
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
File: OUPUJhV5zeDoKgXKKrVLOHulGTM.mft (raw, json)
Hash identifier: eWgNwksy7pH1WSQniWL5UkYlpPXvxFa9H0Q7bRRLNk8=
Subject key identifier: 64:A1:32:07:6F:71:92:8F:F7:D4:8A:9C:72:AD:BF:E0:8D:01:33:6B
Authority key identifier: 39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33
Certificate issuer: /CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933
Certificate serial: 0134
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
Manifest number: 012C
Signing time: Thu 21 May 2026 05:43:32 +0000
Manifest this update: Thu 21 May 2026 05:43:31 +0000
Manifest next update: Thu 28 May 2026 05:43:31 +0000
Files and hashes: 1: OUPUJhV5zeDoKgXKKrVLOHulGTM.crl (hash: +MuOQqByKgjxNVxeXVw2hzRwiA3YngUne3NNMeYFOgQ=)
2: 31C36B64905F11EFAF49EB6BC4F9AE02.roa (hash: dKI7uA/SKO3RusYnEdr0A/ZscE+vPWKaXvZ4/iotjxI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl
rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D88F, serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933
Validity
Not Before: May 21 05:43:31 2026 GMT
Not After : May 28 05:43:31 2026 GMT
Subject: CN=6a0e9b84-f702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:70:3b:ca:b5:72:0c:4b:b4:9b:72:b8:d9:
70:f9:15:1c:7b:97:35:ac:f0:f5:34:77:ee:f0:bd:
96:33:a0:c9:e4:02:fa:3b:18:18:98:0b:23:4e:8d:
cc:54:89:04:ac:ae:86:0b:46:8b:53:70:3b:84:95:
6d:0b:b8:9c:98:5c:03:5d:20:0d:7e:a7:07:a5:a7:
93:1b:b5:d4:4b:02:e6:12:96:82:ae:a2:52:02:21:
83:e6:9c:d0:23:91:8b:0a:86:86:f7:c4:60:64:2f:
07:d4:42:fb:61:bf:d7:4a:a7:4a:5e:d4:3b:c0:cb:
89:2d:a9:18:c8:ec:5f:7d:bc:7f:9d:79:c3:7d:61:
c0:0b:bb:e6:dc:a5:15:58:29:e9:95:11:25:f2:58:
50:a6:a3:e1:9a:0b:a7:04:4b:f5:eb:69:4f:ad:8f:
db:2d:9d:fc:5e:b1:5b:0a:c2:d8:cb:d8:c2:18:e9:
d5:81:5d:27:2a:12:a6:9c:f7:43:08:ef:5f:eb:7c:
6e:fb:0a:bf:7c:cc:ec:ed:7a:83:0b:6b:6c:b6:d9:
24:a0:76:f9:97:2c:a5:a6:8a:c5:90:fc:34:1f:fe:
63:93:bf:f0:7c:a8:90:51:99:c0:40:11:43:61:5f:
d5:7f:0f:7f:89:1b:3c:12:bf:83:28:c2:7f:93:6e:
10:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A1:32:07:6F:71:92:8F:F7:D4:8A:9C:72:AD:BF:E0:8D:01:33:6B
X509v3 Authority Key Identifier:
keyid:39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:27:ff:0c:2a:24:3c:2a:37:7d:7a:94:af:6b:07:b0:e3:14:
56:ad:39:22:b8:bb:cb:98:24:01:3e:da:b6:8a:a7:e0:a7:47:
4d:31:92:3d:3c:50:46:48:f0:d9:b9:d9:b5:13:28:fa:6f:bb:
b4:2f:37:47:cb:31:df:b1:cf:90:b8:c2:68:02:8c:81:c1:28:
67:2a:93:f2:bd:04:e0:e8:b8:0a:fb:bf:be:59:02:5b:a4:6f:
44:ab:3c:be:a5:4c:4a:56:c8:47:9c:b5:2e:01:a4:eb:55:73:
d5:ac:56:5c:e5:e1:09:7b:2b:6b:58:31:8b:fd:03:c3:c1:b8:
e4:2a:aa:64:b4:11:cd:0e:45:40:f1:93:5f:25:d5:d9:d4:15:
de:ea:aa:46:db:40:28:f2:e6:69:a6:ca:11:e6:d4:ef:21:46:
16:91:fe:a4:7f:42:b3:3e:28:f4:e9:67:2d:5b:ad:61:c8:ae:
db:73:b0:08:ea:41:d8:58:b9:c1:01:e5:d5:7b:60:55:aa:44:
07:f0:1d:27:60:e7:5f:05:f7:7e:0d:bf:c4:2e:fb:69:20:53:
59:d7:2c:a7:c9:45:b2:16:66:a7:88:e2:15:d5:a2:b3:ca:f6:
5a:3d:98:0f:8d:0b:87:48:3e:cb:71:12:09:76:aa:7e:93:a6:
7a:88:55:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:53:43 2026 by rpki-client