
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
File: UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json)
Hash identifier: dvQz7PYZNUy/HJutI7QqscVSPVEOEdfXSNn2LxniiYE=
Subject key identifier: CE:6E:BF:5E:84:E2:DF:08:87:03:9F:62:E8:61:A2:F6:BF:2B:01:7F
Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0
Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0
Certificate serial: 0AE5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
Manifest number: 0ADB
Signing time: Mon 02 Mar 2026 03:13:06 +0000
Manifest this update: Mon 02 Mar 2026 03:13:04 +0000
Manifest next update: Mon 09 Mar 2026 03:13:04 +0000
Files and hashes: 1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: lDn+mIW/t5TlYBxFApvQ7jMOkLv7Wd0UwRQacVhwzYM=)
2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: bP8YW/usVEPebr8yo+q/K5uFmrIVy5PiorRcfqJheHQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl
rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2789 (0xae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149DF2, serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0
Validity
Not Before: Mar 2 03:13:04 2026 GMT
Not After : Mar 9 03:13:04 2026 GMT
Subject: CN=69a50041-1c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:66:76:73:a4:8b:48:e4:af:ad:a5:6f:ff:
ab:4b:28:37:8d:82:83:e6:b4:9e:f9:7c:05:1c:df:
c8:f8:08:b0:a4:2b:3c:42:38:97:30:1b:93:ae:b7:
c0:3e:cd:3f:f9:44:f9:95:34:ff:e9:f1:d4:1b:75:
ec:91:6c:2a:1d:cf:07:20:43:3e:82:21:9e:79:25:
90:c1:f2:f8:b7:a9:4f:13:53:0b:7f:7e:41:77:a1:
a6:49:22:2d:a2:bb:54:52:fd:dc:0f:83:c7:75:ea:
4e:57:bd:c4:79:c0:3d:e3:09:f0:1b:cc:27:af:c6:
ef:b0:07:b1:ef:3d:8b:ff:4e:77:34:fc:7e:a0:0f:
c0:47:01:8b:b8:a8:c6:93:0b:c0:12:78:cf:46:44:
e2:04:27:5d:a2:46:cc:e3:c1:31:c2:b4:36:92:3b:
59:6a:53:51:e8:a0:85:db:91:d5:40:ba:38:d8:59:
e4:3a:61:59:3f:1a:96:4b:64:e4:6a:8c:8b:57:34:
bd:65:63:e5:9e:b7:7c:0f:b9:78:c7:c9:3d:39:9f:
cc:b2:82:cf:e2:d3:bb:92:3a:51:71:3c:a4:f6:23:
fb:ce:84:e3:1e:79:0c:3b:7b:13:de:de:aa:68:91:
48:73:70:2f:f9:a0:d3:7a:c6:76:d3:19:0c:85:f2:
e0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6E:BF:5E:84:E2:DF:08:87:03:9F:62:E8:61:A2:F6:BF:2B:01:7F
X509v3 Authority Key Identifier:
keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:13:09:30:0a:d8:d9:f5:56:65:b0:fa:aa:d0:c5:b4:96:ea:
6e:a5:0f:15:c4:5e:0d:52:41:25:60:87:3b:fd:dc:49:af:2f:
0e:be:59:13:33:6c:7a:09:0a:50:7d:e7:2f:bc:b9:83:93:b3:
fa:cc:f6:d4:9a:e6:b3:3f:ec:f7:90:21:64:fc:1f:0d:7d:ed:
ca:77:8a:a1:9a:04:dc:2e:4f:92:da:51:17:e4:c8:cf:57:ca:
4c:be:66:53:cf:4b:12:b2:09:52:de:72:29:ea:1f:e1:19:08:
52:b1:66:2e:a7:8f:ab:3f:65:00:75:6b:2c:b4:df:82:e5:21:
c8:d0:44:82:e5:71:a3:2e:a4:6a:c4:a0:35:36:57:7c:f1:20:
5b:6d:03:c6:7f:5a:99:bb:69:18:3c:e8:45:be:e4:12:ab:de:
a5:10:7c:17:2d:dc:7c:76:65:69:08:0d:58:60:00:47:a6:b0:
76:c7:ca:b4:de:5f:e7:c3:11:ce:2a:61:aa:e9:5d:95:6b:d8:
cb:c1:48:e5:a4:48:ac:a2:8d:a0:a6:e6:9a:7c:01:5a:2b:90:
6b:97:92:ac:33:09:2f:93:6b:c2:e6:b9:58:1d:93:87:e3:80:
63:31:75:f8:45:7d:9c:70:40:e4:dd:9c:b9:9c:d7:ea:f6:ff:
6f:e4:3b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:38:02 2026 by rpki-client