
$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
File: UN4cYHM-ori3boQDYJGOHyXEbkM.mft (raw, json)
Hash identifier: 1AnD+pzXhkVc8+EsvhUamvyTcIUyarljSwBqB7m7cdw=
Subject key identifier: DE:8F:79:E9:8D:B4:32:4F:C6:16:39:03:2D:19:FC:F7:C3:05:1B:33
Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
Certificate issuer: /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Certificate serial: 0C8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
Manifest number: 0C76
Signing time: Mon 02 Mar 2026 00:49:02 +0000
Manifest this update: Mon 02 Mar 2026 00:49:00 +0000
Manifest next update: Mon 09 Mar 2026 00:49:00 +0000
Files and hashes: 1: UN4cYHM-ori3boQDYJGOHyXEbkM.crl (hash: WVHJr6uvZXCQr9HFEHYm+4Nn0TIl0ns8eAiwwofFMUo=)
2: 46C5452E0DD711EF85707821C4F9AE02.roa (hash: VXncP0PhzyqKm2QEziAfAuVtMG/akEU8trZDQTOKPw8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:48:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3214 (0xc8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Validity
Not Before: Mar 2 00:49:00 2026 GMT
Not After : Mar 9 00:49:00 2026 GMT
Subject: CN=69a4de7e-e792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:af:b5:7d:d5:21:e6:35:51:dd:06:f7:4c:f6:
15:de:95:e4:aa:03:4d:ca:bf:3b:de:f6:82:50:e4:
b0:d1:4a:b6:e3:54:56:b4:e9:1b:69:56:de:39:e0:
2a:88:32:24:f5:21:52:61:a9:a3:3c:21:3e:43:1c:
42:51:85:79:a2:90:14:67:85:d4:69:58:4d:00:8f:
50:9d:b4:7b:1a:5b:15:9c:f0:eb:ee:7a:76:b1:54:
78:29:4f:a6:5c:30:ec:3b:7e:74:c9:5f:38:14:24:
b6:f0:36:96:d5:2d:d5:d5:12:61:0b:b0:66:7b:f2:
dd:37:ec:52:a9:db:ce:bc:22:08:c9:39:e8:8b:14:
8d:75:09:2f:f9:fd:b0:63:d8:86:ba:4c:ce:73:ce:
ad:11:57:c0:5d:6c:27:a3:36:86:5f:15:95:47:b5:
13:03:03:bb:66:54:c1:7b:fd:61:4e:81:7e:9d:f3:
15:84:fe:c9:6e:ec:1d:60:5a:93:30:5f:bc:aa:37:
a2:54:50:6f:ce:b2:dc:b0:e7:cc:ce:c0:b0:d2:57:
b1:8f:f1:06:25:d5:5a:90:98:c9:1c:c6:51:5c:9a:
65:22:a7:f0:7a:f1:29:bf:3e:e9:3e:58:39:3d:50:
d7:4f:4d:32:58:fd:df:44:9b:bc:b3:4e:54:e4:a7:
a9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8F:79:E9:8D:B4:32:4F:C6:16:39:03:2D:19:FC:F7:C3:05:1B:33
X509v3 Authority Key Identifier:
keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:1c:bf:94:17:5c:fa:cb:d6:f1:ee:44:bf:fc:80:c2:d8:83:
0a:4a:d0:bb:d8:ad:58:ff:e3:ef:d8:4e:de:1b:9a:af:4c:93:
06:b4:de:0f:65:4f:f3:8c:3d:30:8c:b3:8e:e6:ca:43:93:b9:
47:7e:8f:20:fb:32:a6:73:9d:9a:cf:94:56:ec:e4:65:7d:7e:
81:d1:ea:af:f3:a4:c3:87:b7:27:05:12:ba:91:01:4b:32:4f:
ed:a9:3a:7c:99:78:50:e0:40:52:6c:36:ea:b5:e7:eb:e4:8d:
f4:a7:8f:f4:66:f7:ae:c1:b0:11:31:33:d1:c6:57:4d:63:39:
ba:e8:79:e6:f7:ca:a8:80:ef:76:d7:cb:cf:59:c4:cc:30:b4:
0b:fa:4d:b3:82:ec:fd:56:59:ed:2c:17:86:e4:eb:6a:12:99:
46:ed:6f:30:5e:95:1c:a1:53:63:8e:36:3a:f5:8b:a6:f0:a5:
3d:9b:96:b6:8c:39:2d:35:77:8b:3d:8b:49:3f:19:2c:48:5a:
9e:54:4d:0f:5d:b5:60:78:55:81:29:2b:cf:19:fd:d0:fc:d9:
e7:93:c9:0a:a7:a2:5c:01:c6:48:37:9f:62:c4:c7:b1:2e:fa:
a0:f0:ae:c0:cf:0f:56:79:33:ca:5e:c2:8b:3e:b0:cf:bb:33:
a3:c6:ab:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:20 2026 by rpki-client