
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
File: S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json)
Hash identifier: zt6F5hp+DjwB/WlQApn9nlwaj69JFhzI9Fc8HqNob/M=
Subject key identifier: 2C:F1:3E:63:4B:14:49:1D:5B:5B:08:37:11:58:A8:D9:DC:BA:A4:28
Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA
Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
Certificate serial: 01BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
Manifest number: 01AF
Signing time: Fri 17 Apr 2026 03:48:57 +0000
Manifest this update: Fri 17 Apr 2026 03:48:56 +0000
Manifest next update: Fri 24 Apr 2026 03:48:56 +0000
Files and hashes: 1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: BETeCmF+/V79FYKSRiPU1hAd4KUgHWw4RwLMUUhZTFE=)
2: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: Zp+vDxjgp9IBMQisqTAyGrA6N1rfRNHRmhhuRUlKotI=)
3: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: Mu781u2UOCsoMogGCO1asa+hOVZHkRFUxZxq0Tk4hzk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl
rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443 (0x1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
Validity
Not Before: Apr 17 03:48:56 2026 GMT
Not After : Apr 24 03:48:56 2026 GMT
Subject: CN=69e1ada8-dfa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fc:b8:d6:41:ca:47:9f:a7:9d:d6:17:98:65:
98:8c:ea:c7:f0:1c:73:33:8f:79:ef:93:0f:2a:8b:
07:7d:3c:5e:b0:5f:90:dc:9a:b9:7f:33:cb:73:28:
d2:17:fe:17:dd:5d:3d:a5:c0:f4:cb:51:32:e3:84:
bc:39:38:1a:d9:f1:da:eb:99:b3:07:38:73:15:99:
0e:e4:59:56:fd:4b:f3:1c:4a:62:d1:ca:ba:58:73:
26:d9:5d:bc:a2:db:e6:77:18:d7:4d:10:ee:80:8b:
7c:71:90:24:d1:1b:43:70:86:6b:e2:61:eb:54:fe:
4a:f0:21:5d:b7:2a:f0:80:03:66:89:0b:9a:e0:1a:
2d:ce:1b:fa:b1:52:c4:86:50:e6:5e:32:35:46:13:
01:39:2b:7a:17:17:7e:0c:92:df:c2:6b:51:c1:9e:
3a:23:0f:54:ba:de:fd:11:44:e2:38:55:dc:eb:ec:
bf:08:4b:d2:90:a1:4d:ad:1d:ae:f3:ba:33:82:17:
9a:3b:e5:76:d0:d1:bf:5c:f1:3d:2c:0c:37:77:4c:
3b:06:74:06:0e:c4:7a:c7:0f:df:0f:9e:76:27:1c:
00:1f:07:c2:17:fa:ef:13:13:23:1f:f3:ce:72:f0:
ab:72:d1:69:84:c9:00:db:52:57:0e:d9:6e:b2:ed:
fa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F1:3E:63:4B:14:49:1D:5B:5B:08:37:11:58:A8:D9:DC:BA:A4:28
X509v3 Authority Key Identifier:
keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d3:40:68:13:56:dc:f1:e6:ed:d6:a0:a8:48:ad:03:1e:f9:
19:48:71:8d:c8:ad:c3:ec:b0:aa:08:7a:88:72:5d:d9:7d:95:
57:1d:71:9b:56:fb:09:08:93:2d:f1:fb:b7:6d:3e:cf:31:f7:
74:1b:73:c4:62:f3:3c:dd:8d:5c:7a:9d:4e:38:2b:49:4c:56:
b5:c4:14:c3:27:2a:a8:73:97:06:c4:67:e2:a6:c6:fb:b2:2d:
8d:52:7d:bf:f2:d6:aa:5c:8d:66:13:94:f2:9f:c4:cf:85:7e:
6e:11:6e:24:b8:a8:76:3d:d0:92:9b:ae:58:01:a7:5d:6f:24:
13:43:30:cc:cf:22:41:0d:03:59:2f:5a:a2:39:b3:47:09:b9:
2b:56:9a:69:f0:51:ad:b4:35:23:f5:ae:52:75:a1:98:06:49:
6d:df:14:f2:39:c0:db:89:92:3f:12:ec:59:39:eb:df:86:f8:
35:69:04:c6:8a:bd:ad:67:92:5f:b3:49:5f:17:d2:3b:61:9e:
18:d5:ed:12:ed:81:b8:f3:5f:b8:cb:e4:12:84:19:3c:7c:93:
d4:af:48:13:19:80:9b:5e:29:7f:33:62:f5:79:0a:6d:30:9e:
08:03:98:f7:1c:be:ee:6f:d7:38:01:ad:c1:81:48:0c:eb:74:
d5:b5:11:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:04:35 2026 by rpki-client