
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
File: UPIOqel1rkxMhmfLV_e89XAhXJY.mft (raw, json)
Hash identifier: 4n7Vq2qyOWXDgeIHbpZsDrl/I34tszgh72J7Ok7F1F0=
Subject key identifier: FB:DD:45:F4:DD:62:8F:B1:54:C1:A6:D7:97:3D:BF:43:13:F3:9D:09
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Certificate issuer: /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial: 258C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
Manifest number: 24F0
Signing time: Tue 28 Apr 2026 15:49:21 +0000
Manifest this update: Tue 28 Apr 2026 15:49:20 +0000
Manifest next update: Tue 05 May 2026 15:49:20 +0000
Files and hashes: 1: UPIOqel1rkxMhmfLV_e89XAhXJY.crl (hash: 5U0E4uDJvGZNYZqVWyKJVu05cubr3Lj0+kF7OsPHE/o=)
2: 5A2BB4DE28C111E7A885571AC4F9AE02.roa (hash: SeqETIAVpr7MwdcBc+UVdbUh65jW/rT70NB3K1w2Nmw=)
3: 59B3485028C111E7A885571AC4F9AE02.roa (hash: F1bHZVCAAlM5R2hu8xgkHlsSjuo7aB5QEMEkptThpJg=)
4: E706A8B2BBF111EE8697E433C4F9AE02.roa (hash: +vaa0VOm4wz+weMjzRo0jbo8hgAyLHv/jTs0BYsAOGM=)
5: 1A2298A2D23811EABDECA85FC4F9AE02.roa (hash: Ky7+ULOyrKSM9ovhVgKVTrhgbn8AP/xK6RnZbcrBvyA=)
6: D451FBE0DFEC11ED9AB6E147C4F9AE02.roa (hash: Ff6tbDoeChVjxh4vFj0oHX0pSBSFGJGoNblriebIoqA=)
7: D50024D6DFEC11ED9AB6E147C4F9AE02.roa (hash: NpbFmehH6sCWVstqM+8ivirhzh87kF22vlqRdRYqcLU=)
8: 554E53D4B0B811EC9BE93E24C4F9AE02.roa (hash: UpHGfUh0kotKwn90fIlxnooF4zogBZjwjsBrsKk+nCk=)
9: 491B85B2E58911ED94960F39C4F9AE02.roa (hash: p1xnXgA9LMb0Mxi/ycHH4/cztijIDWFhRgDmWJFXY5E=)
10: B8951CDCD23611EA8D9E515BC4F9AE02.roa (hash: htHpKZon5mNG5P/Pj39EzkVhrOvEpR2CWRf+XbzGuIg=)
11: 773D7A96B0DC11ECAEC09469C4F9AE02.roa (hash: 9/9c5jlFxtEUyu1G+D434+lqd0WolLm0ksxcpS1itfY=)
12: D327C18CDFEC11ED9AB6E147C4F9AE02.roa (hash: /qxQS2wqFL61pnX87hC2dTs6d/aGFT2iNa6oqURPmXU=)
13: 06239EBADFEA11ED835B4D0EC4F9AE02.roa (hash: XttvVqkNkAnCFM1MY9xTWgbB01SQSa1kxn+W5THogUU=)
14: AFF73BD2BA0811EAB2479081C4F9AE02.roa (hash: DdZKXb4M/HY8Rw+731AG6sVTmrNxGDyuIDLl//IJ4zA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 05 May 2026 15:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9612 (0x258c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Validity
Not Before: Apr 28 15:49:20 2026 GMT
Not After : May 5 15:49:20 2026 GMT
Subject: CN=69f0d700-337d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:01:93:57:bc:39:cb:2e:19:92:c8:67:48:
96:49:a4:12:93:ee:d2:00:4b:fd:ce:30:df:33:fa:
4f:87:47:bb:96:96:ba:69:0f:e4:fd:85:c3:21:5b:
d6:ff:c7:a8:81:a8:42:d4:49:14:1d:c8:04:9d:40:
b0:d4:f1:04:a2:9b:b4:8b:24:44:97:26:f9:1c:d0:
ed:39:59:0f:c0:2f:a6:01:2f:fc:36:20:a2:7b:1b:
be:18:10:ef:f9:e6:2d:51:45:87:36:b7:41:f5:54:
65:d4:6d:84:ee:96:8f:bf:55:26:dc:48:8a:ea:84:
4d:9a:23:a8:ba:93:60:49:ae:6c:a5:78:e2:30:09:
ef:2d:71:5f:3f:ea:d5:18:d3:c2:ae:47:4e:e7:7e:
54:2b:99:cb:05:15:16:52:26:70:98:91:0c:ad:6a:
e7:25:9d:eb:7d:9b:0b:8e:8e:b0:5a:bc:fb:71:2f:
03:92:ed:f0:7b:7c:c2:77:96:0a:a7:ed:8b:9a:bd:
39:0b:9b:da:f7:ab:c7:82:01:20:45:27:60:8f:7f:
01:e6:52:07:79:6c:9d:47:f9:a5:c0:3d:86:42:d4:
1c:43:5e:d6:ff:80:f9:9a:20:18:56:ed:67:dd:11:
24:c5:56:80:06:d5:40:1f:8d:b9:ee:6f:c2:43:f1:
2b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DD:45:F4:DD:62:8F:B1:54:C1:A6:D7:97:3D:BF:43:13:F3:9D:09
X509v3 Authority Key Identifier:
keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:07:5b:4a:f0:74:f0:07:d6:ab:45:ca:6e:6a:09:e9:74:64:
35:9e:5a:14:02:50:48:e0:b2:57:e1:6c:7d:41:b6:76:bd:15:
54:dd:9d:e8:05:55:58:b8:8c:b3:49:47:b1:af:42:a7:15:4c:
f0:0d:b2:d3:bf:68:74:50:a3:27:ea:dd:10:67:29:8d:ab:64:
35:fa:ca:00:dd:8e:15:06:84:14:cf:4e:a7:61:f3:26:f0:13:
1d:4a:68:37:78:7f:b9:09:f6:e9:3b:aa:56:44:1f:82:f6:27:
4f:a0:42:0e:ff:fd:03:26:4a:bf:13:4b:31:96:d8:44:30:b6:
87:fb:d2:db:74:43:e8:55:3d:0f:3f:ee:13:97:90:8c:f7:4a:
d7:40:03:99:de:69:ed:e1:6f:91:46:a1:4c:8e:3d:66:07:d3:
ef:17:ea:aa:b4:b6:5e:03:fc:98:a0:be:f1:ab:ae:4a:2e:a0:
a1:bf:08:ad:23:70:f6:fa:4d:d3:d2:2e:36:3c:21:a8:52:87:
84:51:59:d0:27:77:9c:ca:76:b7:c6:19:0d:7c:1d:cc:2a:35:
6d:39:6a:ff:cd:ed:31:e0:75:26:e7:10:ee:90:9d:c0:f0:c6:
fb:64:a1:00:c7:eb:77:92:51:98:6a:44:2f:b2:fb:2c:b4:4f:
5e:20:d8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 00:01:18 2026 by rpki-client