
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
File: UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft (raw, json)
Hash identifier: pGyNWKLSLXaiNTYOSioarKsaQw2+wfdPD2cLjQpxXGg=
Subject key identifier: D4:05:12:EC:0E:E3:47:2F:5D:3A:4A:43:9C:CF:34:07:2C:D1:7A:80
Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Certificate serial: 3130
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
Manifest number: 3116
Signing time: Thu 16 Apr 2026 15:24:52 +0000
Manifest this update: Thu 16 Apr 2026 15:24:52 +0000
Manifest next update: Thu 23 Apr 2026 15:24:52 +0000
Files and hashes: 1: UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl (hash: g0h297TsaRkmPQpUIPbO2/ckHXiDzIM9VfGunW0Wfxk=)
2: 446A425EA6BB11ED9D458785C4F9AE02.roa (hash: 6OqlVcYAqCDhteCgFv3UWoxb9hgSROAufjQ6ZVdl01Y=)
3: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (hash: KI0oK487s7wSSjOCMfIRVu0m+Nax6IYTlrWQcONrqMQ=)
4: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (hash: q4IKP4eGJJ0oDgbAG4b8WsxXK5K7aSMyKfuwqjPJmm4=)
5: E5DB5238DFBD11EC8E203126C4F9AE02.roa (hash: ukvq4q+WUo9M3bWh6pJLSaPBet3ApLWl9pgkS4gI7ag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12592 (0x3130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Validity
Not Before: Apr 16 15:24:52 2026 GMT
Not After : Apr 23 15:24:52 2026 GMT
Subject: CN=69e0ff44-6413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:00:67:c2:54:ed:82:55:8f:44:33:2d:b3:
6d:2f:4a:6a:0f:0d:53:c3:6d:b8:f8:0e:79:a9:db:
1c:04:1f:9e:7d:2f:95:7b:0b:0b:8f:fd:42:47:b3:
9c:fa:5a:9c:12:0f:8e:41:ef:79:49:37:d0:a5:e4:
4a:eb:4f:7c:29:81:2f:ab:b8:17:fa:44:6f:e1:ed:
43:8a:f0:9a:ca:20:c3:6d:39:1e:d2:c8:6d:e9:8f:
c8:60:19:ec:40:fe:cc:3c:4c:fd:f2:bd:1c:9c:c1:
4c:f7:39:49:74:f2:04:e5:3e:31:76:85:a3:76:64:
20:fb:f8:8a:d1:97:5b:b2:a0:5c:63:28:6d:21:ea:
ff:31:63:df:da:59:4a:02:0f:cf:a8:64:2c:be:a2:
9e:75:cf:73:cc:cd:a0:0d:5b:74:96:99:75:b4:c3:
02:9e:02:53:78:f1:0d:ed:bf:4f:87:e0:fa:bd:23:
85:06:5e:11:2b:b2:2d:ab:d2:d6:66:5a:1d:fb:0f:
21:c7:9f:f9:62:4c:f8:8b:a5:a3:00:ac:c3:d7:39:
c7:80:9f:65:49:88:d8:e5:23:c2:eb:be:d0:a2:cd:
1a:48:af:e1:2e:71:cf:a1:cf:9d:6a:15:5d:30:dd:
73:15:4c:08:e5:b8:d6:f6:e6:6f:ea:b8:80:29:fb:
eb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:05:12:EC:0E:E3:47:2F:5D:3A:4A:43:9C:CF:34:07:2C:D1:7A:80
X509v3 Authority Key Identifier:
keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:99:37:f9:ba:ec:c9:56:4b:a6:9d:c1:5a:3a:2b:a6:75:01:
