a:ec:4b:59:8a:4e:02:27:d4:d3:cd:7d:fb:25:93:a6:02:2b:
ae:49:85:99:bf:7d:79:66:48:f3:b9:f3:26:2f:d9:72:c2:86:
9b:a8:95:43:c5:54:8d:f1:31:12:da:e4:25:92:29:13:9a:fd:
88:44:e8:30:a4:98:df:4c:21:25:3d:47:51:26:9c:1b:f2:fd:
3b:93:66:13:bf:31:53:d6:ad:0f:ab:b1:b0:67:fa:bf:7f:8c:
cc:13:ad:1c:76:55:50:2d:28:89:57:e5:d5:e0:a9:2c:90:c8:
38:88:12:88:f9:14:9e:de:ca:56:45:bd:1a:91:44:6e:15:41:
84:98:ab:39:05:72:20:f1:b3:32:e5:cc:ab:86:6f:d5:de:86:
38:66:54:b2:64:8f:66:c0:b1:fa:62:6f:dd:f9:e0:01:b3:9d:
05:90:d8:44:47:4d:54:81:04:c1:4b:c2:c7:56:c6:d9:a3:f0:
3c:36:25:8e:c6:97:f3:45:d9:07:3d:8d:0a:b7:c5:5b:0f:5a:
bd:19:11:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:34:35 2026 by rpki-client