
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
File: UDJy2j7wq-3pU5x-JDobhoaxYfs.mft (raw, json)
Hash identifier: 7w4PkJdh77tgjcGfdcVRVbhqg+NNHjjqPizXujDW/zo=
Subject key identifier: 46:4A:EE:78:55:A8:8C:83:0A:3B:88:AB:02:F7:5A:78:61:C3:2A:AE
Authority key identifier: 50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB
Certificate issuer: /CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
Manifest number: 0186
Signing time: Fri 17 Apr 2026 04:13:44 +0000
Manifest this update: Fri 17 Apr 2026 04:13:43 +0000
Manifest next update: Fri 24 Apr 2026 04:13:43 +0000
Files and hashes: 1: UDJy2j7wq-3pU5x-JDobhoaxYfs.crl (hash: d0FYBee2vEhS1tk9z5hg2Mn2ZMewVk5f0H7ytU4ana0=)
2: C32999EE391F11EFBFAB6D66C4F9AE02.roa (hash: M4sCC9h+jOw1aprcitO1VbFmajV+N+fzu/Vlxn3AA6E=)
3: C3A77BE8391F11EFBFAB6D66C4F9AE02.roa (hash: xag7piZxRalbVehikGhY7Y5TfIzZyOjEtv8ww1qYwCA=)
4: DADBB0C033A411EF8E99B625C4F9AE02.roa (hash: uj7aSF5U3lrEwAf5AMXaMNocSkTapCA+NNk0S8T44wI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl
rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146906, serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
Validity
Not Before: Apr 17 04:13:43 2026 GMT
Not After : Apr 24 04:13:43 2026 GMT
Subject: CN=69e1b378-ab91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:1f:8f:8a:ba:c3:0c:3e:66:43:4d:67:b5:
dc:29:1f:d8:c0:86:c1:30:fd:3c:85:92:c0:61:ef:
85:fe:29:92:01:12:b8:46:4e:2e:3b:2a:64:e1:79:
43:cf:17:1f:b6:c8:af:f1:e4:89:49:0f:b4:f3:8c:
43:6f:03:04:ed:46:01:ef:22:68:14:57:58:4c:84:
b9:ac:27:f4:ec:52:bd:3f:78:10:1e:79:82:bd:f7:
59:3b:27:c0:76:a1:25:d8:bc:21:dc:ee:4d:df:67:
16:d1:d2:ef:4d:8c:0e:70:14:5d:6e:2d:ab:c6:01:
14:6b:b4:ed:dc:f7:9a:5a:51:a0:37:1f:1c:06:71:
32:75:f8:09:f8:e8:7c:e8:f2:e0:ca:02:c5:43:fa:
19:fb:1b:d3:b5:01:34:15:3b:82:ef:be:0d:09:2b:
fd:3b:a7:a9:4d:3a:9a:52:5f:34:e1:0b:af:6b:6c:
d9:5c:01:6c:8a:10:38:ae:74:29:7c:c7:73:33:6b:
00:32:93:0c:84:2a:c9:f8:59:f5:db:94:74:26:0c:
c9:6b:b7:e6:52:ef:b1:53:fb:34:f8:9b:87:14:b1:
1b:44:7b:1e:ad:5b:95:d9:d6:53:23:dc:e5:50:98:
47:8b:9f:fc:25:ea:44:4f:f4:55:bf:fe:5f:a8:8a:
6c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4A:EE:78:55:A8:8C:83:0A:3B:88:AB:02:F7:5A:78:61:C3:2A:AE
X509v3 Authority Key Identifier:
keyid:50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:dd:2a:4c:d5:20:03:9d:0d:46:7d:72:97:53:c6:66:48:b0:
07:7e:03:42:9d:54:66:f1:9e:09:76:80:4d:56:ad:a7:be:86:
30:00:1c:9c:ff:e3:6e:02:0c:2c:2c:e9:3d:c6:09:2c:09:a3:
49:37:f4:9a:97:f2:fc:01:c7:51:f0:5d:02:d0:58:ab:6e:0a:
09:96:17:8e:c4:c4:1e:71:b5:52:63:1f:c4:15:44:33:3a:4e:
4a:df:a5:40:14:ac:55:05:cb:dc:d6:ca:77:cf:61:5d:b4:41:
aa:17:0e:97:22:f4:0b:9e:96:03:d6:f6:cc:ff:fb:9b:7e:51:
04:8d:8d:75:1f:86:47:67:0d:00:ef:ea:f3:7e:c8:ce:ee:10:
1e:02:0a:f4:b0:58:84:68:66:ec:62:fb:1d:05:41:5a:c9:61:
61:79:42:1d:4b:c6:6b:7c:06:79:3c:18:03:a1:83:ac:14:69:
28:56:d7:5a:28:67:40:cc:cf:fd:24:76:40:e3:ae:91:d8:8f:
91:ff:41:70:d7:98:47:db:4c:b0:b7:b6:1e:09:ce:39:e2:10:
94:03:f2:55:be:ca:2a:fa:f1:11:55:9a:df:83:5c:f5:d1:e7:
aa:c3:df:7e:09:e8:0d:5e:81:53:75:e0:dd:8e:0c:25:00:1a:
54:64:0b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:03:04 2026 by rpki-client