
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
File: ULpjuT-CkSle5HAxuWtFzaXCSw0.mft (raw, json)
Hash identifier: SlcgcxgaKaslkIH74zG+DllLTtrWp0JYz+MWyNa+cwM=
Subject key identifier: 95:64:00:DF:4A:B0:D1:80:77:3B:40:29:BB:FA:3A:97:A9:98:0B:7E
Authority key identifier: 50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D
Certificate issuer: /CN=A9199CFF/serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D
Certificate serial: 013F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
Manifest number: 013B
Signing time: Sat 19 Sep 2026 05:37:37 +0000
Manifest this update: Sat 19 Sep 2026 05:37:37 +0000
Manifest next update: Sat 26 Sep 2026 05:37:37 +0000
Files and hashes: 1: ULpjuT-CkSle5HAxuWtFzaXCSw0.crl (hash: s7SlTJ+sdvtsvwB48xLhKr3631/upu2Xd1NyJgnn5Uk=)
2: 42D62828962711F0B74FEE0CC4F9AE02.roa (hash: dEqBDGsqeiUN91FwP/nGNGZY5s+Bv1LRGDa/upjDjdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl
rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 05:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319 (0x13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199CFF, serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D
Validity
Not Before: Sep 19 05:37:37 2026 GMT
Not After : Sep 26 05:37:37 2026 GMT
Subject: CN=6aae1fa1-f087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:c0:4c:74:10:18:15:8a:50:16:8e:b7:cf:
a0:2c:d4:df:01:06:61:dc:77:c7:7a:59:db:9e:60:
e1:68:9b:d4:aa:8f:e6:95:4c:e8:51:31:53:d6:70:
cc:95:dc:d7:6e:01:51:14:54:4b:de:ff:d3:67:4e:
4d:4c:c1:62:58:b9:a2:fa:d2:cf:9c:89:92:bb:7a:
f4:a7:53:d0:bd:6a:bf:85:90:18:dd:28:b0:2e:db:
8c:c5:8d:37:5c:83:a7:46:ce:66:b5:b2:92:4c:d4:
38:a8:86:77:dc:d1:1a:e7:d0:a3:0c:36:ff:9b:4d:
02:82:fb:7c:47:53:aa:9c:ed:d1:57:df:77:26:ff:
53:5e:5e:21:eb:a2:1b:3e:c6:14:28:6c:3f:74:20:
e1:0b:91:37:0e:6c:e0:e7:f5:5f:0f:ee:0a:2b:0d:
5d:dd:e4:09:98:29:aa:69:02:7f:19:d0:af:c4:46:
c9:36:b3:98:2a:5b:e1:e2:f0:96:d4:81:59:ed:ca:
4a:1e:9f:c4:d6:db:cd:08:a6:4c:15:7d:f9:92:63:
29:88:15:ac:4a:2f:5f:fc:13:bc:30:bd:99:5f:82:
e8:0d:fd:f4:8f:36:36:54:73:4f:cd:02:28:c0:a5:
0e:de:89:07:c9:2e:19:fb:6b:f4:bc:4e:a6:2e:ce:
8a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:64:00:DF:4A:B0:D1:80:77:3B:40:29:BB:FA:3A:97:A9:98:0B:7E
X509v3 Authority Key Identifier:
keyid:50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:f3:b2:2f:7b:62:37:47:28:0e:d5:b5:77:0f:4c:f8:f5:02:
63:2f:46:9b:d3:1d:5d:49:b2:80:93:84:db:ea:5d:be:2a:12:
f9:71:7b:a9:36:46:24:fa:e5:7b:aa:43:c1:bd:ae:1f:66:ff:
3c:9a:58:e9:9e:f5:31:6e:d9:47:2d:b6:da:2e:73:26:6d:31:
c5:a7:a6:45:7d:2b:d6:0d:b3:2a:63:03:21:95:47:cc:76:96:
57:98:e5:88:66:2a:6d:76:46:f1:a5:bc:94:4a:7f:bc:73:89:
7b:4f:e7:48:f4:3c:a1:c3:66:90:65:3c:0c:6e:f8:1b:e3:b7:
99:ef:b1:ba:96:07:a6:af:da:3e:c0:32:47:a7:bf:0d:3c:f7:
aa:cd:60:2a:0e:b0:78:59:5a:bd:26:9d:28:4b:13:9e:15:91:
2d:cf:8d:34:94:d5:f5:da:6e:1d:ec:62:72:c0:f0:7f:4d:22:
e8:50:5e:3a:d9:30:34:55:a0:75:1f:bf:90:f3:5a:80:25:09:
3d:11:7d:0c:ac:b6:f4:de:7f:bb:35:45:64:90:e8:4c:d5:c7:
42:97:6f:e1:5f:27:b7:f2:de:7f:63:46:92:0e:e4:36:ed:9d:
09:dc:4c:12:64:02:fe:7d:e6:99:63:1c:90:7b:4f:33:6c:6c:
fb:67:aa:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlDRkYxMTAvBgNVBAUTKDUwQkE2M0I5M0Y4MjkxMjk1RUU0NzAzMUI5NkI0NUNE
QTVDMjRCMEQwHhcNMjYwOTE5MDUzNzM3WhcNMjYwOTI2MDUzNzM3WjAYMRYwFAYD
VQQDEw02YWFlMWZhMS1mMDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsaHATHQQGBWKUBaOt8+gLNTfAQZh3HfHelnbnmDhaJvUqo/mlUzoUTFT1nDM
ldzXbgFRFFRL3v/TZ05NTMFiWLmi+tLPnImSu3r0p1PQvWq/hZAY3SiwLtuMxY03
XIOnRs5mtbKSTNQ4qIZ33NEa59CjDDb/m00Cgvt8R1OqnO3RV993Jv9TXl4h66Ib
PsYUKGw/dCDhC5E3Dmzg5/VfD+4KKw1d3eQJmCmqaQJ/GdCvxEbJNrOYKlvh4vCW
1IFZ7cpKHp/E1tvNCKZMFX35kmMpiBWsSi9f/BO8ML2ZX4LoDf30jzY2VHNPzQIo
wKUO3okHyS4Z+2v0vE6mLs6KHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJVkAN9K
sNGAdztAKbv6OpepmAt+MB8GA1UdIwQYMBaAFFC6Y7k/gpEpXuRwMblrRc2lwksN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUNGRi8yQUUxNkE1OEQ3
RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9VTHBqdVQtQ2tTbGU1SEF4dVd0RnphWENT
dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VMcGp1VC1Da1NsZTVIQXh1V3RGemFYQ1N3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUNGRi8yQUUxNkE1OEQ3RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9VTHBqdVQtQ2tT
bGU1SEF4dVd0RnphWENTdzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJfOyL3tiN0coDtW1dw9M+PUCYy9Gm9MdXUmygJOE2+pdvioS+XF7qTZGJPrl
e6pDwb2uH2b/PJpY6Z71MW7ZRy222i5zJm0xxaemRX0r1g2zKmMDIZVHzHaWV5jl
iGYqbXZG8aW8lEp/vHOJe0/nSPQ8ocNmkGU8DG74G+O3me+xupYHpq/aPsAyR6e/
DTz3qs1gKg6weFlavSadKEsTnhWRLc+NNJTV9dpuHexicsDwf00i6FBeOtkwNFWg
dR+/kPNagCUJPRF9DKy29N5/uzVFZJDoTNXHQpdv4V8nt/Lef2NGkg7kNu2dCdxM
EmQC/n3mmWMckHtPM2xs+2eqDQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:44:57 2026 by rpki-client