
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
File: UPIOqel1rkxMhmfLV_e89XAhXJY.mft (raw, json)
Hash identifier: J2klz0CU6V1w6Z2A9Q3ay365SqS2o1LPb0933eYuB5A=
Subject key identifier: E3:2D:A0:BA:9C:25:26:11:F7:28:03:E0:9C:DA:33:AF:99:64:83:E0
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Certificate issuer: /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial: 2593
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
Manifest number: 24F7
Signing time: Tue 12 May 2026 15:47:05 +0000
Manifest this update: Tue 12 May 2026 15:47:04 +0000
Manifest next update: Tue 19 May 2026 15:47:04 +0000
Files and hashes: 1: UPIOqel1rkxMhmfLV_e89XAhXJY.crl (hash: G0wffdjBk0bjm60HQuWJ0LfNexIBKFRTYrHhf/YDoL0=)
2: AFF73BD2BA0811EAB2479081C4F9AE02.roa (hash: DdZKXb4M/HY8Rw+731AG6sVTmrNxGDyuIDLl//IJ4zA=)
3: 554E53D4B0B811EC9BE93E24C4F9AE02.roa (hash: UpHGfUh0kotKwn90fIlxnooF4zogBZjwjsBrsKk+nCk=)
4: D327C18CDFEC11ED9AB6E147C4F9AE02.roa (hash: /qxQS2wqFL61pnX87hC2dTs6d/aGFT2iNa6oqURPmXU=)
5: 5A2BB4DE28C111E7A885571AC4F9AE02.roa (hash: SeqETIAVpr7MwdcBc+UVdbUh65jW/rT70NB3K1w2Nmw=)
6: D451FBE0DFEC11ED9AB6E147C4F9AE02.roa (hash: Ff6tbDoeChVjxh4vFj0oHX0pSBSFGJGoNblriebIoqA=)
7: 06239EBADFEA11ED835B4D0EC4F9AE02.roa (hash: XttvVqkNkAnCFM1MY9xTWgbB01SQSa1kxn+W5THogUU=)
8: 59B3485028C111E7A885571AC4F9AE02.roa (hash: F1bHZVCAAlM5R2hu8xgkHlsSjuo7aB5QEMEkptThpJg=)
9: 773D7A96B0DC11ECAEC09469C4F9AE02.roa (hash: 9/9c5jlFxtEUyu1G+D434+lqd0WolLm0ksxcpS1itfY=)
10: D50024D6DFEC11ED9AB6E147C4F9AE02.roa (hash: NpbFmehH6sCWVstqM+8ivirhzh87kF22vlqRdRYqcLU=)
11: 491B85B2E58911ED94960F39C4F9AE02.roa (hash: p1xnXgA9LMb0Mxi/ycHH4/cztijIDWFhRgDmWJFXY5E=)
12: 1A2298A2D23811EABDECA85FC4F9AE02.roa (hash: Ky7+ULOyrKSM9ovhVgKVTrhgbn8AP/xK6RnZbcrBvyA=)
13: B8951CDCD23611EA8D9E515BC4F9AE02.roa (hash: htHpKZon5mNG5P/Pj39EzkVhrOvEpR2CWRf+XbzGuIg=)
14: E706A8B2BBF111EE8697E433C4F9AE02.roa (hash: +vaa0VOm4wz+weMjzRo0jbo8hgAyLHv/jTs0BYsAOGM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:47:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9619 (0x2593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Validity
Not Before: May 12 15:47:04 2026 GMT
Not After : May 19 15:47:04 2026 GMT
Subject: CN=6a034b79-e5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:75:41:3b:a3:f6:66:d0:79:b4:54:e7:0c:
98:fd:a4:d2:e7:9d:32:7f:b0:6a:5a:19:e5:14:0a:
b7:87:42:0a:91:94:f7:33:bd:a0:c4:45:00:bf:80:
d9:81:91:f0:9a:4e:fb:34:eb:27:93:e2:99:03:28:
2d:b6:8b:f6:f8:d3:59:94:27:5f:83:26:54:5d:a5:
93:73:24:72:27:0e:28:bf:69:36:ec:b8:eb:97:1c:
33:4c:5d:44:63:b0:62:02:42:a2:c6:7e:1e:fa:47:
b6:1f:49:25:3b:48:20:af:17:e7:dc:ba:af:bf:05:
76:3a:0c:24:5d:f7:44:48:e5:69:d1:fb:8d:ea:61:
f3:c6:2f:c8:8c:bd:9d:b4:6c:e7:83:c2:ba:23:2f:
43:4c:5c:4c:4d:fd:2e:f2:f2:e0:ce:e1:39:8c:60:
4e:99:76:b2:46:21:ca:41:46:42:5d:bd:ae:7a:50:
a6:14:da:5f:72:0d:f5:53:5a:7f:25:7e:79:9d:81:
b4:bc:6e:69:2f:3b:82:11:81:96:7b:34:57:57:91:
92:0a:2c:ca:12:cf:9a:c7:1f:18:92:18:6f:e0:86:
a6:ef:a6:93:af:1a:ad:f9:38:ae:19:2c:e2:4a:9f:
e5:80:51:87:c5:15:f7:8c:0c:fd:93:9d:73:e9:7b:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2D:A0:BA:9C:25:26:11:F7:28:03:E0:9C:DA:33:AF:99:64:83:E0
X509v3 Authority Key Identifier:
keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:a5:a1:5d:e4:40:8a:44:a2:2b:2b:b4:9f:ad:2b:f4:11:92:
93:a0:46:44:e0:8e:dc:28:6f:54:64:0c:26:f3:a1:0b:52:d8:
23:9e:6d:00:17:42:d1:59:2b:dd:95:18:a4:6c:0f:50:8e:23:
17:47:6a:ca:e4:25:bf:50:7d:fd:df:53:fc:83:4d:eb:6c:2b:
c0:f7:0f:b5:20:ea:bf:9a:a1:0a:29:32:cc:08:ae:23:45:42:
d0:4e:48:32:ff:c0:19:c0:76:59:1c:19:6c:23:44:a3:e1:f9:
4e:ec:2d:2e:45:27:ef:74:4c:44:cd:89:1f:1f:13:f1:2b:1f:
4d:b5:96:ed:3a:02:78:a3:78:fb:60:7d:c6:9b:84:12:57:ac:
7f:57:dc:f2:91:3a:3e:a0:de:35:de:0b:15:bc:12:46:0a:ec:
7c:75:85:46:ad:ba:99:a7:43:07:5d:c9:58:b8:de:32:e6:9d:
57:0a:58:5d:0b:dd:f6:a6:df:75:8e:c8:d2:ba:7a:42:69:7d:
1d:39:50:56:da:91:84:57:0a:10:9d:7d:23:a4:ae:21:c3:c8:
6c:ed:1e:94:6a:02:2e:16:44:db:bd:5f:94:53:ce:7a:4e:a4:
bd:a5:e6:0c:29:c7:56:49:e0:16:27:5b:c1:28:98:61:21:91:
4e:6a:63:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:07:44 2026 by rpki-client