
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
File: -uYgHGZjkjQL7hOO1BeZuobapog.mft (raw, json)
Hash identifier: 80xKLWCa4Z1OfNq8Eq8HyIedbFdsAd3G4EPlkPSJ7Lo=
Subject key identifier: E4:36:EF:DF:30:CA:8A:D5:33:A6:91:7F:3A:BA:A0:08:75:1C:9E:D0
Authority key identifier: FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88
Certificate issuer: /CN=A9158840/serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688
Certificate serial: 0D04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
Manifest number: 0CF1
Signing time: Fri 12 Jun 2026 18:22:07 +0000
Manifest this update: Fri 12 Jun 2026 18:22:06 +0000
Manifest next update: Fri 19 Jun 2026 18:22:06 +0000
Files and hashes: 1: -uYgHGZjkjQL7hOO1BeZuobapog.crl (hash: 9MUMAsCtbYPlbuW61W6xlQ/QPYQb33hC4Crk0lT4Kp8=)
2: 513421B0E3AB11EF9C68465CC4F9AE02.roa (hash: D0GEA8Hwvgy327FVQRo8UrdiZ6su6qYeHtaXvrPJkes=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl
rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:22:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3332 (0xd04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158840, serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688
Validity
Not Before: Jun 12 18:22:06 2026 GMT
Not After : Jun 19 18:22:06 2026 GMT
Subject: CN=6a2c4e4f-d17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:d4:f5:1b:66:0e:73:80:40:29:38:f5:52:
6d:c0:31:21:5a:24:58:fd:20:bc:b5:10:cb:3e:cf:
53:c8:6d:65:2f:b5:fc:b3:10:05:38:47:ce:d9:a8:
c3:5f:73:a2:1d:8f:44:72:c5:09:38:e7:0a:9c:04:
ca:5c:8c:1a:42:f9:fb:d9:5e:dc:a7:27:f8:04:e1:
69:f7:03:66:ee:b0:8c:0e:0b:aa:fb:70:07:fc:af:
20:5d:28:c8:5d:a6:57:d3:06:3e:95:21:85:06:65:
5e:43:20:33:09:f9:75:4f:2e:9a:f4:cf:3f:a2:b6:
d2:f0:d9:5a:1d:09:08:13:af:c4:5d:5b:cf:f1:49:
b9:72:29:e5:c8:85:40:3a:02:25:45:c2:2a:58:99:
3d:21:38:fa:f5:c2:71:ed:25:f6:b6:cb:6a:bd:1f:
6e:75:33:da:7a:b0:69:e6:90:3f:bc:f8:5f:51:89:
4a:7a:96:b0:4d:bb:25:3b:0f:e7:e2:18:d6:22:bc:
01:4c:d5:b4:82:c9:55:91:ed:3f:74:7a:ea:b1:92:
87:88:b4:46:ce:11:4f:65:a0:e2:d9:43:aa:7b:4f:
9c:a2:e9:55:6d:2c:d4:34:42:3e:f0:82:53:aa:b7:
6e:48:7b:eb:3d:d3:11:88:fc:c0:a7:74:06:1f:e6:
1f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:36:EF:DF:30:CA:8A:D5:33:A6:91:7F:3A:BA:A0:08:75:1C:9E:D0
X509v3 Authority Key Identifier:
keyid:FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:4a:b0:12:86:95:18:6a:af:e8:9c:3f:7c:be:13:c7:ac:20:
0a:c6:09:1c:71:3b:c8:a4:42:8d:d3:13:9f:a1:4a:2e:7d:28:
ca:07:d9:2e:b3:ff:47:19:88:ae:18:31:62:39:f6:05:5a:96:
d8:61:f9:b1:0f:7b:62:84:57:79:d0:a7:57:a1:06:5a:19:96:
43:fa:70:76:64:89:67:f4:ec:9f:03:bc:e2:61:00:8f:e4:56:
fa:34:5f:bb:a2:8d:d9:ef:82:90:d0:94:87:5b:14:62:3c:b4:
9a:c3:a3:7a:c8:90:ca:b5:06:ef:f5:55:ee:f4:10:78:13:8d:
33:09:99:93:f5:3d:ba:05:d2:a5:e0:11:6c:38:ca:8a:be:7b:
67:b5:53:01:a7:ab:ac:18:55:cf:a0:b9:3c:1f:f6:d1:0c:6d:
a7:2b:f3:43:ba:d6:5b:ea:38:c2:a9:e8:15:85:1a:a5:75:1a:
61:4b:52:28:a7:ac:5d:ac:2d:e8:84:4b:30:c4:90:95:6e:22:
2a:82:ed:34:3d:9f:a2:99:45:bf:ca:60:3e:20:24:f7:b7:f3:
67:71:fa:3a:1e:c8:c5:ef:c2:07:26:0d:02:cd:c2:51:f6:68:
09:4a:a8:39:6c:45:be:c1:4d:7e:58:5e:16:35:90:34:53:69:
45:8e:dd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:39:41 2026 by rpki-client