e5:8e:a8:14:3f:69:df:c0:03:c1:a9:7f:1b:9c:79:22:5d:d7:
34:22:32:74:36:74:56:52:9d:41:95:ea:24:65:f0:be:a7:79:
fd:80:99:a3:49:d2:da:c4:e5:cc:3a:b0:22:26:95:55:5e:b2:
f9:1a:2e:a4:99:03:f7:f3:7f:86:61:ed:85:0c:4c:12:75:38:
cb:46:16:fe:fa:8f:ed:88:73:f7:bf:d0:20:7a:6b:5d:45:1c:
04:ea:aa:53:2d:59:3c:f8:90:7f:e4:58:38:27:c9:4e:31:ea:
3a:6d:40:f5:89:16:8a:73:01:87:55:27:63:06:48:ef:8e:cc:
c9:27:4c:21:d1:22:fe:95:db:a6:a2:4e:e7:2f:39:ed:d4:78:
a5:72:de:a8:09:32:2a:2f:f4:e1:32:d5:6e:64:3c:e1:cc:1f:
e1:cf:5c:38:9b:72:45:fe:ad:e0:8f:98:08:2f:9c:8b:de:32:
74:aa:6d:4f:45:56:4b:92:51:b1:d9:d2:ec:e3:36:d9:a8:ae:
60:41:d9:8f:71:84:a5:66:ba:32:95:5d:b1:fd:ee:51:1c:a9:
4b:72:6b:18:c1:ca:5c:29:25:5c:03:6d:9b:dc:fe:aa:34:59:
d5:29:88:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICMTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IxREExMTAvBgNVBAUTKDUwRTY2ODNBNkFGNDY0NEI2OEExMUMyMkRBN0YzQTY1
QjMxMkMwNkYwHhcNMjYwNDE2MTUyNDUyWhcNMjYwNDIzMTUyNDUyWjAYMRYwFAYD
VQQDEw02OWUwZmY0NC02NDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt4UAZ8JU7YJVj0QzLbNtL0pqDw1Tw224+A55qdscBB+efS+VewsLj/1CR7Oc
+lqcEg+OQe95STfQpeRK6098KYEvq7gX+kRv4e1DivCayiDDbTke0sht6Y/IYBns
QP7MPEz98r0cnMFM9zlJdPIE5T4xdoWjdmQg+/iK0ZdbsqBcYyhtIer/MWPf2llK
Ag/PqGQsvqKedc9zzM2gDVt0lpl1tMMCngJTePEN7b9Ph+D6vSOFBl4RK7Itq9LW
Zlod+w8hx5/5Ykz4i6WjAKzD1znHgJ9lSYjY5SPC677Qos0aSK/hLnHPoc+dahVd
MN1zFUwI5bjW9uZv6riAKfvrzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQFEuwO
40cvXTpKQ5zPNAcs0XqAMB8GA1UdIwQYMBaAFFDmaDpq9GRLaKEcItp/OmWzEsBv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS8xNEI3NkJDOEVE
MEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpFdG9vUndpMm44NlpiTVN3
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VPWm9PbXIwWkV0b29Sd2kybjg2WmJNU3dHOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjFEQS8xNEI3NkJDOEVEMEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpF
dG9vUndpMm44NlpiTVN3RzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPZk3+brsyVZLpp3BWjorpnUB5Y6oFD9p38ADwal/G5x5Il3XNCIydDZ0VlKd
QZXqJGXwvqd5/YCZo0nS2sTlzDqwIiaVVV6y+RoupJkD9/N/hmHthQxMEnU4y0YW
/vqP7Yhz97/QIHprXUUcBOqqUy1ZPPiQf+RYOCfJTjHqOm1A9YkWinMBh1UnYwZI
747MySdMIdEi/pXbpqJO5y857dR4pXLeqAkyKi/04TLVbmQ84cwf4c9cOJtyRf6t
4I+YCC+ci94ydKptT0VWS5JRsdnS7OM22aiuYEHZj3GEpWa6MpVdsf3uURypS3Jr
GMHKXCklXANtm9z+qjRZ1SmILQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:24:47 2026 by rpki-client