
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
File: UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft (raw, json)
Hash identifier: MUGJuru05i/aRmGpu+BnTqbZ5ECayeg+3C1qrXHBR+c=
Subject key identifier: 91:2F:FE:C0:9B:F8:79:93:3F:A4:49:92:2B:61:BB:4D:E7:E0:75:7E
Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Certificate serial: 3125
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
Manifest number: 310B
Signing time: Thu 26 Mar 2026 15:27:30 +0000
Manifest this update: Thu 26 Mar 2026 15:27:29 +0000
Manifest next update: Thu 02 Apr 2026 15:27:29 +0000
Files and hashes: 1: UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl (hash: METLrgAVC4MebwNTVcEdFNNr8ujS8tshnYZ5GzLC2D4=)
2: E5DB5238DFBD11EC8E203126C4F9AE02.roa (hash: ukvq4q+WUo9M3bWh6pJLSaPBet3ApLWl9pgkS4gI7ag=)
3: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (hash: KI0oK487s7wSSjOCMfIRVu0m+Nax6IYTlrWQcONrqMQ=)
4: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (hash: q4IKP4eGJJ0oDgbAG4b8WsxXK5K7aSMyKfuwqjPJmm4=)
5: 446A425EA6BB11ED9D458785C4F9AE02.roa (hash: 6OqlVcYAqCDhteCgFv3UWoxb9hgSROAufjQ6ZVdl01Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12581 (0x3125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Validity
Not Before: Mar 26 15:27:29 2026 GMT
Not After : Apr 2 15:27:29 2026 GMT
Subject: CN=69c55061-6d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:69:31:49:42:af:0f:5a:21:02:da:ba:02:
91:3a:a4:40:c1:ca:8c:0c:c8:25:9a:53:64:87:8b:
d8:eb:ed:ee:99:58:8f:e7:16:b9:23:1e:17:97:70:
78:fa:32:38:17:5d:7f:6f:3a:cc:c5:27:c4:19:e6:
a9:2b:13:83:67:9b:c4:2f:e2:61:50:9d:97:25:c3:
9c:e6:83:92:02:ab:6a:b6:20:49:d9:70:83:5c:54:
7f:0f:92:1f:26:c7:cb:60:06:16:9b:b8:1d:40:b1:
70:31:6e:7c:98:0b:5f:b2:4a:47:03:d7:8e:38:63:
5a:83:cd:a1:1f:7e:e0:6a:a1:6d:86:e1:72:ad:2a:
a2:eb:68:8c:4b:1f:8e:f6:16:72:8a:2f:6f:74:0c:
0d:d1:6d:2b:b5:12:94:5d:e8:92:6f:36:d2:2e:1c:
a6:02:57:e4:56:8a:75:8e:f3:a0:54:0e:8b:2b:c7:
2b:7c:9a:09:05:22:aa:6f:23:b6:14:a6:7b:9e:ef:
1d:c2:6e:36:87:60:db:a7:7c:d4:0f:c8:46:7f:01:
1a:f1:d6:8c:4b:65:99:37:23:72:50:46:90:20:f0:
ee:bf:fb:5e:5b:13:2d:51:c6:db:eb:a7:2d:ae:5f:
3e:f7:6f:97:52:5a:ae:f0:0c:06:e2:55:ae:ff:58:
a2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2F:FE:C0:9B:F8:79:93:3F:A4:49:92:2B:61:BB:4D:E7:E0:75:7E
X509v3 Authority Key Identifier:
keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:71:94:9a:3a:fb:8f:e3:f4:5d:78:e1:40:6e:9c:df:d6:2e:
