
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
File: UPIOqel1rkxMhmfLV_e89XAhXJY.mft (raw, json)
Hash identifier: m3onn90gpCDu+1g6QJeRfKKjv+ag2SMThmN56S13xfk=
Subject key identifier: E4:6B:71:F8:F6:D9:A6:64:E9:4A:A5:22:D7:44:59:89:A9:8A:CB:12
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Certificate issuer: /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial: 2575
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
Manifest number: 24D9
Signing time: Sat 14 Mar 2026 15:40:17 +0000
Manifest this update: Sat 14 Mar 2026 15:40:16 +0000
Manifest next update: Sat 21 Mar 2026 15:40:16 +0000
Files and hashes: 1: UPIOqel1rkxMhmfLV_e89XAhXJY.crl (hash: iQzWD7CONv6WOwGdFN9Zxz3CE2sWhxqC4+0QRvOqw/Q=)
2: 491B85B2E58911ED94960F39C4F9AE02.roa (hash: p1xnXgA9LMb0Mxi/ycHH4/cztijIDWFhRgDmWJFXY5E=)
3: B8951CDCD23611EA8D9E515BC4F9AE02.roa (hash: htHpKZon5mNG5P/Pj39EzkVhrOvEpR2CWRf+XbzGuIg=)
4: AFF73BD2BA0811EAB2479081C4F9AE02.roa (hash: DdZKXb4M/HY8Rw+731AG6sVTmrNxGDyuIDLl//IJ4zA=)
5: D451FBE0DFEC11ED9AB6E147C4F9AE02.roa (hash: Ff6tbDoeChVjxh4vFj0oHX0pSBSFGJGoNblriebIoqA=)
6: 06239EBADFEA11ED835B4D0EC4F9AE02.roa (hash: XttvVqkNkAnCFM1MY9xTWgbB01SQSa1kxn+W5THogUU=)
7: 59B3485028C111E7A885571AC4F9AE02.roa (hash: F1bHZVCAAlM5R2hu8xgkHlsSjuo7aB5QEMEkptThpJg=)
8: D50024D6DFEC11ED9AB6E147C4F9AE02.roa (hash: NpbFmehH6sCWVstqM+8ivirhzh87kF22vlqRdRYqcLU=)
9: 773D7A96B0DC11ECAEC09469C4F9AE02.roa (hash: 9/9c5jlFxtEUyu1G+D434+lqd0WolLm0ksxcpS1itfY=)
10: E706A8B2BBF111EE8697E433C4F9AE02.roa (hash: +vaa0VOm4wz+weMjzRo0jbo8hgAyLHv/jTs0BYsAOGM=)
11: D327C18CDFEC11ED9AB6E147C4F9AE02.roa (hash: /qxQS2wqFL61pnX87hC2dTs6d/aGFT2iNa6oqURPmXU=)
12: 5A2BB4DE28C111E7A885571AC4F9AE02.roa (hash: SeqETIAVpr7MwdcBc+UVdbUh65jW/rT70NB3K1w2Nmw=)
13: 554E53D4B0B811EC9BE93E24C4F9AE02.roa (hash: UpHGfUh0kotKwn90fIlxnooF4zogBZjwjsBrsKk+nCk=)
14: 1A2298A2D23811EABDECA85FC4F9AE02.roa (hash: Ky7+ULOyrKSM9ovhVgKVTrhgbn8AP/xK6RnZbcrBvyA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9589 (0x2575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Validity
Not Before: Mar 14 15:40:16 2026 GMT
Not After : Mar 21 15:40:16 2026 GMT
Subject: CN=69b58160-00b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:98:79:38:a0:6f:03:64:cd:c7:90:fe:9d:
db:33:cb:00:0a:b5:40:5b:f9:4c:48:d9:9d:0f:22:
b3:c7:c3:5b:56:cb:ba:bf:3a:65:be:5d:05:72:75:
f2:19:b6:75:81:1c:8d:b2:e9:a5:14:e8:0e:a6:9f:
36:2b:35:b5:43:77:38:e7:b6:b8:74:be:be:2d:67:
60:62:b1:12:a0:7a:7b:22:47:44:fe:d7:51:36:07:
70:f7:13:42:36:d4:6e:2d:c3:cb:b1:04:51:3c:e1:
2b:e8:49:43:ca:d8:56:5b:67:03:86:35:7f:73:25:
5e:39:88:08:3a:7e:d6:c3:a8:bb:1e:69:60:a6:9b:
44:d0:23:cb:39:e7:71:c3:5b:e8:e4:f8:39:72:8b:
4d:6c:f8:d0:11:2e:9a:50:47:a7:06:59:e8:91:3b:
92:a0:16:b9:16:87:5d:5c:2b:34:9f:43:aa:59:43:
