
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
File: UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft (raw, json)
Hash identifier: eewW9xQglVo7I/R+6MCWVej5N2JeEER9K7oT96xYW4w=
Subject key identifier: 38:6F:12:BE:92:7E:9B:EE:12:ED:2C:9C:E6:42:99:DB:53:FC:09:31
Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Certificate serial: 312A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
Manifest number: 3110
Signing time: Sat 04 Apr 2026 15:23:47 +0000
Manifest this update: Sat 04 Apr 2026 15:23:47 +0000
Manifest next update: Sat 11 Apr 2026 15:23:47 +0000
Files and hashes: 1: UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl (hash: 7y4WNLj6LFmjTmY8CX1wYqnjYxS7JxqslWeZTfI9DU8=)
2: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (hash: KI0oK487s7wSSjOCMfIRVu0m+Nax6IYTlrWQcONrqMQ=)
3: E5DB5238DFBD11EC8E203126C4F9AE02.roa (hash: ukvq4q+WUo9M3bWh6pJLSaPBet3ApLWl9pgkS4gI7ag=)
4: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (hash: q4IKP4eGJJ0oDgbAG4b8WsxXK5K7aSMyKfuwqjPJmm4=)
5: 446A425EA6BB11ED9D458785C4F9AE02.roa (hash: 6OqlVcYAqCDhteCgFv3UWoxb9hgSROAufjQ6ZVdl01Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12586 (0x312a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Validity
Not Before: Apr 4 15:23:47 2026 GMT
Not After : Apr 11 15:23:47 2026 GMT
Subject: CN=69d12d03-7913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:f5:3a:37:81:41:75:a4:80:af:6d:7c:8f:
2b:05:d5:d0:59:de:2b:5f:e6:37:58:fc:48:fc:f7:
de:85:51:3e:af:79:1c:43:d6:c9:4c:cb:bb:18:cc:
0c:9f:91:2d:50:f3:b0:40:a6:db:c1:1e:d9:cb:ad:
6e:a6:2d:69:b4:08:99:18:27:10:4d:3a:a6:12:7e:
91:86:51:cf:d5:6d:71:40:cd:c1:b9:e9:fc:b1:d0:
72:79:36:46:50:2b:39:85:ce:d2:97:3e:d1:9c:70:
f9:da:3a:0a:99:7e:20:3f:fe:15:c4:89:fe:4b:ab:
b7:7c:a0:a0:6c:9f:2e:d1:03:4f:69:99:f7:a2:9e:
e7:bd:e3:ba:b2:c7:13:d6:0b:5a:9f:63:c2:52:23:
9c:92:7c:49:6f:c1:1b:f2:93:22:a9:ac:c2:84:3c:
58:f8:14:43:5c:be:82:de:03:19:a4:9d:66:b4:03:
8a:53:35:26:8d:79:cf:80:83:f0:97:5b:c8:66:98:
95:13:19:c9:19:38:18:2d:ba:20:62:5e:75:cf:bd:
ef:54:bf:9d:4a:f2:9f:d4:a2:eb:83:41:0c:10:62:
b5:b3:d6:6f:74:a3:bf:a8:ea:95:e3:dc:fc:68:3e:
86:55:87:c9:c1:f9:2b:2a:24:e7:44:53:64:ee:79:
18:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6F:12:BE:92:7E:9B:EE:12:ED:2C:9C:E6:42:99:DB:53:FC:09:31
X509v3 Authority Key Identifier:
keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:b8:74:fe:be:f1:f0:81:4d:48:55:25:7c:bb:c3:f2:0c:d3:
f6:f6:c5:43:c1:e7:0c:21:67:f8:1b:21:52:6a:9a:bc:42:88:
56:7b:10:98:b9:b5:08:cf:2f:3a:3c:fb:f1:47:97:5c:c6:7d:
30:a4:49:8c:f1:33:b0:0c:a7:6e:37:2f:60:0a:ec:c8:67:a9:
cf:ce:94:3b:2f:73:d8:57:d1:d6:d3:58:16:ce:25:9c:0c:f4:
43:a6:4e:8a:78:f3:fc:9e:a3:98:e7:87:7c:0a:ab:78:01:91:
5c:fe:ed:73:9a:b2:07:dc:08:56:a9:8b:42:f4:6b:c0:dd:df:
bc:54:93:0c:66:c0:1b:1d:44:8c:da:18:80:d3:45:37:25:4d:
d7:b6:b7:77:1e:0b:13:46:1e:e1:ba:8d:09:c5:f6:38:2d:d6:
b3:97:f9:75:db:6a:9e:98:12:cc:7c:95:db:be:c7:ac:71:eb:
32:c5:fb:8f:3f:53:87:73:ae:59:04:a6:d5:65:3a:e6:e0:98:
d5:f4:6f:f2:eb:7f:ae:65:b2:44:61:92:50:03:da:57:45:96:
38:a0:de:1b:e2:f0:61:9e:22:c7:2e:1b:90:a1:1c:e4:9d:8e:
12:b4:94:f6:32:06:ba:4c:1f:26:6e:1a:90:82:8e:e9:fc:a7:
d3:30:e4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:46 2026 by rpki-client