
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
File: UN4cYHM-ori3boQDYJGOHyXEbkM.mft (raw, json)
Hash identifier: vejnPX1gR6kwZh7IbKF9o6tSAQTB2qiZ2mP0/ud/qlk=
Subject key identifier: 2D:2C:BC:1D:C2:4C:E8:0C:AC:14:42:26:A8:1D:47:3F:AD:B2:47:16
Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
Certificate issuer: /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Certificate serial: 0CFB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
Manifest number: 0CE0
Signing time: Fri 18 Sep 2026 18:29:39 +0000
Manifest this update: Fri 18 Sep 2026 18:29:38 +0000
Manifest next update: Fri 25 Sep 2026 18:29:38 +0000
Files and hashes: 1: UN4cYHM-ori3boQDYJGOHyXEbkM.crl (hash: H0V9vhhxaPz/vuUefNwN30Bri7RBTnTzy4k9yo5rjog=)
2: FNdaP_tlvzdOkRkygoSbG2qvE4Q.asa (hash: HtM4cT1n0OKEJjnde1/o9+CymoCiMyNjl/BcEhdS6xk=)
3: 46C5452E0DD711EF85707821C4F9AE02.roa (hash: eIKcx/tRIBK3MeiC+4l3jtKDacHvx/6DmpdUtabZ10s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3323 (0xcfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Validity
Not Before: Sep 18 18:29:38 2026 GMT
Not After : Sep 25 18:29:38 2026 GMT
Subject: CN=6aad8313-20ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:62:7c:e8:5d:f4:e2:29:a8:82:2d:c0:fe:
5f:46:ff:67:11:ef:20:30:e5:ef:40:5d:ef:c1:db:
4d:ea:13:15:78:09:cf:e7:a5:c6:90:72:c2:42:97:
66:de:47:87:24:d7:53:25:07:5f:9c:e3:57:c4:ae:
01:c1:0c:d5:9c:52:d7:13:9d:e5:00:7f:70:c3:c4:
52:ec:a4:f6:a3:6b:86:6b:0f:3e:d0:9e:84:8a:aa:
7d:d0:61:da:7e:20:0a:44:7d:a9:84:94:fc:90:72:
9f:7f:62:12:fb:76:39:e6:3c:5d:5c:1c:7f:ae:30:
95:ff:f1:85:b3:04:3b:73:d4:e6:ae:67:05:ca:f2:
4a:06:06:4d:96:9c:21:0b:0c:93:02:94:63:1b:a0:
35:d9:d7:fc:14:c0:4d:01:55:5d:9f:04:1b:ce:d0:
b3:8b:82:15:a6:90:e8:0d:20:31:56:2a:fb:1a:15:
54:42:ef:a9:f5:71:f8:a7:98:b1:3e:32:53:a0:63:
2a:aa:33:97:c7:87:c8:e1:34:11:7d:f3:dd:5a:ec:
97:b3:e7:7f:2b:ab:8d:91:cd:a3:d7:a4:66:0a:31:
9a:21:7a:b4:dd:3b:8a:f7:04:b0:25:5c:e9:75:bb:
a9:42:e9:89:16:d0:b7:f8:e4:a5:49:65:6c:37:b6:
34:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2C:BC:1D:C2:4C:E8:0C:AC:14:42:26:A8:1D:47:3F:AD:B2:47:16
X509v3 Authority Key Identifier:
keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:45:aa:00:48:ac:75:7e:8f:8b:a5:e4:d3:ed:60:f4:b4:72:
e0:b1:ed:b6:78:23:f2:22:cc:8a:b8:f2:66:60:e2:36:5e:63:
