
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft
File: UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft (raw, json)
Hash identifier: O8WAaghOXO5Zp1ZRNK0SBLZfaeXHiMDsUyL3l9iMwu0=
Subject key identifier: 56:A0:DC:30:14:43:CA:AF:05:E4:36:BC:BD:F2:5F:AF:11:CC:45:D7
Authority key identifier: 50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79
Certificate issuer: /CN=A9157031/serialNumber=50E50EDAF64A2C25B731239673D9070F61830279
Certificate serial: 0478
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft
Manifest number: 0473
Signing time: Sun 01 Mar 2026 00:49:30 +0000
Manifest this update: Sun 01 Mar 2026 00:49:30 +0000
Manifest next update: Sun 08 Mar 2026 00:49:30 +0000
Files and hashes: 1: UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl (hash: u6OocVs56QYCsLWKwNgvtNd1z7lTf+HyV7imS0Yvwkc=)
2: 32D8FF34C99E11ED98E9BE5BC4F9AE02.roa (hash: 75eZM/Pn5fV11WrvJUnUrFhvKQhEtrEs1POmskjBp6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl
rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1144 (0x478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157031, serialNumber=50E50EDAF64A2C25B731239673D9070F61830279
Validity
Not Before: Mar 1 00:49:30 2026 GMT
Not After : Mar 8 00:49:30 2026 GMT
Subject: CN=69a38d1a-0466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:33:92:23:91:68:a8:de:7e:5f:c8:da:aa:
d3:13:b5:41:1c:b1:71:12:ab:ab:14:39:85:a8:42:
1e:8b:e1:31:f5:63:9b:14:9f:cd:eb:02:8d:92:62:
8c:14:f2:db:15:dc:83:94:4b:98:e9:b8:7c:0c:ce:
e4:02:66:c0:ea:4d:cf:0b:ee:1d:52:f2:e8:b7:17:
66:17:3b:99:db:b8:2e:bd:46:86:d1:a5:5e:7e:28:
c5:0a:98:8e:75:d6:1d:d7:4a:eb:48:be:75:b7:4b:
9a:8d:56:e5:5f:47:3a:14:98:d4:56:ad:c3:66:ab:
8d:e2:f0:ab:a8:f7:8c:cd:a8:d8:48:ff:85:48:c3:
80:0f:85:c1:e0:2b:e8:7a:a8:64:97:75:8f:b2:dc:
77:54:01:8d:85:cf:c4:53:44:24:a3:df:ce:4c:60:
55:b8:7b:0d:51:69:b3:5b:e5:e2:09:ba:c7:dd:2e:
c5:9b:2c:c4:01:c8:3d:7a:91:7a:b6:d9:8f:16:ac:
99:84:67:84:17:84:d3:4b:32:7b:be:d5:96:b4:38:
93:be:87:1b:2e:64:3b:71:1c:2f:48:47:0c:c7:67:
a6:83:b1:a2:c8:a5:57:b2:ed:5f:b3:79:9f:f3:4e:
ad:f8:d8:0a:6f:8b:04:6e:68:54:0f:8a:3a:99:b5:
f4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A0:DC:30:14:43:CA:AF:05:E4:36:BC:BD:F2:5F:AF:11:CC:45:D7
X509v3 Authority Key Identifier:
keyid:50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d6:fb:11:7a:eb:03:a5:8e:46:90:55:13:47:1b:91:8b:a8:
