
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
File: OUPUJhV5zeDoKgXKKrVLOHulGTM.mft (raw, json)
Hash identifier: /Qswoj4WZsWWaY3BgwXK5kbfmV31F2ucadqu9qaOYuk=
Subject key identifier: B7:1A:A9:24:A4:4F:7F:39:BA:E9:0E:66:C1:A2:6F:36:D8:9D:00:F1
Authority key identifier: 39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33
Certificate issuer: /CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933
Certificate serial: 0117
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
Manifest number: 010F
Signing time: Wed 25 Mar 2026 05:12:12 +0000
Manifest this update: Wed 25 Mar 2026 05:12:12 +0000
Manifest next update: Wed 01 Apr 2026 05:12:12 +0000
Files and hashes: 1: OUPUJhV5zeDoKgXKKrVLOHulGTM.crl (hash: BMUzTcAsy/VHEb5A/THYDshZ/RI1FiHZ1oF4Rw38p9Y=)
2: 31C36B64905F11EFAF49EB6BC4F9AE02.roa (hash: dKI7uA/SKO3RusYnEdr0A/ZscE+vPWKaXvZ4/iotjxI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl
rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279 (0x117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D88F, serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933
Validity
Not Before: Mar 25 05:12:12 2026 GMT
Not After : Apr 1 05:12:12 2026 GMT
Subject: CN=69c36eac-bc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:ca:7f:ce:0b:94:39:54:c1:e6:cf:83:4d:
68:5d:dc:b8:e7:0a:f1:49:86:6f:13:33:19:74:44:
12:e7:c9:1f:58:4f:70:00:40:5c:19:ac:c7:dd:6f:
32:b6:ed:33:83:38:5e:d7:23:b2:00:58:08:25:ed:
c7:f1:ed:90:87:b5:b9:57:28:5b:12:78:f8:f6:f0:
e2:db:f3:45:a4:2f:5f:ba:98:3f:82:5a:02:bc:0a:
bf:3a:e0:d4:4b:c1:57:d5:f0:a8:13:ac:24:df:02:
9d:fe:1e:91:a6:27:fd:60:c0:2d:c8:be:ae:1a:26:
67:63:4b:e2:09:a6:55:33:e2:80:7c:02:ee:e7:56:
94:41:39:13:bf:4a:8d:b9:7a:ec:6e:27:ab:f4:da:
12:f4:9c:aa:33:2a:52:b4:ba:84:3b:e9:33:03:5f:
31:93:8b:f8:e4:4f:d8:48:5d:78:43:0d:00:e8:f4:
ef:39:6b:d8:e9:60:08:dc:83:a8:ae:e6:d3:36:2b:
2c:50:74:e1:90:50:b7:f6:c5:57:23:8c:65:d1:62:
1e:54:a6:0e:8c:0a:b1:03:9c:73:e8:cc:fd:fd:71:
80:ef:81:77:63:23:79:d2:5c:e7:89:7e:c6:62:96:
3c:a7:6b:f6:52:54:e8:ac:ca:23:71:4f:d7:5d:55:
25:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1A:A9:24:A4:4F:7F:39:BA:E9:0E:66:C1:A2:6F:36:D8:9D:00:F1
X509v3 Authority Key Identifier:
keyid:39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:41:d3:c1:b1:ef:a1:c7:f4:7d:3d:d1:73:51:bc:ee:3d:42:
7e:8e:83:8f:2f:a3:9e:37:11:74:8e:e4:95:51:46:ef:57:09:
10:0f:34:44:90:67:a8:78:9d:1f:53:8c:95:32:ba:00:4b:bb:
cd:e0:45:6f:ac:b6:76:72:04:b7:89:8c:8b:5d:d1:fc:4c:2a:
06:0b:b7:a0:db:d8:1f:26:4c:80:ea:ca:3e:2b:46:93:c7:57:
ce:c8:a1:73:35:02:3a:f3:92:13:7e:aa:11:f2:f5:b8:5f:42:
d3:05:e4:65:5d:f0:1a:ac:14:b8:50:f9:e5:da:f9:c2:c2:a6:
81:4e:33:10:23:5c:ec:90:ef:19:60:3a:23:0d:d4:9b:c1:47:
21:59:1b:16:34:78:97:29:b4:f2:c0:70:d7:85:aa:95:98:31:
5f:45:73:63:e8:f2:12:dd:b4:eb:36:48:4d:f9:f7:87:cd:3d:
08:74:d3:18:c4:2d:46:48:f2:ac:80:ba:56:c1:56:1a:d7:a2:
68:66:af:ac:6e:a4:42:c1:2c:b0:6e:81:f5:21:11:c6:46:bc:
b6:db:78:0b:db:d4:88:ee:ad:5f:59:59:3e:d0:42:cd:eb:af:
d4:b9:a3:54:99:4b:91:10:81:02:29:bc:76:0e:42:89:38:22:
31:c0:c8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:47 2026 by rpki-client