
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.mft
File: -UBKpSTUNX4MzGnH1A0-ZqLk5t8.mft (raw, json)
Hash identifier: 7H2l5ac9CL+n0/heHfQZH7A0rTCfN3aRl9KIYYxsSmY=
Subject key identifier: 44:E3:7F:08:21:2E:FE:9E:B6:94:59:47:FB:87:01:3E:59:6C:55:88
Authority key identifier: F9:40:4A:A5:24:D4:35:7E:0C:CC:69:C7:D4:0D:3E:66:A2:E4:E6:DF
Certificate issuer: /CN=A9170C53/serialNumber=F9404AA524D4357E0CCC69C7D40D3E66A2E4E6DF
Certificate serial: 0246
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.mft
Manifest number: 0242
Signing time: Thu 23 Jul 2026 03:17:18 +0000
Manifest this update: Thu 23 Jul 2026 03:17:18 +0000
Manifest next update: Thu 30 Jul 2026 03:17:18 +0000
Files and hashes: 1: -UBKpSTUNX4MzGnH1A0-ZqLk5t8.crl (hash: 8mYLxLrIrExDq4h5egnn3NGQRPEco9xv8x5XBvY1RPk=)
2: C3BB51160DAC11EFB00E6B16C4F9AE02.roa (hash: +cbg7WTVhCN77TjlGhzVzZ8b4DdK8TdFQRR1HQcoMJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.crl
rsync://rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170C53, serialNumber=F9404AA524D4357E0CCC69C7D40D3E66A2E4E6DF
Validity
Not Before: Jul 23 03:17:18 2026 GMT
Not After : Jul 30 03:17:18 2026 GMT
Subject: CN=6a6187be-b546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c0:dc:f1:88:c3:d8:33:d7:f0:f1:14:ad:06:
68:b9:4b:6b:39:96:18:88:93:bb:1e:12:a8:00:d3:
8d:5c:5d:86:c8:24:f4:23:3d:44:52:e4:04:cd:47:
d0:40:d4:8f:d1:22:87:c9:48:a5:1b:d7:4e:c0:d4:
86:d2:e1:c0:d8:b6:90:a5:f0:2d:66:74:da:d2:33:
f9:31:f0:ea:2c:61:0d:36:82:07:b4:e1:9c:c2:98:
d4:c7:22:8e:2a:c3:d9:0b:1b:7e:02:33:26:c7:a1:
cc:9f:e6:de:a5:40:e7:5e:f2:67:94:aa:7e:57:0e:
80:6e:b9:f8:13:15:9e:6c:d2:6f:ff:27:e2:2c:0d:
2c:0c:9f:7c:85:46:89:f1:ec:24:1e:ae:29:6c:81:
b5:32:b9:00:4c:05:5d:04:0d:13:c6:fa:e1:5d:a1:
05:e3:94:1d:a2:fb:c2:72:ea:c5:6b:6d:16:97:c7:
2c:02:20:97:de:87:eb:c2:d4:6c:bf:a4:c1:2a:36:
aa:8e:ff:d8:48:bc:3b:97:c6:7d:b5:4a:b3:f1:e1:
fe:e9:3f:32:8a:75:46:bb:41:0e:f6:74:61:fa:21:
8e:57:c8:bb:e6:3f:90:d7:a4:c4:b8:62:85:a7:8c:
12:f0:71:c1:7c:cb:13:80:59:55:28:70:71:c7:94:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E3:7F:08:21:2E:FE:9E:B6:94:59:47:FB:87:01:3E:59:6C:55:88
X509v3 Authority Key Identifier:
keyid:F9:40:4A:A5:24:D4:35:7E:0C:CC:69:C7:D4:0D:3E:66:A2:E4:E6:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:9c:3b:f4:5c:04:1d:f8:89:49:03:43:ea:af:b7:a2:7e:51:
0c:0f:c6:6a:94:43:72:19:1a:10:db:bb:b2:65:ba:6e:87:e2:
6e:4d:71:34:05:4c:7d:bf:cc:7d:21:24:8a:1a:d4:83:59:95:
9c:60:84:47:b1:92:47:07:5d:84:af:96:b7:7f:32:77:45:57:
0e:23:be:d6:eb:b6:dc:49:6c:3b:e8:e2:b0:b5:b2:52:fb:1f:
58:81:3e:18:77:6d:dc:05:ba:1d:56:3f:2a:90:e2:24:a8:f1:
94:7e:31:e4:f5:f9:68:bd:18:c2:49:11:2e:d9:3a:4e:d0:8e:
ae:83:97:bb:be:bb:24:55:c6:40:df:fe:7f:00:32:f6:d6:05:
b4:64:f1:f1:5b:e3:46:3f:d9:bb:fd:00:bd:f5:0d:2c:d7:5c:
5e:3e:ae:b8:7a:3c:fd:a7:88:29:b6:ca:41:c8:c1:e5:f6:c7:
11:be:2e:64:be:6c:c7:50:33:45:eb:4d:7d:5d:1d:6f:05:60:
1b:66:a7:80:ff:f7:97:3d:21:16:b1:a7:4e:54:17:46:f7:65:
99:7c:14:03:ab:ca:6b:e2:e8:35:05:07:e0:7d:ec:85:ad:93:
b9:b9:78:b5:61:98:da:e4:c8:e9:39:11:0b:d4:fa:77:a6:43:
f4:70:e7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:52:24 2026 by rpki-client