
$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
File: UN4cYHM-ori3boQDYJGOHyXEbkM.mft (raw, json)
Hash identifier: gPg5WU3dIKV8ywMZVt+WkFxnA2MihlyRTX8hm7wsucE=
Subject key identifier: 00:5B:E3:63:9A:EE:2B:C6:13:00:58:97:95:FC:13:F4:4E:F6:3F:2A
Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
Certificate issuer: /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Certificate serial: 0CA6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
Manifest number: 0C8E
Signing time: Thu 16 Apr 2026 18:32:17 +0000
Manifest this update: Thu 16 Apr 2026 18:32:16 +0000
Manifest next update: Thu 23 Apr 2026 18:32:16 +0000
Files and hashes: 1: UN4cYHM-ori3boQDYJGOHyXEbkM.crl (hash: bc6/0SIUC70F4To+mmrl+U0gRdY8ffUtQ13GxS3Qhlk=)
2: 46C5452E0DD711EF85707821C4F9AE02.roa (hash: VXncP0PhzyqKm2QEziAfAuVtMG/akEU8trZDQTOKPw8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:32:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3238 (0xca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Validity
Not Before: Apr 16 18:32:16 2026 GMT
Not After : Apr 23 18:32:16 2026 GMT
Subject: CN=69e12b31-3b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:99:23:49:f9:ea:f5:ef:01:9c:f1:a3:7b:
3a:2a:a4:bb:19:9d:73:b7:5a:a5:e1:99:20:ab:00:
85:92:e1:95:61:a0:4c:39:b8:82:ea:c7:75:6b:03:
55:c4:ce:89:0e:bc:96:bd:f6:94:f5:cb:ca:15:9a:
04:15:22:c3:5d:b5:92:15:6e:d0:23:08:42:cd:da:
d3:92:51:5b:f5:4e:d9:ab:e6:a1:cb:ea:06:58:f7:
e8:17:72:4e:8d:ba:30:48:ce:97:08:ee:0d:5a:a7:
a2:d5:cb:f5:24:cd:64:f9:70:e5:c0:78:df:d2:ab:
f9:cd:2b:9c:6d:db:5a:82:6d:1e:26:1d:ca:6f:26:
67:f6:04:d5:f7:bd:0d:8e:e5:0b:d2:f0:f3:c6:c2:
dc:f4:66:63:e7:6f:4e:f4:88:0e:8d:a4:f7:41:78:
41:ad:b9:9e:21:fe:a0:70:39:cb:d8:43:09:2e:fc:
99:67:9c:c3:d2:69:fc:9b:16:7e:5a:07:a7:39:27:
57:40:48:20:10:79:27:dc:8e:13:7d:9b:5b:97:51:
8c:c1:f9:2f:f9:de:d3:d4:40:9d:97:cc:15:a9:c7:
c8:f5:00:81:b4:fb:f9:cb:3a:b9:bf:1a:ba:e8:ce:
84:e1:cb:20:b8:d3:29:76:8d:be:1f:3c:41:7f:49:
15:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5B:E3:63:9A:EE:2B:C6:13:00:58:97:95:FC:13:F4:4E:F6:3F:2A
X509v3 Authority Key Identifier:
keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:85:33:1a:a6:3e:07:30:39:9a:78:19:80:b7:d6:23:ce:c0:
15:cc:1d:b8:1c:6b:63:89:3f:e5:dc:16:c7:6a:36:20:bd:f8:
57:62:66:82:95:ab:d5:40:b2:95:6d:84:ab:0b:c9:09:60:4b:
da:a1:cd:06:e6:76:65:38:30:8f:a9:84:95:22:96:03:48:b3:
4a:72:97:3a:df:f3:88:ba:35:74:dc:97:89:29:37:2d:b3:65:
f6:c3:af:06:52:c5:15:2c:7f:72:0f:32:bd:16:79:d9:2d:af:
ec:6f:b9:0b:0b:93:d9:67:04:95:61:d1:6c:9f:1d:82:79:e9:
6a:1c:e4:bd:43:d0:b4:f4:4a:5b:69:3e:ce:4e:42:3c:ef:6e:
61:81:da:22:56:b1:05:55:ce:39:72:24:c9:4c:c2:4f:b4:5c:
30:c5:d3:76:ca:37:e2:bf:d2:7b:db:9d:18:a3:b9:73:dd:bb:
4c:c1:1d:b8:a4:7e:fe:9b:56:d0:13:e3:67:30:fa:a8:42:72:
e5:35:af:80:bd:11:04:8a:4e:53:f3:db:26:5f:be:fb:05:da:
1a:9f:8b:2b:35:96:c8:2e:54:50:ae:da:40:53:f1:1f:49:4f:
77:7e:19:ba:e6:0e:8b:6d:4f:17:4b:cc:e2:4c:59:0c:ab:f9:
8c:16:4d:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcwMUUxMTAvBgNVBAUTKDUwREUxQzYwNzMzRUEyQjhCNzZFODQwMzYwOTE4RTFG
MjVDNDZFNDMwHhcNMjYwNDE2MTgzMjE2WhcNMjYwNDIzMTgzMjE2WjAYMRYwFAYD
VQQDEw02OWUxMmIzMS0zYjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAovKZI0n56vXvAZzxo3s6KqS7GZ1zt1ql4ZkgqwCFkuGVYaBMObiC6sd1awNV
xM6JDryWvfaU9cvKFZoEFSLDXbWSFW7QIwhCzdrTklFb9U7Zq+ahy+oGWPfoF3JO
jbowSM6XCO4NWqei1cv1JM1k+XDlwHjf0qv5zSucbdtagm0eJh3KbyZn9gTV970N
juUL0vDzxsLc9GZj529O9IgOjaT3QXhBrbmeIf6gcDnL2EMJLvyZZ5zD0mn8mxZ+
WgenOSdXQEggEHkn3I4TfZtbl1GMwfkv+d7T1ECdl8wVqcfI9QCBtPv5yzq5vxq6
6M6E4csguNMpdo2+HzxBf0kV9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABb42Oa
7ivGEwBYl5X8E/RO9j8qMB8GA1UdIwQYMBaAFFDeHGBzPqK4t26EA2CRjh8lxG5D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAxRS83ODVEN0VEMjFD
MDgxMUVBODU3NkIxNTFDNEY5QUUwMi9VTjRjWUhNLW9yaTNib1FEWUpHT0h5WEVi
a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VONGNZSE0tb3JpM2JvUURZSkdPSHlYRWJrTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzAxRS83ODVEN0VEMjFDMDgxMUVBODU3NkIxNTFDNEY5QUUwMi9VTjRjWUhNLW9y
aTNib1FEWUpHT0h5WEVia00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABYUzGqY+BzA5mngZgLfWI87AFcwduBxrY4k/5dwWx2o2IL34V2JmgpWr1UCy
lW2EqwvJCWBL2qHNBuZ2ZTgwj6mElSKWA0izSnKXOt/ziLo1dNyXiSk3LbNl9sOv
BlLFFSx/cg8yvRZ52S2v7G+5CwuT2WcElWHRbJ8dgnnpahzkvUPQtPRKW2k+zk5C
PO9uYYHaIlaxBVXOOXIkyUzCT7RcMMXTdso34r/Se9udGKO5c927TMEduKR+/ptW
0BPjZzD6qEJy5TWvgL0RBIpOU/PbJl+++wXaGp+LKzWWyC5UUK7aQFPxH0lPd34Z
uuYOi21PF0vM4kxZDKv5jBZNpw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:24:07 2026 by rpki-client