
$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
File: UN4cYHM-ori3boQDYJGOHyXEbkM.mft (raw, json)
Hash identifier: YPaTqbr/o9ioQv5OcM9CNCJuDbHkybyKwT/H8dN9IhM=
Subject key identifier: A9:40:FF:0A:2B:9F:DC:E4:F0:15:37:28:18:1B:4B:64:33:E2:C3:08
Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
Certificate issuer: /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Certificate serial: 0CC3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
Manifest number: 0CAB
Signing time: Fri 12 Jun 2026 18:35:07 +0000
Manifest this update: Fri 12 Jun 2026 18:35:07 +0000
Manifest next update: Fri 19 Jun 2026 18:35:07 +0000
Files and hashes: 1: UN4cYHM-ori3boQDYJGOHyXEbkM.crl (hash: pcVT9RL8iyuKXSLORT9rE85pWoK+cOTWroQ193W04DI=)
2: 46C5452E0DD711EF85707821C4F9AE02.roa (hash: VXncP0PhzyqKm2QEziAfAuVtMG/akEU8trZDQTOKPw8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3267 (0xcc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Validity
Not Before: Jun 12 18:35:07 2026 GMT
Not After : Jun 19 18:35:07 2026 GMT
Subject: CN=6a2c515b-f97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:17:d1:c1:53:ee:72:50:aa:8e:cd:c0:0e:
26:c1:bd:55:72:0f:dd:8e:1f:be:56:85:30:f9:0e:
85:4f:5f:fe:70:c5:07:14:9f:a1:d9:68:95:74:2f:
a7:10:a1:df:5d:3a:f3:d3:48:10:5d:15:5d:94:f9:
d9:9c:97:04:3b:96:67:50:e4:b0:41:41:b1:19:9a:
19:77:36:2b:3b:6b:2f:0c:cc:59:7c:14:2e:38:38:
12:b3:90:20:11:77:0a:50:da:8e:f7:50:ae:a8:02:
f1:56:7c:e5:9f:17:3e:ce:e0:f7:b9:aa:fb:c3:1b:
8b:59:08:38:c0:46:fb:c7:d7:87:38:89:93:f1:3d:
7c:f6:97:94:e6:9d:98:47:f1:d8:c1:b2:5b:5a:9d:
81:0b:6a:46:b6:f1:30:8f:b5:d8:08:95:0c:30:4c:
4d:12:10:ce:bc:64:1a:42:56:2a:98:7f:38:19:15:
f8:c8:4d:0f:dd:30:8f:16:24:9c:f0:55:f5:22:8a:
29:b7:09:4e:70:38:a3:ab:37:b1:57:ef:6a:eb:3c:
85:d4:24:12:10:0e:f4:a2:30:79:b3:a9:72:2b:59:
4a:01:d1:64:1d:c6:71:78:1e:34:2d:49:d7:2e:7d:
7a:4f:e4:30:17:c9:a4:de:42:20:cd:e6:21:79:3c:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:40:FF:0A:2B:9F:DC:E4:F0:15:37:28:18:1B:4B:64:33:E2:C3:08
X509v3 Authority Key Identifier:
keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:05:56:ca:f9:72:11:32:e8:f3:a8:92:ff:f8:5b:bb:5b:79:
a1:65:0d:d9:2f:1e:f0:c0:bc:32:9f:b6:09:13:8e:84:c3:c4:
2e:8d:34:f6:fb:a7:ee:48:fb:9d:bc:5c:e4:9b:f6:35:a2:a4:
59:24:a3:51:62:bc:92:71:ce:52:81:51:57:b8:42:1b:67:18:
3d:ed:60:a9:0f:45:90:2b:04:48:b7:f5:77:08:1d:ee:a0:81:
f6:99:de:72:06:53:e3:28:fa:90:0e:6e:98:6a:33:7c:cf:c5:
92:a4:f9:66:fc:7a:1e:59:c0:24:5f:0c:13:bd:eb:79:ac:1d:
9f:f1:a4:a9:2a:a6:d3:67:a9:36:36:8f:15:21:b0:e2:fc:aa:
dd:8a:81:8f:8a:30:83:7e:1a:6c:96:6a:a6:06:5c:a8:04:98:
98:cf:d5:69:0e:5b:cb:cc:1a:b0:ea:5f:23:e3:68:e4:ed:34:
69:01:1e:04:3d:e8:a7:77:3d:5c:91:cb:13:58:3a:e5:d3:8c:
dc:13:fe:d2:41:db:4f:39:df:e5:d1:7b:9c:54:ff:3b:6f:4c:
18:1f:6f:27:56:72:c2:3a:34:16:64:05:09:7c:92:b1:56:ac:
3f:0e:7b:33:72:f2:9f:97:e2:5d:8b:bc:d2:c0:dd:c0:4f:ec:
f2:d9:b9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:20:38 2026 by rpki-client