
$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
File: UN4cYHM-ori3boQDYJGOHyXEbkM.mft (raw, json)
Hash identifier: vA8ORPMeO2D45UQ+n24GL/3v01c/03XOcFeX6KaUlEQ=
Subject key identifier: CA:47:F6:77:D9:A1:B5:7E:2F:02:BD:CA:4C:C8:F2:0F:16:03:BB:C3
Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
Certificate issuer: /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Certificate serial: 0CDA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
Manifest number: 0CC2
Signing time: Tue 28 Jul 2026 18:43:43 +0000
Manifest this update: Tue 28 Jul 2026 18:43:43 +0000
Manifest next update: Tue 04 Aug 2026 18:43:43 +0000
Files and hashes: 1: UN4cYHM-ori3boQDYJGOHyXEbkM.crl (hash: kN1QafaUNyq9hwpGjKHExuufqiIMV/Fjsua82sLxpwQ=)
2: 46C5452E0DD711EF85707821C4F9AE02.roa (hash: VXncP0PhzyqKm2QEziAfAuVtMG/akEU8trZDQTOKPw8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3290 (0xcda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Validity
Not Before: Jul 28 18:43:43 2026 GMT
Not After : Aug 4 18:43:43 2026 GMT
Subject: CN=6a68f85f-fcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:b2:00:6d:33:58:5e:db:7e:d4:80:93:dc:
f4:db:22:d2:86:0b:d8:8c:8e:c8:34:d6:a3:5d:c5:
78:e2:49:eb:9d:c2:15:02:b9:7b:3b:6e:ef:9c:c0:
78:27:cb:a2:e0:34:03:b4:c5:0b:2a:c5:ac:24:d3:
47:62:a5:06:06:f8:6d:44:7a:a0:20:ec:6c:64:d4:
7b:9d:b7:1b:d3:e3:24:10:73:9f:ea:b7:0c:0b:cc:
ec:37:bb:21:98:fa:6e:b1:b9:8a:3b:64:23:b0:b2:
45:b2:e8:6b:23:d9:34:10:49:36:fe:56:3b:2d:ff:
8c:fe:64:83:c7:b8:d7:07:ae:40:8c:f1:fa:a2:f4:
c7:2a:7f:9d:f0:38:99:27:dd:0e:8b:7b:7c:85:e8:
af:5b:c4:43:7e:76:29:21:b7:6c:b0:f4:ed:2c:d6:
2a:f1:ae:5c:0b:e5:0d:f5:32:bf:71:bf:9e:d7:1b:
6f:ca:09:4d:d2:18:cd:1c:80:88:e1:d5:15:1d:29:
7e:6f:04:99:96:5d:39:71:fe:84:35:59:2c:87:5f:
92:c5:6b:47:da:90:30:7b:e0:9a:35:7d:6c:01:22:
b1:66:6f:bb:ce:dc:3b:97:4f:0f:33:1a:30:a5:18:
44:55:fa:67:28:da:f0:24:cc:24:7b:15:00:43:61:
7c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:47:F6:77:D9:A1:B5:7E:2F:02:BD:CA:4C:C8:F2:0F:16:03:BB:C3
X509v3 Authority Key Identifier:
keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:18:f0:3b:be:3a:82:8e:62:93:97:39:28:49:f7:a4:cc:60:
43:e7:65:8d:d2:e2:df:ec:f5:9c:90:80:68:79:f1:c4:0b:ab:
d2:d2:f2:24:f0:c7:21:ab:14:04:92:7e:4b:ae:53:e8:f2:bc:
69:a1:0f:dc:1e:e1:83:e0:93:09:68:81:d1:d1:7e:fb:7e:59:
3d:04:4d:c5:9c:b6:15:80:80:c7:89:65:7e:3e:5d:d8:41:a6:
36:e4:5d:e3:c2:00:fb:ff:c3:b1:1c:d7:c2:4f:6e:27:7c:c1:
02:ef:6a:93:51:a2:f0:ca:68:fa:e3:5b:ee:96:e8:d3:c4:6c:
7e:e3:ad:44:39:d9:19:de:3e:ec:4d:9b:b3:78:1c:90:6f:cc:
57:22:0e:5b:e8:45:85:61:bf:e7:5b:3f:95:d5:f3:10:97:a5:
05:d4:d8:ec:1f:cd:7d:ea:b7:54:d5:aa:40:f2:6a:8d:5a:e8:
69:25:5f:ea:2d:eb:84:05:8c:98:05:91:a0:d1:51:5e:c5:55:
4b:4c:15:d6:ff:61:c5:a1:ea:8b:1c:5a:e3:4a:e5:ee:c6:77:
29:5c:15:dd:5a:92:98:62:0b:18:17:a8:4f:9c:af:d6:c1:5b:
30:65:a2:5a:0e:b0:81:ed:4f:ee:a2:1c:0e:bf:17:d0:9f:33:
4c:3f:93:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:32:41 2026 by rpki-client