
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft
File: UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft (raw, json)
Hash identifier: PsTB3/KL7q5xOGbXW8XDf0fdbISOpBc7vhayU+7CYD0=
Subject key identifier: 9F:3B:7E:BD:27:41:A6:AB:C9:C9:64:71:69:82:6A:7C:AA:95:C9:93
Authority key identifier: 50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79
Certificate issuer: /CN=A9157031/serialNumber=50E50EDAF64A2C25B731239673D9070F61830279
Certificate serial: 04A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft
Manifest number: 0499
Signing time: Mon 11 May 2026 00:01:52 +0000
Manifest this update: Mon 11 May 2026 00:01:52 +0000
Manifest next update: Mon 18 May 2026 00:01:52 +0000
Files and hashes: 1: UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl (hash: eLBd6xDHb/h3T7rD3f6+SwxtKlMsz8coFoA/G+YGNSY=)
2: 32D8FF34C99E11ED98E9BE5BC4F9AE02.roa (hash: yd4buxnCUiP8RDjBDNVk91tWj2JzoJK9mOzB6Ho4Uo8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl
rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1184 (0x4a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157031, serialNumber=50E50EDAF64A2C25B731239673D9070F61830279
Validity
Not Before: May 11 00:01:52 2026 GMT
Not After : May 18 00:01:52 2026 GMT
Subject: CN=6a011c70-4586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:bd:f6:aa:1e:4b:3d:b4:57:c2:55:5a:21:
a0:19:cb:c0:5e:8c:ce:80:c9:ce:53:0b:23:7b:24:
87:1f:0b:c7:e0:ce:f6:d1:5c:2c:d3:e2:6e:51:80:
21:ef:fd:34:96:03:66:be:cb:84:4d:67:65:5a:47:
90:02:20:48:53:b3:b0:dd:24:b9:71:3b:e6:e7:c3:
ce:c1:5d:5e:90:90:a9:37:60:99:6d:c8:02:cf:cd:
d1:fb:43:12:c5:66:0d:c7:b2:ae:d3:4b:1d:fb:dd:
11:1d:e5:28:e9:c2:79:02:f7:e9:40:f8:db:c1:d9:
4f:20:18:88:00:69:0b:03:61:b7:fa:ac:7b:de:68:
93:03:f8:63:79:ff:d4:79:07:04:39:ea:e3:59:a2:
72:59:aa:19:1c:8e:9e:41:81:4f:75:c2:be:2e:4e:
65:24:74:5b:0b:4a:00:82:a8:c8:ee:9c:b1:d5:09:
bd:4b:0e:67:07:70:45:02:72:8f:f1:0e:9f:38:36:
1f:06:94:8d:0c:ca:38:f1:90:84:c7:f7:27:6b:3b:
38:7f:c5:1f:24:e4:61:89:66:dd:37:8b:31:08:c1:
d0:4e:3f:62:38:76:e4:17:df:fa:81:8c:71:2e:28:
b4:ae:69:59:d6:5a:15:df:44:a6:dc:b6:65:88:ae:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3B:7E:BD:27:41:A6:AB:C9:C9:64:71:69:82:6A:7C:AA:95:C9:93
X509v3 Authority Key Identifier:
keyid:50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ce:20:78:25:e9:59:13:93:15:5e:ee:c1:f1:f7:67:cb:e3:
05:77:ca:94:d9:aa:36:f0:50:74:e2:92:88:4e:85:92:fc:0e:
fc:08:40:8d:12:21:11:56:bf:d7:96:f9:47:8a:7a:1f:54:50:
d6:02:2a:bb:6f:d1:19:79:6b:d1:00:98:7d:ef:3a:ca:ca:ed:
8e:f4:e6:47:06:67:d3:b2:2d:4e:fd:95:8b:a1:23:af:21:ad:
39:93:35:20:47:7f:46:46:ea:e5:d9:a2:24:a5:84:54:6a:6d:
3d:e5:d3:e4:4e:0e:6c:46:42:21:46:fd:55:3b:5d:e6:ba:42:
e3:2f:f3:a8:15:42:ea:f8:96:cc:8c:06:d6:0c:f7:0d:92:aa:
25:9b:b3:d1:bb:4d:69:92:5e:b9:a2:83:38:6d:f1:05:28:ad:
76:97:6e:ba:08:9a:05:88:d0:fc:96:d4:2d:d0:fa:a1:d1:72:
48:a3:15:c7:57:be:e7:49:69:e8:9b:62:80:07:e7:62:59:75:
05:3a:11:00:73:5a:04:6a:e7:c6:33:11:ef:98:3e:55:89:8a:
34:7c:47:25:8c:10:af:5f:e0:d6:44:e1:bc:67:01:f6:fb:e4:
53:ff:86:2a:ed:0a:96:35:bd:da:73:54:27:92:5d:0a:67:da:
59:dd:5f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:14:41 2026 by rpki-client