
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
File: ujlCdcT_j47yNHSaNvKhkTknlVs.mft (raw, json)
Hash identifier: LNPOelLK3GWqpYJeW0m8Xdz9+op+Q8A2jsW3lFKSFpM=
Subject key identifier: 9F:1E:BC:41:6E:DD:B6:CB:6E:46:D9:0D:93:34:E1:FC:35:96:D2:59
Authority key identifier: BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B
Certificate issuer: /CN=A9158E7B/serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
Manifest number: 9F
Signing time: Fri 09 Oct 2026 08:04:08 +0000
Manifest this update: Fri 09 Oct 2026 08:04:07 +0000
Manifest next update: Fri 16 Oct 2026 08:04:07 +0000
Files and hashes: 1: ujlCdcT_j47yNHSaNvKhkTknlVs.crl (hash: A3DfhTD1ECl2MpCnVFBvLuABHkG7PWlgpgnENlrb3Do=)
2: B2897A041D1C11F19ECA08BE103D8C67.roa (hash: dDoq0NSsJBrU8GbMwoOGwGBt+swdNtQ2Co9Bt0cv7SU=)
3: B1921BE21D1C11F19ECA08BE103D8C67.roa (hash: OZLEAf2GlkPiBHJVIkEjy99lBk4lg8JxOM/56bdCYlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl
rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E7B, serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B
Validity
Not Before: Oct 9 08:04:07 2026 GMT
Not After : Oct 16 08:04:07 2026 GMT
Subject: CN=6ac89ff7-0bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:10:3d:99:4d:b8:6b:6a:9c:29:67:15:63:2b:
cb:8e:2c:1b:c9:e4:ce:41:f7:d5:c1:b8:cc:80:3a:
66:9a:c0:5a:8d:23:f6:e7:ac:66:c6:77:9a:58:ce:
dc:bc:ee:3d:5c:50:63:b3:c4:83:55:5e:dc:65:6e:
dd:69:19:76:f3:35:65:d2:a5:8c:3f:4a:6f:e9:a6:
0c:14:f7:e4:3c:3a:2a:f0:19:0d:84:bf:ad:02:88:
e6:72:87:c7:31:82:70:6d:e0:e4:13:33:ca:24:31:
35:93:44:ed:25:cd:c8:94:a5:65:05:a6:cf:10:56:
c0:d9:6b:84:65:7b:96:dc:35:a7:6a:f9:e8:a4:77:
1f:cb:59:b0:b8:6c:2f:20:4a:70:98:3f:fd:c4:c2:
3a:3a:68:d9:fe:88:78:2d:fa:ca:68:71:17:d3:58:
10:03:4b:f4:4f:ba:a7:0e:00:b6:fd:63:89:90:a5:
08:0d:de:c4:36:0c:64:0c:02:73:8d:fb:ea:f6:58:
29:d5:27:97:c0:63:40:a8:4f:e1:36:ab:dd:8d:93:
4c:b6:01:bd:fd:55:76:02:b3:a6:11:f2:bd:26:e8:
eb:51:1a:74:20:9f:54:ef:4b:1c:c2:30:aa:2a:5b:
b5:24:77:fb:b0:3b:33:ee:e2:e7:e4:7b:28:f5:80:
29:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1E:BC:41:6E:DD:B6:CB:6E:46:D9:0D:93:34:E1:FC:35:96:D2:59
X509v3 Authority Key Identifier:
keyid:BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:d0:61:5b:04:a3:d1:e3:5c:d6:97:f8:18:a3:b9:28:a3:11:
ae:19:ae:fe:d5:15:ef:a0:49:da:d7:f6:d8:c3:82:c3:77:96:
07:c2:e7:83:f0:88:f9:00:08:e7:a2:2b:e6:69:3f:92:03:e8:
4f:05:57:43:de:1d:e2:f3:0d:9f:36:86:10:d2:65:bd:4c:16:
74:86:42:ac:54:2f:74:b4:31:97:08:70:2d:d9:87:8c:e0:29:
f7:3f:2b:36:06:3b:c7:e0:3c:5d:7f:98:a1:7e:6f:7e:2a:8d:
9f:96:a7:fb:0c:1d:7c:8c:23:e0:b1:b1:99:72:d6:f7:4e:37:
0c:27:0e:b7:63:7e:e7:55:92:cd:a2:56:e7:25:20:2b:bd:86:
3c:40:4e:73:2d:63:c3:21:c0:90:01:d6:1b:22:30:66:0f:5b:
00:0e:69:29:09:a1:93:1c:e6:fb:0d:f9:45:5c:94:8c:25:56:
b1:c2:b1:3d:5b:7a:38:9c:6f:7f:e4:2d:9a:bb:c3:71:6a:bf:
60:bd:5e:7d:52:b8:c9:b2:97:7a:0f:1c:c4:60:02:f5:b6:f3:
83:21:dc:08:51:d7:f3:55:ae:0e:ed:31:28:b9:7c:3c:a8:d3:
98:62:00:3a:68:ed:6a:6a:2a:1b:59:e0:ff:e6:06:c5:20:e4:
8e:ff:e9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:51:33 2026 by rpki-client