18:a0:c6:b0:ab:83:62:96:8e:59:a8:bf:46:30:e7:
22:cf:06:1d:76:02:07:4c:85:61:8a:c2:4a:83:78:
fd:f4:90:a4:4f:20:0b:fb:d2:fa:9d:4a:7b:1c:35:
7e:62:e1:9e:69:99:fe:1c:01:c0:fd:65:eb:8c:80:
66:a7:7d:5c:66:2e:0b:6f:bf:24:da:99:7e:7c:d3:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6B:71:F8:F6:D9:A6:64:E9:4A:A5:22:D7:44:59:89:A9:8A:CB:12
X509v3 Authority Key Identifier:
keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:6a:9e:e0:46:d0:70:be:5a:d7:26:53:66:d7:93:35:97:34:
74:4c:5c:e0:d5:df:74:dd:2a:3d:a9:8a:86:98:b3:59:11:fb:
f0:ba:51:c4:9a:a4:0b:11:c1:3d:62:3a:e3:d0:63:cd:ef:1d:
f5:06:b5:20:b1:80:66:92:04:1d:f3:6e:64:75:b7:c3:b2:4f:
0a:ef:a0:86:f4:4b:58:2b:92:b3:a2:01:e2:ab:8a:5e:6f:c2:
4e:dc:7f:ed:01:a2:3d:44:d2:f8:94:bc:2d:e6:8d:62:8f:a9:
b7:96:7c:e0:de:8d:9b:51:fe:9c:a2:51:8b:95:b5:7d:74:01:
5a:3e:da:7b:c7:c2:77:b1:1c:41:21:7d:1a:b6:23:39:08:08:
cf:ba:e6:12:47:41:21:17:af:f4:b8:88:4c:a0:e8:fa:33:0e:
d7:76:99:a7:c3:71:5f:df:6e:0b:41:71:d3:87:55:5e:8a:75:
62:2f:b7:ec:2d:a5:9b:77:d0:17:0d:57:ac:a5:cc:48:ce:d4:
30:f3:9f:58:c0:00:4b:6d:95:c8:a3:ca:4a:cd:ae:28:f1:fc:
cb:63:6d:56:51:47:96:23:ca:92:25:31:f0:f2:45:c7:83:a8:
cc:7d:90:31:35:31:17:26:0e:3a:1a:e2:57:6b:4a:0f:2a:bb:
c4:ad:32:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUM2MkIxMTAvBgNVBAUTKDUwRjIwRUE5RTk3NUFFNEM0Qzg2NjdDQjU3RjdCQ0Y1
NzAyMTVDOTYwHhcNMjYwMzE0MTU0MDE2WhcNMjYwMzIxMTU0MDE2WjAYMRYwFAYD
VQQDEw02OWI1ODE2MC0wMGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzByYeTigbwNkzceQ/p3bM8sACrVAW/lMSNmdDyKzx8NbVsu6vzplvl0FcnXy
GbZ1gRyNsumlFOgOpp82KzW1Q3c457a4dL6+LWdgYrESoHp7IkdE/tdRNgdw9xNC
NtRuLcPLsQRRPOEr6ElDythWW2cDhjV/cyVeOYgIOn7Ww6i7HmlgpptE0CPLOedx
w1vo5Pg5cotNbPjQES6aUEenBlnokTuSoBa5FoddXCs0n0OqWUMYoMawq4Nilo5Z
qL9GMOcizwYddgIHTIVhisJKg3j99JCkTyAL+9L6nUp7HDV+YuGeaZn+HAHA/WXr
jIBmp31cZi4Lb78k2pl+fNOtcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFORrcfj2
2aZk6UqlItdEWYmpissSMB8GA1UdIwQYMBaAFFDyDqnpda5MTIZny1f3vPVwIVyW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzYyQi82NEEwNTE0NjYw
MTIxMUU1QkU5MjUwNzBDNEY5QUUwMi9VUElPcWVsMXJreE1obWZMVl9lODlYQWhY
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VQSU9xZWwxcmt4TWhtZkxWX2U4OVhBaFhKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QzYyQi82NEEwNTE0NjYwMTIxMUU1QkU5MjUwNzBDNEY5QUUwMi9VUElPcWVsMXJr
eE1obWZMVl9lODlYQWhYSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtWqe4EbQcL5a1yZTZteTNZc0dExc4NXfdN0qPamKhpizWRH78LpRxJqkCxHB
PWI649Bjze8d9Qa1ILGAZpIEHfNuZHW3w7JPCu+ghvRLWCuSs6IB4quKXm/CTtx/
7QGiPUTS+JS8LeaNYo+pt5Z84N6Nm1H+nKJRi5W1fXQBWj7ae8fCd7EcQSF9GrYj
OQgIz7rmEkdBIRev9LiITKDo+jMO13aZp8NxX99uC0Fx04dVXop1Yi+37C2lm3fQ
Fw1XrKXMSM7UMPOfWMAAS22VyKPKSs2uKPH8y2NtVlFHliPKkiUx8PJFx4OozH2Q
MTUxFyYOOhriV2tKDyq7xK0y3g==
-----END CERTIFICATE-----
Generated at Sat Mar 14 22:05:45 2026 by rpki-client