e3:96:3c:36:cc:00:28:ee:ba:29:7d:c9:a2:d5:f9:e2:02:95:
d8:88:71:cd:d7:f6:e2:75:bf:83:32:b2:e2:a0:81:c2:a7:9e:
49:84:9d:6d:a6:dd:b7:dc:f4:e5:7e:38:1f:d2:2b:e9:5f:03:
56:bb:20:78:b2:ff:c3:af:90:e6:4f:22:5e:e1:d6:9a:31:91:
e3:9a:72:93:ae:51:bf:38:81:6f:82:c0:65:3a:59:f5:fe:d7:
28:3e:a2:41:86:eb:43:87:16:c0:d6:f7:d5:46:79:93:55:fb:
6f:f5:ab:93:74:31:92:b6:e3:d7:57:7d:6a:24:86:8c:a1:dc:
a3:05:c7:7c:f1:a6:59:1c:0c:53:fa:f4:12:0e:49:c5:1f:e8:
58:ec:38:42:5a:0e:1b:12:f4:41:b3:7e:97:05:49:a6:fb:9e:
87:fc:80:3e:a8:72:8c:6b:46:76:de:f4:d1:ca:35:95:09:39:
33:c3:7f:e9:7e:14:d8:bc:d5:44:1e:d5:88:b2:5b:e4:22:e1:
ee:86:2c:90:9e:e1:3f:55:8a:63:44:ad:51:aa:7e:5c:f4:5a:
6d:09:06:fd:c9:e3:c6:92:8c:20:cd:cd:7f:22:d9:5d:ce:07:
59:a7:18:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTcwMzExMTAvBgNVBAUTKDUwRTUwRURBRjY0QTJDMjVCNzMxMjM5NjczRDkwNzBG
NjE4MzAyNzkwHhcNMjYwMzAxMDA0OTMwWhcNMjYwMzA4MDA0OTMwWjAYMRYwFAYD
VQQDDA02OWEzOGQxYS0wNDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnAkzkiORaKjefl/I2qrTE7VBHLFxEqurFDmFqEIei+Ex9WObFJ/N6wKNkmKM
FPLbFdyDlEuY6bh8DM7kAmbA6k3PC+4dUvLotxdmFzuZ27guvUaG0aVefijFCpiO
ddYd10rrSL51t0uajVblX0c6FJjUVq3DZquN4vCrqPeMzajYSP+FSMOAD4XB4Cvo
eqhkl3WPstx3VAGNhc/EU0Qko9/OTGBVuHsNUWmzW+XiCbrH3S7FmyzEAcg9epF6
ttmPFqyZhGeEF4TTSzJ7vtWWtDiTvocbLmQ7cRwvSEcMx2emg7GiyKVXsu1fs3mf
806t+NgKb4sEbmhUD4o6mbX0YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFag3DAU
Q8qvBeQ2vL3yX68RzEXXMB8GA1UdIwQYMBaAFFDlDtr2SiwltzEjlnPZBw9hgwJ5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzAzMS83QTAwNEY3ODdF
QzkxMUVDODRFQzQ0MThDNEY5QUUwMi9VT1VPMnZaS0xDVzNNU09XYzlrSEQyR0RB
bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VPVU8ydlpLTENXM01TT1djOWtIRDJHREFuay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NzAzMS83QTAwNEY3ODdFQzkxMUVDODRFQzQ0MThDNEY5QUUwMi9VT1VPMnZaS0xD
VzNNU09XYzlrSEQyR0RBbmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAntb7EXrrA6WORpBVE0cbkYuo45Y8NswAKO66KX3JotX54gKV2Ihxzdf24nW/
gzKy4qCBwqeeSYSdbabdt9z05X44H9Ir6V8DVrsgeLL/w6+Q5k8iXuHWmjGR45py
k65RvziBb4LAZTpZ9f7XKD6iQYbrQ4cWwNb31UZ5k1X7b/Wrk3Qxkrbj11d9aiSG
jKHcowXHfPGmWRwMU/r0Eg5JxR/oWOw4QloOGxL0QbN+lwVJpvueh/yAPqhyjGtG
dt700co1lQk5M8N/6X4U2LzVRB7ViLJb5CLh7oYskJ7hP1WKY0StUap+XPRabQkG
/cnjxpKMIM3NfyLZXc4HWacYOw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:41:17 2026 by rpki-client