
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
File: UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json)
Hash identifier: hSFvdMu/GxZRgguP/52ZGd3zANg5xrGAOoApVhgCYsY=
Subject key identifier: 41:27:7A:31:24:5E:5A:D3:F6:59:C9:A2:1B:31:6A:22:63:AC:07:41
Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0
Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0
Certificate serial: 0AF7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
Manifest number: 0AED
Signing time: Sat 04 Apr 2026 19:12:48 +0000
Manifest this update: Sat 04 Apr 2026 19:12:48 +0000
Manifest next update: Sat 11 Apr 2026 19:12:48 +0000
Files and hashes: 1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: f+F0hTYdiXWZfxYEVt+zkx6fsrGd9CFOxLhoel7Ximg=)
2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: bP8YW/usVEPebr8yo+q/K5uFmrIVy5PiorRcfqJheHQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl
rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:12:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2807 (0xaf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149DF2, serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0
Validity
Not Before: Apr 4 19:12:48 2026 GMT
Not After : Apr 11 19:12:48 2026 GMT
Subject: CN=69d162b0-d423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d5:0e:3e:6a:75:0a:8c:ec:33:d0:e9:11:4f:
ba:d2:b8:2b:28:15:f3:64:02:d9:d1:9e:4a:31:53:
28:1a:6b:05:b3:78:c2:b2:2e:7c:ea:b2:8c:83:d5:
33:ba:45:2c:ba:7e:f4:1c:7f:cf:89:78:f6:94:bc:
e3:f5:b5:2d:ee:ce:43:1f:e4:7d:c6:46:d1:b9:47:
51:d5:de:ff:cb:ef:ed:66:d7:2c:56:cf:18:89:d6:
c3:13:12:75:77:4e:25:20:44:5c:2e:2b:98:f4:48:
5c:40:03:55:16:2d:35:ab:c8:74:39:ea:c7:77:87:
f5:bc:99:69:40:1c:ef:a5:da:f1:b7:82:f6:4c:25:
b8:f7:3d:62:e7:44:bd:ec:c2:82:8b:b3:e5:fc:dc:
66:1e:2b:71:c5:e3:d2:4e:b9:02:2e:7e:50:f6:3b:
a6:33:25:a3:31:dd:6c:a3:69:68:62:a1:45:5d:58:
42:25:87:0e:18:5b:fc:43:d1:f3:e6:8f:30:a0:f0:
55:58:e6:d7:2e:c2:2e:1e:35:ac:d9:6f:69:a1:0a:
66:53:e6:6b:46:71:75:f7:55:a7:fc:81:d1:f4:6b:
ac:0b:af:02:9a:5f:0e:c3:0b:cb:4a:13:ae:18:9a:
4a:ba:d5:d9:4a:67:6e:6e:85:fb:be:1e:2f:02:81:
58:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:27:7A:31:24:5E:5A:D3:F6:59:C9:A2:1B:31:6A:22:63:AC:07:41
X509v3 Authority Key Identifier:
keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:2c:a5:17:c7:6a:91:37:ad:b5:5d:44:47:fc:d3:2a:57:44:
fc:3d:4b:57:b7:4a:f6:71:08:f8:39:04:c2:fa:ad:73:fb:e6:
af:b1:3d:38:39:91:7d:b4:15:18:ca:f1:cc:36:08:04:8d:38:
5b:d8:36:c0:d5:06:50:9b:2d:c5:a9:2e:e6:5e:5b:a7:ee:73:
9c:9d:bf:fe:df:98:3b:01:24:33:b1:c1:d1:d7:47:6f:7e:5a:
69:63:21:0d:7b:b2:7d:0f:85:92:17:e5:e7:76:c5:2f:0e:4a:
51:0f:97:ed:f8:25:6e:87:61:b9:ee:b0:d8:af:3c:ea:fe:f9:
0e:75:05:5a:40:31:7b:d6:c2:6a:8d:61:83:ce:a8:03:ca:ce:
fe:5d:56:d4:ce:f6:bb:ca:a1:33:7d:e7:f3:8a:a3:5b:8f:83:
d2:1d:5a:d2:6a:0c:6b:f4:9b:a9:09:36:b0:29:aa:08:0e:70:
06:3c:c2:bd:6a:f2:c0:f9:b8:98:97:cc:35:d9:4a:4a:f0:19:
b2:22:70:84:ec:f0:12:65:94:09:1e:dc:e0:35:67:55:10:bf:
3f:d6:ab:68:7a:0b:69:5a:3c:e5:29:fa:e5:c0:8b:13:cb:42:
fc:b0:36:0d:56:d0:40:3d:77:eb:1d:ae:ea:3d:74:a3:c2:87:
ab:42:f2:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlERjIxMTAvBgNVBAUTKDUwRUZFMURGNzI5MTVFRDMzNjFEQjU1OUI1QjZCODNF
QUUzRUYzQzAwHhcNMjYwNDA0MTkxMjQ4WhcNMjYwNDExMTkxMjQ4WjAYMRYwFAYD
VQQDEw02OWQxNjJiMC1kNDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAytUOPmp1CozsM9DpEU+60rgrKBXzZALZ0Z5KMVMoGmsFs3jCsi586rKMg9Uz
ukUsun70HH/PiXj2lLzj9bUt7s5DH+R9xkbRuUdR1d7/y+/tZtcsVs8YidbDExJ1
d04lIERcLiuY9EhcQANVFi01q8h0OerHd4f1vJlpQBzvpdrxt4L2TCW49z1i50S9
7MKCi7Pl/NxmHitxxePSTrkCLn5Q9jumMyWjMd1so2loYqFFXVhCJYcOGFv8Q9Hz
5o8woPBVWObXLsIuHjWs2W9poQpmU+ZrRnF191Wn/IHR9GusC68Cml8OwwvLShOu
GJpKutXZSmduboX7vh4vAoFYsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEEnejEk
XlrT9lnJohsxaiJjrAdBMB8GA1UdIwQYMBaAFFDv4d9ykV7TNh21WbW2uD6uPvPA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OURGMi85OTk4RjFDNDY3
OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0TTJIYlZadGJhNFBxNC04
OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VPX2gzM0tSWHRNMkhiVlp0YmE0UHE0LTg4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OURGMi85OTk4RjFDNDY3OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0
TTJIYlZadGJhNFBxNC04OEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdyylF8dqkTettV1ER/zTKldE/D1LV7dK9nEI+DkEwvqtc/vmr7E9ODmRfbQV
GMrxzDYIBI04W9g2wNUGUJstxaku5l5bp+5znJ2//t+YOwEkM7HB0ddHb35aaWMh
DXuyfQ+Fkhfl53bFLw5KUQ+X7fglbodhue6w2K886v75DnUFWkAxe9bCao1hg86o
A8rO/l1W1M72u8qhM33n84qjW4+D0h1a0moMa/SbqQk2sCmqCA5wBjzCvWrywPm4
mJfMNdlKSvAZsiJwhOzwEmWUCR7c4DVnVRC/P9araHoLaVo85Sn65cCLE8tC/LA2
DVbQQD136x2u6j10o8KHq0Ly9w==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:51 2026 by rpki-client