
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
File: UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft (raw, json)
Hash identifier: 599wFdPNSS3KcjK74zDJJpI22ptZB0CWj3rs3nopTOo=
Subject key identifier: 64:76:00:18:B9:40:92:9B:D0:89:32:06:3F:61:86:21:96:17:B4:C4
Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Certificate serial: 3141
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
Manifest number: 3127
Signing time: Wed 20 May 2026 15:26:47 +0000
Manifest this update: Wed 20 May 2026 15:26:46 +0000
Manifest next update: Wed 27 May 2026 15:26:46 +0000
Files and hashes: 1: UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl (hash: iPFSVQheA9DK2QX+9Dsp80YVgLjhNIrDGJ5u0hAafs4=)
2: E5DB5238DFBD11EC8E203126C4F9AE02.roa (hash: ukvq4q+WUo9M3bWh6pJLSaPBet3ApLWl9pgkS4gI7ag=)
3: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (hash: q4IKP4eGJJ0oDgbAG4b8WsxXK5K7aSMyKfuwqjPJmm4=)
4: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (hash: KI0oK487s7wSSjOCMfIRVu0m+Nax6IYTlrWQcONrqMQ=)
5: 446A425EA6BB11ED9D458785C4F9AE02.roa (hash: 6OqlVcYAqCDhteCgFv3UWoxb9hgSROAufjQ6ZVdl01Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 15:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12609 (0x3141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Validity
Not Before: May 20 15:26:46 2026 GMT
Not After : May 27 15:26:46 2026 GMT
Subject: CN=6a0dd2b6-90ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:56:8c:17:7e:21:f3:49:5c:5c:dd:87:c4:
8d:72:ba:77:48:5c:8a:9b:c8:c4:07:c9:73:c9:8f:
a1:89:77:ab:81:50:1f:19:ac:1c:0d:7b:ef:b1:42:
99:ce:64:38:81:72:28:cb:dd:31:86:90:4c:8e:6b:
7e:b3:5e:cd:5b:98:f7:a2:ac:a7:7d:1c:48:00:f8:
49:de:63:48:e8:73:ae:50:8f:08:e0:d9:7e:39:17:
2e:b2:7b:db:8e:ba:19:d3:ac:d5:92:b0:b4:f1:1a:
3e:95:83:3c:ca:62:58:71:1d:3c:14:5b:69:90:9f:
45:47:3e:6f:8d:37:ad:15:00:22:08:55:62:b4:e1:
2b:da:65:fa:cb:96:c0:0d:26:a4:4b:e4:3a:ef:6f:
dc:8f:7f:90:cf:d3:4b:73:05:b5:d0:29:dd:2a:c6:
7c:09:59:3a:e6:51:d7:57:3d:54:b2:94:35:c5:09:
3a:52:23:51:5d:ab:8e:ea:0d:3e:8d:8c:a4:08:4e:
66:a9:41:d9:d0:fd:ac:9e:b9:95:56:5b:31:e0:2c:
4f:ab:1d:ad:01:9b:95:3f:66:4a:68:b4:e3:76:76:
56:93:0c:0b:b8:e6:8d:f5:43:90:14:bd:ab:79:70:
11:db:f0:f9:53:74:5f:cf:0e:c2:35:1a:4f:9f:33:
79:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:76:00:18:B9:40:92:9B:D0:89:32:06:3F:61:86:21:96:17:B4:C4
X509v3 Authority Key Identifier:
keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:96:a9:59:87:c3:04:b3:db:f6:51:73:19:5e:b2:a7:c3:cd:
04:76:f4:55:d1:45:8c:b3:8b:19:1f:6e:d1:3e:f0:be:85:0f:
3c:75:6a:9d:21:69:75:6d:5e:e5:f9:fe:98:74:e8:54:9a:3f:
80:b9:27:18:d5:9a:54:82:08:3b:34:bc:81:b8:0b:31:58:9d:
6d:ce:e2:dc:2d:bc:76:2a:d3:97:a8:f2:53:94:ef:3f:6c:12:
44:09:9a:28:97:d1:6c:ab:db:e6:af:92:77:73:12:f8:b4:d9:
ea:fd:15:8d:5c:ee:be:31:e4:7d:50:6b:c8:a8:ce:3c:71:7d:
b0:eb:3b:43:a5:c6:31:0e:9d:d7:e0:fc:14:5a:f4:35:67:2c:
aa:66:71:61:5b:48:bf:31:57:00:61:76:95:82:a4:c6:a3:fb:
b5:48:f0:10:d2:a2:5f:c8:fb:f9:bc:31:c2:8f:00:aa:28:60:
2b:cf:27:22:c7:86:b6:14:3f:ae:8f:1e:cf:92:d4:c3:ec:d3:
15:2b:b6:55:0d:0e:b8:4a:7f:b4:21:74:74:e7:55:de:1d:5a:
7f:3f:23:92:59:a8:28:d8:e3:2a:e4:b8:55:21:37:66:ba:db:
cb:ba:2e:80:d8:65:0e:30:f6:af:2a:25:9c:19:6f:d6:8b:84:
01:60:9f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:23:32 2026 by rpki-client