
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
File: UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json)
Hash identifier: VgjQ+1FRkMaCOIR1Nr3WM/8iRLI3qxiXX4zBrofKq5w=
Subject key identifier: 1E:AE:41:0A:8F:35:0C:1A:2D:C2:74:B5:AE:EF:49:10:D8:BA:2A:26
Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0
Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0
Certificate serial: 0B0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
Manifest number: 0B04
Signing time: Wed 20 May 2026 19:22:14 +0000
Manifest this update: Wed 20 May 2026 19:22:14 +0000
Manifest next update: Wed 27 May 2026 19:22:14 +0000
Files and hashes: 1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: zrSwwLZmPjeRAgrhUwydclr6vtN6tU+tNu38gSMPY2E=)
2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: bP8YW/usVEPebr8yo+q/K5uFmrIVy5PiorRcfqJheHQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl
rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:22:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2830 (0xb0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149DF2, serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0
Validity
Not Before: May 20 19:22:14 2026 GMT
Not After : May 27 19:22:14 2026 GMT
Subject: CN=6a0e09e6-7846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:85:eb:d8:cd:b2:6b:4a:db:8b:8f:03:31:29:
3c:06:33:bc:3d:e2:12:88:70:e9:a8:d8:11:68:4e:
81:42:72:97:cc:61:18:0b:ca:fc:db:78:64:02:b3:
51:1f:0c:c5:d5:54:7b:43:48:3e:52:07:29:e8:0d:
f4:0d:2a:ac:bd:b3:05:50:4b:db:bc:fb:d0:df:c6:
5f:6e:c2:60:6a:24:24:a1:0f:fa:67:10:ec:dd:d5:
f5:b3:06:fd:c6:97:4c:bb:4d:3a:17:89:61:fe:a5:
03:ef:74:fe:27:d6:49:0f:4e:aa:1d:43:d4:1e:d7:
35:ad:c7:39:4b:6f:02:68:48:81:a4:a9:12:e3:f2:
52:6d:76:79:02:9b:52:3c:d4:28:4a:17:ee:87:fb:
97:ed:a3:73:25:c1:e7:6e:7d:d6:1c:13:74:18:0e:
bc:94:35:c2:06:02:c4:fc:65:c6:f6:0c:6e:58:ea:
7c:bc:56:6b:0f:aa:8c:96:c4:9c:9e:a3:22:d5:e7:
01:21:ed:bc:07:51:fc:6e:a6:88:c6:b7:8d:c1:ee:
d2:db:35:45:0e:d1:9d:60:1b:30:3e:55:10:f1:14:
3e:c6:28:cc:93:60:26:d4:70:b1:a7:72:7b:16:e9:
b0:1c:9e:72:25:c7:d8:8b:3f:82:6d:44:90:36:b1:
ad:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AE:41:0A:8F:35:0C:1A:2D:C2:74:B5:AE:EF:49:10:D8:BA:2A:26
X509v3 Authority Key Identifier:
keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:78:9f:a9:7c:46:00:83:b7:4e:20:7e:0c:3a:1f:00:8b:51:
a7:c9:61:db:f8:27:2a:f2:22:a1:a1:b2:f3:8a:66:3b:73:0c:
db:be:c0:1c:d7:2a:41:b0:32:5a:ba:7f:29:ff:a5:10:72:d3:
db:12:af:76:2f:39:80:a2:c8:c3:1e:c4:10:3f:42:ae:36:37:
21:9c:0b:cf:d5:0c:1e:4d:00:0a:74:ce:89:47:9a:d3:66:a3:
ca:33:26:2f:89:67:fe:88:ce:04:95:42:69:cd:0f:80:f8:58:
a4:81:c0:a3:ce:a6:7d:4c:80:f8:8c:a9:7a:19:ab:63:c3:c5:
e9:0f:f5:fe:ea:83:a2:b0:af:a8:78:0d:bb:cd:7e:80:44:27:
25:d8:f3:0d:4b:20:74:26:22:ac:e9:9b:b8:6b:70:3e:99:e9:
aa:28:81:36:11:d4:b1:82:e5:8d:14:2e:fb:91:b7:3c:da:c0:
63:c8:4d:fa:ce:4f:34:90:30:19:66:b6:52:f3:7d:9d:e6:4e:
07:ba:26:26:de:fb:b5:88:bf:d8:a0:16:7a:f9:19:62:d2:1c:
56:1c:4c:2d:89:ff:82:e8:6a:dd:8c:96:39:42:08:82:c0:b5:
50:a3:ad:0c:2f:45:18:84:ff:b7:c2:71:7e:84:98:f2:67:a8:
11:9d:96:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:22 2026 by rpki-client