
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
File: UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json)
Hash identifier: huaN5Ua5JfPn2FguCi6o+8b8G5cJcfGfXL8f6JlffzE=
Subject key identifier: EA:66:E7:3C:7A:B9:7E:08:74:03:A3:D3:F7:7B:F6:0B:48:43:86:74
Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0
Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0
Certificate serial: 0B3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
Manifest number: 0B32
Signing time: Tue 18 Aug 2026 19:33:46 +0000
Manifest this update: Tue 18 Aug 2026 19:33:46 +0000
Manifest next update: Tue 25 Aug 2026 19:33:46 +0000
Files and hashes: 1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: 9KC0E0iaEJN7dTXlxWQU6K8BGgQl0blkcxDAhFj3P9c=)
2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: bP8YW/usVEPebr8yo+q/K5uFmrIVy5PiorRcfqJheHQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl
rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2876 (0xb3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149DF2, serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0
Validity
Not Before: Aug 18 19:33:46 2026 GMT
Not After : Aug 25 19:33:46 2026 GMT
Subject: CN=6a84b39a-f6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:91:74:88:47:af:32:da:4d:af:dc:56:8d:45:
bb:22:7a:d5:66:ae:d7:ee:99:42:99:e0:0a:35:4c:
83:ed:e8:79:25:23:dc:e9:5c:76:24:59:ce:90:70:
5d:c0:bc:51:0a:b8:e8:f4:b8:96:61:57:1b:35:45:
e1:e5:8b:21:70:e9:6c:e7:9d:f4:30:c0:5e:28:df:
e9:dc:e4:04:a8:9d:c7:c0:30:8e:d8:05:0c:3b:fc:
c6:b6:02:e3:c5:6d:54:d4:29:df:95:cb:63:40:39:
f3:49:0c:19:a6:16:2d:7e:74:92:be:89:18:84:bf:
9d:be:fd:d0:16:ab:7a:b8:c0:3f:88:b1:86:b9:c2:
cb:a6:78:3e:f5:9f:a8:2d:ef:c7:92:3e:b1:f9:a8:
51:1c:9c:79:32:25:4f:30:73:99:11:b4:af:59:26:
19:5b:67:e4:49:c6:b1:16:3f:a7:8d:5f:30:df:a1:
5b:54:de:fb:bd:5b:b3:f2:e9:07:b0:06:f3:44:9f:
31:ee:36:ce:74:29:a4:c2:e5:3b:8f:67:63:da:c3:
25:2d:ba:f9:46:2b:8e:33:64:69:48:55:f1:ae:55:
08:5f:98:6a:8d:47:75:05:6c:84:f9:93:0c:76:40:
b5:c8:2b:68:ab:6a:d1:fd:86:7f:f5:61:be:f7:cb:
87:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:66:E7:3C:7A:B9:7E:08:74:03:A3:D3:F7:7B:F6:0B:48:43:86:74
X509v3 Authority Key Identifier:
keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:da:f9:50:1b:9a:44:8e:3d:dc:9e:c1:bd:cb:10:64:a1:95:
ae:b2:9d:e7:24:d2:66:62:e1:a7:b2:10:44:7f:62:6e:b0:28:
d0:6c:0f:24:f8:70:f6:ed:82:04:f8:b5:c6:c1:3d:3c:96:ab:
6e:ae:f5:57:52:52:18:03:55:86:82:ed:d9:10:09:00:98:fe:
ac:5f:ef:99:1a:56:95:ac:ad:74:7a:9b:21:fd:95:d3:cc:f6:
d7:bf:1b:a5:b1:b9:06:0b:d2:de:59:6c:4b:ca:d0:26:31:96:
7f:7c:6c:46:ab:99:65:a3:cb:55:2a:20:76:16:37:a2:d1:a5:
b6:ac:13:1d:24:33:e1:27:80:55:f2:25:bb:39:f3:3b:40:63:
42:63:fd:73:62:97:8f:ee:cb:e9:fd:6f:76:2a:60:86:d2:94:
ca:14:ac:57:2f:29:65:17:01:8c:10:72:63:57:df:78:11:78:
79:76:7b:e2:dd:32:e9:84:0a:ef:7b:04:f0:2e:0c:84:e9:6e:
f8:d3:28:29:ff:ac:7f:d7:c9:7a:93:6f:ad:a2:9b:52:01:42:
63:a0:5a:5c:5f:3b:bc:02:30:56:db:09:bb:3c:67:a0:83:78:
31:fd:29:8c:3c:31:25:0f:07:f4:fc:59:d0:91:b7:75:38:aa:
f1:6d:07:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:54 2026 by rpki-client