6b:57:54:a2:c6:d1:cb:21:13:53:51:11:d0:d8:35:d5:24:41:
49:b2:8b:28:9e:81:15:1a:65:01:3c:a8:31:6c:73:68:f8:2e:
63:0d:bd:1f:00:e9:41:ab:7f:73:97:09:e6:b6:90:d7:3c:53:
e7:64:54:d9:a4:d2:e5:00:f2:46:87:82:22:2f:72:8c:5e:7a:
d1:c4:9e:f1:5a:f6:24:73:8e:2b:11:6c:d4:96:ca:dd:56:20:
85:0a:cb:d2:2b:bd:9e:79:b7:0d:30:9a:98:58:d6:7f:15:0f:
28:37:d1:2e:12:3e:8c:ae:d8:d2:b6:84:1e:54:7f:c1:2e:2f:
fc:49:87:bd:8e:96:18:2a:1c:6c:06:e5:5e:18:da:ea:19:bd:
fd:fd:65:52:58:47:ef:03:4d:48:1d:0f:a1:b1:1a:a1:13:60:
8b:a4:3b:1f:cc:6f:ee:92:ba:56:b7:76:f8:4e:4d:0e:84:27:
a1:74:99:2e:44:55:95:d9:fa:5e:27:b1:fc:7c:b7:26:98:42:
3d:a5:9c:07:2e:b1:86:73:8b:81:0c:34:ab:59:b1:76:f3:39:
f5:65:d1:97:1c:35:58:14:a8:2f:71:2f:fe:63:a5:66:f8:41:
0f:87:24:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICMSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IxREExMTAvBgNVBAUTKDUwRTY2ODNBNkFGNDY0NEI2OEExMUMyMkRBN0YzQTY1
QjMxMkMwNkYwHhcNMjYwMzI2MTUyNzI5WhcNMjYwNDAyMTUyNzI5WjAYMRYwFAYD
VQQDEw02OWM1NTA2MS02ZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArMxpMUlCrw9aIQLaugKROqRAwcqMDMglmlNkh4vY6+3umViP5xa5Ix4Xl3B4
+jI4F11/bzrMxSfEGeapKxODZ5vEL+JhUJ2XJcOc5oOSAqtqtiBJ2XCDXFR/D5If
JsfLYAYWm7gdQLFwMW58mAtfskpHA9eOOGNag82hH37gaqFthuFyrSqi62iMSx+O
9hZyii9vdAwN0W0rtRKUXeiSbzbSLhymAlfkVop1jvOgVA6LK8crfJoJBSKqbyO2
FKZ7nu8dwm42h2Dbp3zUD8hGfwEa8daMS2WZNyNyUEaQIPDuv/teWxMtUcbb66ct
rl8+92+XUlqu8AwG4lWu/1iibQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJEv/sCb
+HmTP6RJkithu03n4HV+MB8GA1UdIwQYMBaAFFDmaDpq9GRLaKEcItp/OmWzEsBv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS8xNEI3NkJDOEVE
MEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpFdG9vUndpMm44NlpiTVN3
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VPWm9PbXIwWkV0b29Sd2kybjg2WmJNU3dHOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjFEQS8xNEI3NkJDOEVEMEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpF
dG9vUndpMm44NlpiTVN3RzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIHGUmjr7j+P0XXjhQG6c39Yua1dUosbRyyETU1ER0Ng11SRBSbKLKJ6BFRpl
ATyoMWxzaPguYw29HwDpQat/c5cJ5raQ1zxT52RU2aTS5QDyRoeCIi9yjF560cSe
8Vr2JHOOKxFs1JbK3VYghQrL0iu9nnm3DTCamFjWfxUPKDfRLhI+jK7Y0raEHlR/
wS4v/EmHvY6WGCocbAblXhja6hm9/f1lUlhH7wNNSB0PobEaoRNgi6Q7H8xv7pK6
Vrd2+E5NDoQnoXSZLkRVldn6Xiex/Hy3JphCPaWcBy6xhnOLgQw0q1mxdvM59WXR
lxw1WBSoL3Ev/mOlZvhBD4ck3g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:26:05 2026 by rpki-client