
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
File: UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json)
Hash identifier: E3uDLALJFLZED244QvxfPM6hOOMrJlNRsME7u/EUqw4=
Subject key identifier: 8F:DB:3B:92:EE:B0:CD:8D:19:A1:D5:3A:42:B3:E0:AD:71:EC:A5:C4
Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A
Certificate issuer: /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A
Certificate serial: 19D1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
Manifest number: 19D1
Signing time: Thu 16 Apr 2026 16:19:02 +0000
Manifest this update: Thu 16 Apr 2026 16:19:01 +0000
Manifest next update: Thu 23 Apr 2026 16:19:01 +0000
Files and hashes: 1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: sH4VDIOkXsySiA+olj9aJ1YCTPyFznLxAAMV1desHM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl
rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6609 (0x19d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED18, serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A
Validity
Not Before: Apr 16 16:19:01 2026 GMT
Not After : Apr 23 16:19:01 2026 GMT
Subject: CN=69e10bf5-2bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:eb:31:78:33:b3:1e:86:37:14:0e:3b:85:
b7:3b:af:6c:1f:75:5d:25:e7:45:af:08:84:a8:ee:
a4:00:fb:a4:c4:ad:a6:c8:ac:c3:b4:d8:5a:27:fc:
00:a0:57:00:eb:e5:54:c6:4c:ea:af:2d:f8:4a:c8:
ee:fa:24:db:54:6f:1a:70:44:db:0e:19:e8:2b:21:
c8:d2:9e:02:85:d8:02:64:65:23:00:38:29:72:26:
1c:0a:3c:6b:93:0f:11:e4:6f:46:34:13:da:87:93:
87:7b:da:5f:68:ef:36:75:dd:cc:14:14:69:bf:c7:
ad:7e:3e:25:d0:f5:c1:eb:a6:9d:3e:e8:1b:e5:0f:
9e:11:0e:15:49:b5:70:db:d3:07:c8:5b:ef:3f:80:
02:d7:eb:c5:1c:5d:7a:27:b3:64:61:eb:1b:fe:1c:
85:08:06:d9:4a:8d:73:35:5b:33:6b:ea:6e:30:9e:
ba:4a:e1:90:7f:3f:79:a7:e1:8f:0a:a5:b6:22:af:
60:c7:dc:21:0d:29:5b:22:67:13:60:9b:2b:60:72:
89:ce:7c:a5:a1:5f:4a:61:f9:1f:a7:a2:f9:19:3b:
00:db:59:00:4c:ee:87:a3:6a:42:e7:6b:fb:0d:9a:
fb:c6:6f:11:9b:ec:ae:20:86:31:72:a9:a9:0f:e3:
8f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DB:3B:92:EE:B0:CD:8D:19:A1:D5:3A:42:B3:E0:AD:71:EC:A5:C4
X509v3 Authority Key Identifier:
keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:79:39:b1:79:8e:0b:6d:4c:b8:c2:7b:b5:0f:2b:bf:a3:d7:
3f:21:3d:bf:f0:8b:21:97:42:0e:5e:4f:5a:b1:48:e4:8b:f4:
04:36:b8:db:4d:30:ee:f3:48:60:05:48:70:b3:9a:29:b1:51:
70:c0:82:d5:af:57:21:d1:92:5c:05:65:d7:58:8a:e3:46:f1:
4e:13:44:da:a9:92:41:6c:3e:75:f5:ee:0a:38:4f:57:98:03:
65:d2:03:3a:b2:d6:9f:75:7d:1d:c4:7d:14:29:99:04:2f:e4:
b5:ec:99:f0:0d:20:0a:bb:37:b7:10:99:04:e7:46:cc:dc:d5:
05:07:5f:a0:bd:50:46:a0:92:48:65:bb:e0:73:d6:bd:ef:6e:
b5:c4:b7:d3:e7:03:71:8c:a4:2c:77:0d:cc:9d:f0:c5:b7:4e:
f5:50:e7:72:78:9a:d2:29:93:3c:f5:81:ee:42:c2:82:01:71:
66:82:27:61:b7:9e:1a:be:41:01:58:7c:3b:42:2f:c7:63:10:
ce:e5:a7:1a:da:9c:be:cd:eb:13:df:53:d0:7d:b8:30:68:66:
f5:20:1a:dc:41:6f:75:08:e7:a5:e5:1d:76:4e:52:e1:fd:95:
58:61:c5:39:2e:d4:a6:7a:06:58:c1:a4:6d:f1:b6:e1:2d:1d:
02:c2:be:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:12 2026 by rpki-client