
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
File: S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json)
Hash identifier: 1hSaZ6w9uagWypbF77G8ULJQElXKZA7EzNiyLft5284=
Subject key identifier: 99:83:B7:20:A5:A5:FF:F8:BE:E1:63:E5:1D:66:BB:EC:11:51:87:21
Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA
Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
Certificate serial: 021C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
Manifest number: 020B
Signing time: Wed 07 Oct 2026 03:37:35 +0000
Manifest this update: Wed 07 Oct 2026 03:37:35 +0000
Manifest next update: Wed 14 Oct 2026 03:37:35 +0000
Files and hashes: 1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: Ylz435Lm8KX5YVCB4bW5f4FsSLBBicvSnDRjL5hfQag=)
2: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: b9XqOa9Ho+avZxDvDMO6N3hEMkVQIb3B3KdXGA4iZxw=)
3: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: qPfNRqtUl8ZoRHAU3x9Cq02LILBulhmFpAHU6RhUKSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl
rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
Validity
Not Before: Oct 7 03:37:35 2026 GMT
Not After : Oct 14 03:37:35 2026 GMT
Subject: CN=6ac5be7f-371d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:37:49:d3:1c:64:3f:f3:f4:3e:8f:53:6e:
91:36:cb:7f:b6:95:23:63:6f:39:74:dc:02:d8:e3:
00:73:96:a7:41:7f:e2:75:da:b0:d0:58:78:e3:ec:
89:07:65:4b:31:d3:c6:f8:57:b3:5d:2f:a0:0d:a9:
c3:84:75:16:07:7c:a7:72:cb:52:f5:91:c3:0b:62:
15:d9:7d:07:a7:01:2f:0f:ce:bf:5f:8d:97:34:da:
4c:32:00:bb:99:97:da:4e:53:fd:74:6c:61:5e:18:
50:85:14:e1:f0:3e:30:9b:af:0c:e5:e8:cb:a3:1b:
68:2c:ef:4d:1a:f9:0c:65:ea:b7:94:0a:09:f6:19:
4d:0c:d2:d6:3d:ab:4f:d3:42:69:ec:92:ac:0d:00:
b9:63:54:94:bf:eb:a8:85:a3:d2:40:85:6d:ef:46:
4b:49:ee:8f:fa:22:92:2e:6e:68:f5:76:f0:44:06:
32:02:72:7c:df:1d:84:94:6f:61:f1:f5:47:60:58:
db:99:6e:90:1a:ea:7f:7a:41:d3:3f:6a:7c:57:08:
12:37:2d:97:71:e8:65:20:2a:d9:c5:d1:36:72:57:
5b:2b:d0:23:c4:7c:02:58:0f:d5:20:19:a2:77:f4:
fa:44:77:8d:9b:07:ab:b0:b7:52:25:fe:09:43:c1:
2a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:83:B7:20:A5:A5:FF:F8:BE:E1:63:E5:1D:66:BB:EC:11:51:87:21
X509v3 Authority Key Identifier:
keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c9:3d:02:12:cb:10:67:24:cf:50:6e:44:80:b3:27:bd:77:
1f:08:1c:73:b5:71:08:4e:b2:f8:84:28:db:6f:0c:e7:8d:44:
c3:98:c0:1f:49:96:91:92:bb:10:28:40:d6:12:ef:a8:7c:5c:
e6:74:dd:50:86:31:5a:3c:f6:6d:3e:20:e1:cd:9b:eb:1f:a9:
b3:ba:db:ca:9a:f8:1d:b2:e1:fa:49:a6:58:de:a5:86:b3:74:
e4:63:dd:5b:f6:6b:b9:30:98:5a:b5:16:52:09:6b:5a:d3:36:
69:f3:1e:75:fb:55:e7:bf:6a:0b:2d:b8:8a:35:3b:94:7a:c3:
b4:1d:8f:2d:39:01:71:63:ed:c6:a7:66:81:a5:cf:27:59:7d:
ee:26:44:40:a7:64:27:61:1b:2e:f3:ce:5b:73:ff:4c:79:db:
f6:56:6c:1d:76:0f:35:3f:36:a2:de:52:52:58:ac:86:d9:6a:
71:04:cd:a7:d6:37:98:8f:37:08:df:4d:e3:29:b1:ca:20:ef:
8c:f6:e4:c1:24:56:33:93:66:9d:45:de:2e:08:68:7f:38:92:
bf:d8:31:b2:0f:92:52:88:d1:01:00:76:f8:9a:05:5f:9c:9c:
a7:ad:01:d4:ab:58:66:2e:0b:a5:4d:a4:e1:76:8c:d1:7a:dc:
e1:72:cd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:26:54 2026 by rpki-client