
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
File: S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json)
Hash identifier: wuxPpm8slLKybg9y/wnS1gw8YEIgmC16fcoKiTWiCwU=
Subject key identifier: DD:35:E2:E6:A6:C6:E5:72:65:A0:3A:9D:BE:7F:45:7A:7A:69:25:A1
Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA
Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
Certificate serial: 01CC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
Manifest number: 01BE
Signing time: Wed 13 May 2026 04:01:07 +0000
Manifest this update: Wed 13 May 2026 04:01:06 +0000
Manifest next update: Wed 20 May 2026 04:01:06 +0000
Files and hashes: 1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: SwpDF+Du0Cybp1SiXxMwUA2KByI9VXv0qdm2C8OFwoo=)
2: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: QKv7DuW7py1p1eN4Lvl//mFlbdahxq73NkUDVPwAcGE=)
3: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: qPfNRqtUl8ZoRHAU3x9Cq02LILBulhmFpAHU6RhUKSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl
rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
Validity
Not Before: May 13 04:01:06 2026 GMT
Not After : May 20 04:01:06 2026 GMT
Subject: CN=6a03f782-6869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:e6:1c:bb:14:74:46:3c:7f:d5:ea:a3:70:
7a:cd:fa:9f:74:42:ed:5f:0c:7c:62:20:d1:a9:d3:
f7:12:d0:59:fa:fe:b9:68:73:14:f0:b2:bf:9f:34:
97:88:20:dc:5d:9a:d8:03:5b:1f:e6:5a:92:fe:1a:
8f:23:a1:1a:03:f1:b4:53:10:c1:ca:a9:c4:26:f6:
b1:fe:44:a5:e2:60:73:da:aa:3b:15:cf:65:ab:5a:
c9:cb:96:4a:6c:5d:33:42:77:55:79:b6:b4:c7:cb:
e5:00:b5:60:fa:4d:3c:ef:3b:34:37:61:18:a8:9a:
20:5d:b9:0d:ce:0b:f3:77:e0:8a:63:19:5b:96:1a:
8a:95:d9:39:e9:ee:f9:a1:b3:3c:53:4e:3b:47:d2:
1d:35:f2:ae:d1:cd:b3:8e:0e:8f:46:94:56:a7:f0:
c2:02:f9:f3:40:9a:ed:ef:d6:56:a3:aa:c2:12:81:
75:b6:a1:7b:db:7f:d7:14:a5:42:d4:15:da:da:d5:
69:f6:e6:eb:89:f2:31:8f:69:82:81:8e:69:4b:a4:
ea:a1:7d:cc:ce:38:e8:ce:bf:7b:59:b4:c8:05:1e:
a4:bc:bc:e1:3c:3b:da:8b:e2:18:43:50:7c:85:12:
9d:11:b9:c7:5b:82:4a:3e:1f:58:76:49:5b:5c:a6:
3c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:35:E2:E6:A6:C6:E5:72:65:A0:3A:9D:BE:7F:45:7A:7A:69:25:A1
X509v3 Authority Key Identifier:
keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:78:54:bd:1f:bf:9d:1d:47:bf:5a:00:da:76:28:97:e9:37:
d2:c0:3d:43:a1:72:0e:b8:a2:8b:bf:a1:57:81:b5:bf:28:50:
14:1b:61:9d:19:a8:e7:ac:7e:b3:8b:74:05:da:37:1a:ff:8f:
2b:cb:d5:57:0b:81:18:a4:5b:bb:c5:6b:f9:4e:3d:31:c0:c8:
34:54:48:c5:73:00:84:41:22:0b:cd:bb:69:1f:12:dd:c8:e8:
3c:c2:c6:3d:92:b8:2e:85:42:0b:eb:df:ef:0e:5e:5a:47:1d:
4b:c6:cf:24:2a:75:7a:8f:a6:82:18:7b:b8:fd:a1:13:5c:20:
1c:b4:2a:58:a8:29:fd:ff:df:de:4e:7e:b8:28:22:2e:0c:7c:
55:5b:27:ee:95:b6:db:71:66:c4:83:40:5d:a5:57:af:06:8e:
5f:22:03:e3:99:3e:f4:db:45:fd:5b:ba:d6:30:8f:ad:04:e6:
10:e3:7d:28:e7:16:24:de:be:a6:5c:62:b4:82:85:bd:59:f5:
58:10:67:22:f6:51:8c:6c:6b:d9:3f:eb:28:d5:8c:19:0c:29:
21:4f:74:e5:5c:d3:dd:de:42:63:4a:de:0d:4e:a6:80:0a:df:
c4:53:e1:09:e8:e0:88:11:e5:a1:ea:e5:e4:45:43:08:0d:e9:
5c:1f:24:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJCRDMxMTAvBgNVBAUTKDRCRTUwNjhCMzdCMTYzMjUzMEZGNTIyMzg2RTdCN0ZC
MDE4OEU5RUEwHhcNMjYwNTEzMDQwMTA2WhcNMjYwNTIwMDQwMTA2WjAYMRYwFAYD
VQQDEw02YTAzZjc4Mi02ODY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyAvmHLsUdEY8f9Xqo3B6zfqfdELtXwx8YiDRqdP3EtBZ+v65aHMU8LK/nzSX
iCDcXZrYA1sf5lqS/hqPI6EaA/G0UxDByqnEJvax/kSl4mBz2qo7Fc9lq1rJy5ZK
bF0zQndVeba0x8vlALVg+k087zs0N2EYqJogXbkNzgvzd+CKYxlblhqKldk56e75
obM8U047R9IdNfKu0c2zjg6PRpRWp/DCAvnzQJrt79ZWo6rCEoF1tqF723/XFKVC
1BXa2tVp9ubrifIxj2mCgY5pS6TqoX3Mzjjozr97WbTIBR6kvLzhPDvai+IYQ1B8
hRKdEbnHW4JKPh9YdklbXKY8EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN014uam
xuVyZaA6nb5/RXp6aSWhMB8GA1UdIwQYMBaAFEvlBos3sWMlMP9SI4bnt/sBiOnq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy9FODBGMTM3Q0I5
OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5VXdfMUlqaHVlMy13R0k2
ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1MtVUdpemV4WXlVd18xSWpodWUzLXdHSTZlby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkJEMy9FODBGMTM3Q0I5OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5
VXdfMUlqaHVlMy13R0k2ZW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf3hUvR+/nR1Hv1oA2nYol+k30sA9Q6FyDriii7+hV4G1vyhQFBthnRmo56x+
s4t0Bdo3Gv+PK8vVVwuBGKRbu8Vr+U49McDINFRIxXMAhEEiC827aR8S3cjoPMLG
PZK4LoVCC+vf7w5eWkcdS8bPJCp1eo+mghh7uP2hE1wgHLQqWKgp/f/f3k5+uCgi
Lgx8VVsn7pW223FmxINAXaVXrwaOXyID45k+9NtF/Vu61jCPrQTmEON9KOcWJN6+
plxitIKFvVn1WBBnIvZRjGxr2T/rKNWMGQwpIU905VzT3d5CY0reDU6mgArfxFPh
CejgiBHloerl5EVDCA3pXB8kpg==
-----END CERTIFICATE-----
Generated at Wed May 13 12:12:08 2026 by rpki-client