02:9e:10:ce:dc:c9:e8:49:47:12:c3:f4:d0:c1:ef:b3:3c:d8:
84:15:f6:fb:0c:15:00:b8:11:06:70:29:6c:7e:de:50:67:bc:
90:e5:3f:7e:29:6b:39:56:a8:da:05:fe:3e:4d:2e:96:3e:19:
0d:28:44:82:95:de:6a:2b:85:8f:d5:ca:eb:71:61:3a:60:59:
61:2d:ae:b6:43:64:54:59:15:52:1d:c5:3f:a8:d5:00:14:68:
4b:b7:8d:a7:3d:05:84:1b:b6:17:6b:a1:29:23:70:c6:2c:8a:
c9:5f:5f:9f:78:0e:5e:06:ae:42:53:f5:5a:33:57:44:23:73:
26:7b:4e:f6:5d:3d:32:d0:41:5e:ad:15:c5:3e:59:1e:82:c8:
dc:92:8d:c5:ab:b7:5b:ef:be:34:bc:cd:3c:d7:29:8e:ae:50:
46:2d:1f:69:f7:db:34:01:e5:e6:aa:25:07:91:bd:98:33:1e:
85:40:e8:39:f4:f6:60:aa:40:8f:13:5f:27:3b:65:a0:6d:e8:
74:2b:77:14:3f:a7:ba:62:87:16:e0:fd:2b:3c:47:24:f4:42:
13:91:d0:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcwMUUxMTAvBgNVBAUTKDUwREUxQzYwNzMzRUEyQjhCNzZFODQwMzYwOTE4RTFG
MjVDNDZFNDMwHhcNMjYwOTE4MTgyOTM4WhcNMjYwOTI1MTgyOTM4WjAYMRYwFAYD
VQQDEw02YWFkODMxMy0yMGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxmhifOhd9OIpqIItwP5fRv9nEe8gMOXvQF3vwdtN6hMVeAnP56XGkHLCQpdm
3keHJNdTJQdfnONXxK4BwQzVnFLXE53lAH9ww8RS7KT2o2uGaw8+0J6Eiqp90GHa
fiAKRH2phJT8kHKff2IS+3Y55jxdXBx/rjCV//GFswQ7c9TmrmcFyvJKBgZNlpwh
CwyTApRjG6A12df8FMBNAVVdnwQbztCzi4IVppDoDSAxVir7GhVUQu+p9XH4p5ix
PjJToGMqqjOXx4fI4TQRffPdWuyXs+d/K6uNkc2j16RmCjGaIXq03TuK9wSwJVzp
dbupQumJFtC3+OSlSWVsN7Y0VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC0svB3C
TOgMrBRCJqgdRz+tskcWMB8GA1UdIwQYMBaAFFDeHGBzPqK4t26EA2CRjh8lxG5D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAxRS83ODVEN0VEMjFD
MDgxMUVBODU3NkIxNTFDNEY5QUUwMi9VTjRjWUhNLW9yaTNib1FEWUpHT0h5WEVi
a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VONGNZSE0tb3JpM2JvUURZSkdPSHlYRWJrTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzAxRS83ODVEN0VEMjFDMDgxMUVBODU3NkIxNTFDNEY5QUUwMi9VTjRjWUhNLW9y
aTNib1FEWUpHT0h5WEVia00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs0WqAEisdX6Pi6Xk0+1g9LRy4LHttngj8iLMirjyZmDiNl5jAp4QztzJ6ElH
EsP00MHvszzYhBX2+wwVALgRBnApbH7eUGe8kOU/filrOVao2gX+Pk0ulj4ZDShE
gpXeaiuFj9XK63FhOmBZYS2utkNkVFkVUh3FP6jVABRoS7eNpz0FhBu2F2uhKSNw
xiyKyV9fn3gOXgauQlP1WjNXRCNzJntO9l09MtBBXq0VxT5ZHoLI3JKNxau3W+++
NLzNPNcpjq5QRi0faffbNAHl5qolB5G9mDMehUDoOfT2YKpAjxNfJztloG3odCt3
FD+numKHFuD9KzxHJPRCE5HQ/w==
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:56:34 2026 by rpki-client