
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
File: S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json)
Hash identifier: EpEIV3i59/h1polExKq3yn2TFX2B5AAm9+NyfObX5Is=
Subject key identifier: 83:5C:A1:12:21:83:85:B3:C7:A9:5D:99:BE:A4:75:28:D0:90:62:E3
Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA
Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
Manifest number: 01CD
Signing time: Sat 13 Jun 2026 03:47:28 +0000
Manifest this update: Sat 13 Jun 2026 03:47:28 +0000
Manifest next update: Sat 20 Jun 2026 03:47:28 +0000
Files and hashes: 1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: D+cxlDaxnUqEZ6Vtr0ng/QVYG4H1FFWx3NI7Mqg3jiw=)
2: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: QKv7DuW7py1p1eN4Lvl//mFlbdahxq73NkUDVPwAcGE=)
3: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: qPfNRqtUl8ZoRHAU3x9Cq02LILBulhmFpAHU6RhUKSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl
rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
Validity
Not Before: Jun 13 03:47:28 2026 GMT
Not After : Jun 20 03:47:28 2026 GMT
Subject: CN=6a2cd2d0-f880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:25:30:98:82:f1:c8:37:8c:8d:88:46:c9:
81:f5:61:17:4d:30:2d:21:e1:2e:b3:02:34:1f:08:
21:b7:42:9b:5b:c2:f8:09:68:25:29:7e:5e:92:20:
2b:4f:9e:6b:dd:75:44:69:cf:32:0e:be:b9:45:26:
c5:21:f4:2a:39:3f:e6:9b:cd:eb:d0:2d:06:84:32:
cf:4f:06:e4:01:54:23:b9:70:15:1b:08:4a:49:bf:
4c:30:f9:6c:df:80:44:68:d1:3d:84:e5:4f:f5:22:
f4:85:d1:da:a1:7c:9b:ca:e0:aa:7a:70:af:d9:4e:
b4:73:76:7b:1b:a5:f4:12:32:56:0f:c6:55:e3:c9:
01:96:bc:37:8d:7d:97:4d:bc:f8:73:3f:10:86:0b:
8c:a1:7e:b2:49:af:61:31:e0:d9:37:18:49:20:86:
82:be:6f:82:7d:36:15:1f:87:ce:ef:fb:22:f8:86:
57:6e:1f:94:e7:1d:b1:ff:19:5d:e3:4c:c1:91:65:
59:11:1c:d8:3c:e5:fa:e4:a0:e4:64:91:b1:ea:91:
92:c8:51:a1:75:67:b3:22:01:7f:1d:ed:39:88:3f:
29:c6:36:1a:d4:79:e1:a3:24:01:6d:07:62:d6:21:
03:51:b1:31:c6:74:af:c7:e9:60:ac:ab:2d:81:40:
53:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5C:A1:12:21:83:85:B3:C7:A9:5D:99:BE:A4:75:28:D0:90:62:E3
X509v3 Authority Key Identifier:
keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:3d:c3:17:54:63:91:90:ef:d3:14:72:50:78:21:a8:7b:a8:
1e:51:d1:f2:28:6d:d9:2e:12:51:b1:65:83:9b:ab:68:93:59:
40:f0:f7:fd:cb:75:24:a9:df:5a:3f:b7:08:22:76:e5:38:6a:
3b:22:d4:93:00:a6:32:c3:c1:f2:9a:c0:a8:2e:6c:d3:64:25:
69:cd:da:7c:94:5c:0f:ec:48:f0:a8:0a:41:01:6a:4d:d7:f1:
58:5b:9f:53:70:cb:21:0e:1e:99:42:14:d6:56:12:2c:52:ac:
d1:66:ab:7f:a2:37:84:11:82:67:9f:66:f8:43:ca:66:11:a9:
90:9e:00:5e:92:1b:a0:a3:71:05:cf:82:4a:12:e4:71:62:3a:
30:47:6e:bb:79:58:87:cd:56:1d:3b:4c:3c:47:96:f2:2c:4c:
60:67:c6:b7:87:21:67:1f:b9:ed:37:40:a3:23:d4:0e:14:43:
64:a1:a0:f1:98:df:76:c8:f5:62:4c:ac:28:e8:bf:6e:78:95:
11:1b:83:aa:ff:26:35:1d:15:e3:03:73:6a:3f:9a:3f:5c:77:
04:db:0d:9a:19:4c:43:0a:2d:83:88:92:ba:94:39:fe:13:58:
6d:56:7a:42:db:a8:37:58:29:be:ae:3f:e4:cc:66:88:16:64:
cb:a5:9d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:24:58 2026 by rpki-client