
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
File: Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft (raw, json)
Hash identifier: LcKen16o39P8lgh9Eumvx/buyPTxGjnW+9l4v2ulatw=
Subject key identifier: D0:BB:3B:65:52:19:18:B6:D4:6E:79:FE:FF:B7:08:99:DD:E8:38:A9
Authority key identifier: 51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98
Certificate issuer: /CN=A9183B33/serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798
Certificate serial: 06F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
Manifest number: 06ED
Signing time: Thu 16 Apr 2026 22:05:13 +0000
Manifest this update: Thu 16 Apr 2026 22:05:13 +0000
Manifest next update: Thu 23 Apr 2026 22:05:13 +0000
Files and hashes: 1: Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl (hash: jAtRDQVxciFjiQyx09FFZd0dSGaBmilqThVnxEeP6uw=)
2: 59018DEE340611ED9C72786AC4F9AE02.roa (hash: 7UDwHDZ3X7GHUQ2fV389Pi1SQYF3Qm8coRADgJTI7xI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl
rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1784 (0x6f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183B33, serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798
Validity
Not Before: Apr 16 22:05:13 2026 GMT
Not After : Apr 23 22:05:13 2026 GMT
Subject: CN=69e15d19-9949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a9:ff:ce:c7:7d:b9:28:63:af:87:81:e8:3f:
1b:4f:99:de:0a:1e:68:39:14:a3:07:ec:04:53:bf:
c5:81:e8:89:25:dc:1c:1c:96:89:5f:32:58:36:6b:
fc:df:bb:f1:69:09:5d:7d:f7:2f:3a:d4:86:28:52:
18:aa:fc:86:66:8e:ac:d4:0b:2d:d0:77:62:60:dc:
27:3e:15:d3:68:5c:ea:d2:18:0a:86:b8:f8:a5:77:
4a:e5:5c:35:ff:c2:39:8f:a4:e8:88:6d:b4:c8:ac:
e3:ed:18:f0:bc:fd:8e:3a:a8:93:00:7d:24:60:da:
24:e6:52:48:ad:ad:e2:7d:b0:fc:fe:95:0b:97:55:
8c:47:06:d3:01:dc:c4:ee:e8:d8:52:ac:c9:1d:4f:
e5:c8:64:9d:57:24:68:69:67:97:97:d3:eb:9b:79:
86:01:51:77:a1:f3:f8:b0:41:29:7f:69:eb:5d:a7:
c0:bf:65:7b:a6:15:c1:73:7a:79:1c:52:e0:00:e8:
1c:37:4e:68:b6:0a:6f:f2:c9:6f:70:ec:b5:54:83:
27:9f:23:cd:b2:fd:75:21:8e:d8:1c:29:16:d2:2b:
88:22:ec:6e:8c:e2:d6:d5:09:16:88:aa:aa:7b:5a:
e7:e0:53:df:33:10:f0:42:25:30:41:52:d1:f6:26:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BB:3B:65:52:19:18:B6:D4:6E:79:FE:FF:B7:08:99:DD:E8:38:A9
X509v3 Authority Key Identifier:
keyid:51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:67:a1:15:2a:ed:a6:4d:2c:12:4c:8f:19:ae:6c:e7:17:1b:
13:f3:b8:f5:eb:63:fc:4d:96:c2:a9:0e:ab:85:05:12:6b:7e:
89:b0:18:b5:44:f1:bf:5a:c8:b6:13:26:bc:3b:3c:50:e8:05:
f7:35:58:ad:e4:77:62:dd:10:9f:f2:ad:30:4b:25:2b:a2:03:
8c:50:1f:2d:e6:74:35:e8:17:6f:01:b7:74:47:24:16:fa:74:
39:e8:4c:23:78:42:d7:dd:c7:4e:d7:d3:26:d4:26:92:5d:57:
cd:33:00:05:99:92:75:2b:14:37:dd:90:7c:4d:c2:ca:b0:2b:
1c:65:d8:8b:d2:f7:a5:f1:20:95:ab:b5:b4:e5:9f:79:fa:a1:
84:23:70:a6:ef:a9:56:8d:fd:b3:74:8d:08:d9:0b:26:4f:8f:
15:06:3d:0f:18:cd:5f:52:56:2e:01:f1:1d:45:f4:0a:fc:01:
86:d2:8c:16:63:4a:46:37:41:a2:36:cb:e1:92:1b:26:da:6b:
2d:ed:86:f6:d3:89:da:6a:45:ca:58:dd:e4:a5:f9:1e:32:bc:
80:36:3f:67:54:9c:5d:8b:b4:3c:c2:57:46:44:ba:ad:b7:d6:
1d:19:2f:b1:81:1c:aa:79:97:2c:ac:21:9d:d2:97:16:44:90:
b7:62:e2:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNCMzMxMTAvBgNVBAUTKDUxQUVCQTIzRkI3NDVBNTUzQTVFNDk5NkRGMUM4MTcz
NDczRjE3OTgwHhcNMjYwNDE2MjIwNTEzWhcNMjYwNDIzMjIwNTEzWjAYMRYwFAYD
VQQDEw02OWUxNWQxOS05OTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlan/zsd9uShjr4eB6D8bT5neCh5oORSjB+wEU7/FgeiJJdwcHJaJXzJYNmv8
37vxaQldffcvOtSGKFIYqvyGZo6s1Ast0HdiYNwnPhXTaFzq0hgKhrj4pXdK5Vw1
/8I5j6ToiG20yKzj7RjwvP2OOqiTAH0kYNok5lJIra3ifbD8/pULl1WMRwbTAdzE
7ujYUqzJHU/lyGSdVyRoaWeXl9Prm3mGAVF3ofP4sEEpf2nrXafAv2V7phXBc3p5
HFLgAOgcN05otgpv8slvcOy1VIMnnyPNsv11IY7YHCkW0iuIIuxujOLW1QkWiKqq
e1rn4FPfMxDwQiUwQVLR9iYmcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNC7O2VS
GRi21G55/v+3CJnd6DipMB8GA1UdIwQYMBaAFFGuuiP7dFpVOl5Jlt8cgXNHPxeY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0IzMy9DRDM1REIxQTkx
MjQxMUVCOUI3MjkwM0FDNEY5QUUwMi9VYTY2SV90MFdsVTZYa21XM3h5QmMwY19G
NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VhNjZJX3QwV2xVNlhrbVczeHlCYzBjX0Y1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0IzMy9DRDM1REIxQTkxMjQxMUVCOUI3MjkwM0FDNEY5QUUwMi9VYTY2SV90MFds
VTZYa21XM3h5QmMwY19GNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM2ehFSrtpk0sEkyPGa5s5xcbE/O49etj/E2WwqkOq4UFEmt+ibAYtUTxv1rI
thMmvDs8UOgF9zVYreR3Yt0Qn/KtMEslK6IDjFAfLeZ0NegXbwG3dEckFvp0OehM
I3hC193HTtfTJtQmkl1XzTMABZmSdSsUN92QfE3CyrArHGXYi9L3pfEglau1tOWf
efqhhCNwpu+pVo39s3SNCNkLJk+PFQY9DxjNX1JWLgHxHUX0CvwBhtKMFmNKRjdB
ojbL4ZIbJtprLe2G9tOJ2mpFyljd5KX5HjK8gDY/Z1ScXYu0PMJXRkS6rbfWHRkv
sYEcqnmXLKwhndKXFkSQt2Lilg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:33:55 2026 by rpki-client