
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
File: UGGUcQC8szKJ4moL3-zixfueCdI.mft (raw, json)
Hash identifier: uxZmNtPTyKSRLdGsuKhW2p08rwVXInp0sF242IHuAkk=
Subject key identifier: DC:0D:05:95:34:8A:44:12:D2:BC:E7:53:9A:EA:5D:EE:63:E8:83:07
Authority key identifier: 50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2
Certificate issuer: /CN=A912BD8E/serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
Certificate serial: 0145
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
Manifest number: 0141
Signing time: Mon 21 Sep 2026 05:26:53 +0000
Manifest this update: Mon 21 Sep 2026 05:26:53 +0000
Manifest next update: Mon 28 Sep 2026 05:26:53 +0000
Files and hashes: 1: UGGUcQC8szKJ4moL3-zixfueCdI.crl (hash: z1LQnw3SwewpqDGACII/5Jj/dexUl6Tc9xbxgYw9Jqg=)
2: 08C7D93ACE8911EFBEC5D618C4F9AE02.roa (hash: G7Bwkehqq1kfSJpx3NYkM02mA2lPINtW/O+sAQ3wQIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl
rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BD8E, serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
Validity
Not Before: Sep 21 05:26:53 2026 GMT
Not After : Sep 28 05:26:53 2026 GMT
Subject: CN=6ab0c01d-3b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:ae:04:74:e7:4a:d0:1c:c3:a7:19:3b:18:
b5:42:c3:b8:d1:d7:0d:2c:2d:ec:24:98:89:e5:17:
41:4a:2d:21:f9:f3:84:d6:cf:01:6b:a1:ca:0b:c0:
9f:4a:8e:e5:ce:21:64:c6:ea:b0:cc:27:94:e1:3a:
80:bc:3b:9c:db:17:6a:94:66:2c:92:cf:d3:3e:97:
e4:44:75:17:b3:40:30:2e:d8:0c:e8:8a:c7:8f:52:
ee:f2:aa:2e:47:95:cc:ea:8e:2c:83:19:da:8b:5f:
fb:aa:6e:8b:9f:88:19:b7:49:c8:6e:dd:05:fa:eb:
26:82:b9:ff:02:6f:e6:17:b7:cf:c2:5c:84:bc:19:
d1:5f:df:50:aa:7f:6b:62:88:35:35:fc:49:8f:27:
41:33:e7:b0:25:52:f1:0e:0b:da:f5:e7:46:b4:a4:
83:9d:c0:3b:bc:ec:fd:cc:87:ae:5b:61:52:a3:5c:
38:2f:9b:d3:ff:8d:3b:1e:67:1d:2b:32:96:46:6d:
42:26:a3:e0:dc:30:1e:7a:e3:31:24:69:39:ef:fe:
10:01:58:8b:61:10:a7:12:69:e4:c6:97:9a:10:c1:
90:e4:84:df:eb:08:f1:d6:9e:4b:b8:51:4c:15:3c:
00:69:35:35:66:c7:78:cc:03:4b:5c:ee:ef:e6:d9:
10:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0D:05:95:34:8A:44:12:D2:BC:E7:53:9A:EA:5D:EE:63:E8:83:07
X509v3 Authority Key Identifier:
keyid:50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:81:37:7f:46:88:fc:42:b8:4d:76:f5:53:15:b6:5b:27:a7:
a5:67:0e:93:2d:cd:e5:f2:ff:a2:96:f5:27:a9:1c:d2:7a:2a:
