
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
File: -uYgHGZjkjQL7hOO1BeZuobapog.mft (raw, json)
Hash identifier: /PvOIjhw5RWsNCv4pyQRI1MPsjTsXjajExluHIt1loM=
Subject key identifier: F4:32:72:05:75:6D:C3:29:F3:F3:34:D7:18:C7:BF:66:BF:C6:85:04
Authority key identifier: FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88
Certificate issuer: /CN=A9158840/serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688
Certificate serial: 0D45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
Manifest number: 0D31
Signing time: Mon 12 Oct 2026 18:24:02 +0000
Manifest this update: Mon 12 Oct 2026 18:24:02 +0000
Manifest next update: Mon 19 Oct 2026 18:24:02 +0000
Files and hashes: 1: -uYgHGZjkjQL7hOO1BeZuobapog.crl (hash: ZOFLcZqVenDGPP7w7V836MxCeusyYktQm6bIN+K0jQA=)
2: 513421B0E3AB11EF9C68465CC4F9AE02.roa (hash: jqzNwbz0q3EkVTPWJRKnFmQbQOsb/fwgbvqdL5jgG3k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl
rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 18:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3397 (0xd45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158840, serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688
Validity
Not Before: Oct 12 18:24:02 2026 GMT
Not After : Oct 19 18:24:02 2026 GMT
Subject: CN=6acd25c2-0e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:cf:87:e4:cd:85:14:f1:83:07:67:6d:ba:
b3:49:53:2f:86:54:a1:3f:68:e7:73:d3:30:dd:f0:
e1:51:1f:1d:54:16:9a:90:ce:3b:98:f5:c1:12:23:
eb:8a:f3:67:a0:07:c4:2b:4e:96:df:79:f2:bc:b5:
ed:d4:c8:2c:90:4d:5c:6b:ed:42:92:e6:40:a1:e1:
30:aa:e4:56:07:d9:79:e2:8a:21:2b:09:99:d0:9a:
9e:61:48:f4:80:1f:ae:7b:b5:52:41:9d:ff:78:c1:
6a:73:e3:72:bc:58:7b:0e:2e:f2:e4:25:df:93:5d:
b2:a8:fe:00:ae:a9:ab:ba:39:e5:98:6d:27:e1:51:
d0:1d:cf:21:48:d0:b0:d2:ab:2b:94:62:6b:f3:f2:
61:47:cd:e9:f6:e0:7d:f6:e1:b3:a9:19:b3:bc:a8:
af:1f:4c:a1:66:86:6b:31:ca:3e:77:68:53:25:1b:
07:be:d3:a6:d8:f0:c0:44:35:a3:c6:ee:bc:d5:41:
60:e0:cc:a3:4c:fa:33:b2:28:62:33:96:df:9d:39:
e6:57:fd:57:32:4d:5a:78:38:5b:71:ee:30:5d:78:
94:41:4c:52:f0:44:d1:9c:85:05:46:01:16:a7:9f:
38:75:30:f0:85:c3:dc:1c:57:08:10:0c:0a:2c:cf:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:32:72:05:75:6D:C3:29:F3:F3:34:D7:18:C7:BF:66:BF:C6:85:04
X509v3 Authority Key Identifier:
keyid:FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:55:b3:d0:a2:16:b8:49:e4:0e:7d:fd:3d:9e:ac:03:ee:4d:
c8:23:ed:db:83:c2:26:40:fb:fb:17:91:5f:a0:da:8a:5f:93:
34:64:56:73:e7:4a:e5:8a:b8:09:2c:84:29:61:62:4d:d3:71:
b0:37:22:0c:ec:f6:aa:7c:18:b3:1b:32:3f:90:52:6f:47:3a:
29:8a:f1:b6:21:2c:6f:e0:b3:dc:c4:c3:7f:69:10:98:5e:f2:
60:58:cc:ee:5d:62:fe:f4:b8:07:41:2a:75:0c:fa:a1:2f:5f:
d1:cd:8f:3d:22:4e:ba:6b:5b:92:6c:af:a2:58:2c:4c:83:25:
a1:45:70:7b:75:35:bd:43:f1:2c:04:cf:a6:dc:65:c4:f8:03:
5c:9b:61:df:97:74:18:33:a5:44:81:42:00:24:e9:14:04:c1:
7f:61:56:23:89:8e:21:f2:62:94:34:a0:ab:06:34:f0:c0:01:
ba:86:e4:25:10:21:e9:b6:ba:65:01:d4:f0:60:d7:17:90:6d:
20:cf:d2:eb:08:db:77:00:2f:0e:6b:7a:a6:1c:ef:ec:8d:49:
23:b3:16:8e:b1:87:57:7f:a8:8a:9a:9f:00:44:47:69:73:33:
aa:66:b3:a7:2c:fd:c6:f0:68:32:8b:e5:cf:6b:03:96:6d:8a:
9a:3c:37:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:45:26 2026 by rpki-client