79:53:9d:77:f4:73:07:cd:33:7a:ff:5a:bb:ea:45:8e:99:82:
e8:6e:11:1a:42:7b:de:de:54:0f:a5:93:50:c1:94:80:ee:d1:
e9:e9:ae:44:0f:65:78:a9:ca:ec:ca:b8:f9:bb:32:78:26:b3:
68:c0:88:a8:9f:07:f5:3c:dd:18:d5:1b:60:37:f8:96:25:1d:
c7:c9:0a:22:76:d9:6c:d0:86:9f:e1:09:fb:fb:d4:01:30:90:
e3:d7:a0:e0:79:d2:0a:88:09:38:1a:9f:8a:79:2a:02:70:c1:
22:b1:db:40:f4:1f:2f:10:01:76:d9:83:7b:74:e7:a8:a0:72:
25:c8:94:06:0f:b0:e7:32:d1:8c:d1:ba:3d:27:e2:5d:34:9e:
c6:e1:ef:97:88:5b:62:11:61:db:b6:e3:0d:e8:d9:8c:dc:03:
46:da:ad:3b:3e:3f:5c:e6:8d:f5:d6:4f:4e:44:ee:b1:4c:e1:
37:17:13:2c:ff:fc:e0:a7:66:8b:c3:cf:6d:86:cd:de:de:96:
50:90:ca:69:ff:80:35:10:b5:b6:02:7f:14:73:fa:38:72:f7:
b3:33:7f:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJEOEUxMTAvBgNVBAUTKDUwNjE5NDcxMDBCQ0IzMzI4OUUyNkEwQkRGRUNFMkM1
RkI5RTA5RDIwHhcNMjYwOTIxMDUyNjUzWhcNMjYwOTI4MDUyNjUzWjAYMRYwFAYD
VQQDEw02YWIwYzAxZC0zYjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtoWuBHTnStAcw6cZOxi1QsO40dcNLC3sJJiJ5RdBSi0h+fOE1s8Ba6HKC8Cf
So7lziFkxuqwzCeU4TqAvDuc2xdqlGYsks/TPpfkRHUXs0AwLtgM6IrHj1Lu8qou
R5XM6o4sgxnai1/7qm6Ln4gZt0nIbt0F+usmgrn/Am/mF7fPwlyEvBnRX99Qqn9r
Yog1NfxJjydBM+ewJVLxDgva9edGtKSDncA7vOz9zIeuW2FSo1w4L5vT/407Hmcd
KzKWRm1CJqPg3DAeeuMxJGk57/4QAViLYRCnEmnkxpeaEMGQ5ITf6wjx1p5LuFFM
FTwAaTU1Zsd4zANLXO7v5tkQVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNwNBZU0
ikQS0rznU5rqXe5j6IMHMB8GA1UdIwQYMBaAFFBhlHEAvLMyieJqC9/s4sX7ngnS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkQ4RS8zQUY1N0ZEQUNF
ODgxMUVGODdDMDcxMTdDNEY5QUUwMi9VR0dVY1FDOHN6S0o0bW9MMy16aXhmdWVD
ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VHR1VjUUM4c3pLSjRtb0wzLXppeGZ1ZUNkSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QkQ4RS8zQUY1N0ZEQUNFODgxMUVGODdDMDcxMTdDNEY5QUUwMi9VR0dVY1FDOHN6
S0o0bW9MMy16aXhmdWVDZEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKYE3f0aI/EK4TXb1UxW2WyenpWcOky3N5fL/opb1J6kc0noqeVOdd/RzB80z
ev9au+pFjpmC6G4RGkJ73t5UD6WTUMGUgO7R6emuRA9leKnK7Mq4+bsyeCazaMCI
qJ8H9TzdGNUbYDf4liUdx8kKInbZbNCGn+EJ+/vUATCQ49eg4HnSCogJOBqfinkq
AnDBIrHbQPQfLxABdtmDe3TnqKByJciUBg+w5zLRjNG6PSfiXTSexuHvl4hbYhFh
27bjDejZjNwDRtqtOz4/XOaN9dZPTkTusUzhNxcTLP/84Kdmi8PPbYbN3t6WUJDK
af+ANRC1tgJ/FHP6OHL3szN/xA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:26:18 2026 by rpki-client