
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
File: UPIOqel1rkxMhmfLV_e89XAhXJY.mft (raw, json)
Hash identifier: cJ6Azq82tWK1KMCilIpR2j7qymSWgHR4q3uSMwdCXm8=
Subject key identifier: 5D:19:38:EA:FD:34:63:2F:EF:71:78:0E:9D:17:92:49:22:E7:B0:4D
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Certificate issuer: /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial: 2516
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
Manifest number: 2494
Signing time: Tue 04 Nov 2025 15:52:22 +0000
Manifest this update: Tue 04 Nov 2025 15:52:22 +0000
Manifest next update: Tue 11 Nov 2025 15:52:22 +0000
Files and hashes: 1: UPIOqel1rkxMhmfLV_e89XAhXJY.crl (hash: GK0o098X5Po+xZxWDNqFUDaf7XrOnPC4/dWeCIs6iPU=)
2: 773D7A96B0DC11ECAEC09469C4F9AE02.roa (hash: +WC2UXiXRAqIzHn7ONEYWXHBgmbJbPnjPVSGS0s7/Ek=)
3: D327C18CDFEC11ED9AB6E147C4F9AE02.roa (hash: 3InFcZXcKxf33f9FWszWBOSOPJdwVMTqcXaCFEAtgos=)
4: B8951CDCD23611EA8D9E515BC4F9AE02.roa (hash: wpRpc+8U0njhNHbGwBjOo+RuZgkwEeZa9Pqu3yMunD4=)
5: E706A8B2BBF111EE8697E433C4F9AE02.roa (hash: FnsiPBdxFnP5LQukQVG3d42mA5484m2AVmj3oV2t2KA=)
6: 1A2298A2D23811EABDECA85FC4F9AE02.roa (hash: 1/+DL1PoqH8yBHyNvZhkg16rUz6sOO89hqHUzOVSkA4=)
7: 491B85B2E58911ED94960F39C4F9AE02.roa (hash: RyOHGCTj0hywUpSfB0LbQFD/WnXHLiXqG6hMldKxBrM=)
8: 06239EBADFEA11ED835B4D0EC4F9AE02.roa (hash: P7O96Yfngs36i1Yso6tRUdR0UTcCnWvkqMzJTMS0hUc=)
9: 59B3485028C111E7A885571AC4F9AE02.roa (hash: MyX6SM4sHZHxsdiUbFwM+v8VFzTqS7OCLLsMP0uCrow=)
10: 554E53D4B0B811EC9BE93E24C4F9AE02.roa (hash: VUsFSPTS+fH+FbOaolmzdGMNrxq1DeJRsMnTavDc/kM=)
11: 5A2BB4DE28C111E7A885571AC4F9AE02.roa (hash: T2OA6la6kiD43UxKezGsuNIwVX4A5ubar9PjrFa2VdE=)
12: D50024D6DFEC11ED9AB6E147C4F9AE02.roa (hash: hn226uuDr+Sb6ocn2sePSMCB9luhKNckDxMjXkyTZ+s=)
13: D451FBE0DFEC11ED9AB6E147C4F9AE02.roa (hash: 36bNWyq826on2XLU7og/PScQxw0sLluCdj62sCimk1k=)
14: AFF73BD2BA0811EAB2479081C4F9AE02.roa (hash: uGRoaBEpGo4yAmtbgi1VOwtzxczgF1r1S032AP+3DGc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9494 (0x2516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Validity
Not Before: Nov 4 15:52:22 2025 GMT
Not After : Nov 11 15:52:22 2025 GMT
Subject: CN=690a2136-afdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:5e:6f:11:b1:b0:27:ba:47:2d:86:e1:8c:
75:11:af:37:22:8a:3b:02:4e:f5:45:63:e7:50:98:
f2:87:2e:18:00:25:26:68:8e:98:aa:8b:f0:6b:c2:
90:d9:a5:f8:ee:83:c0:14:dd:60:ff:69:72:7a:58:
92:b2:ae:2e:5a:b0:4a:60:6e:c8:2f:24:19:d1:84:
dc:99:b5:d2:2d:68:e8:a1:10:44:20:f5:64:bd:63:
0a:64:8f:d5:c9:9c:01:42:1b:45:f3:59:61:b3:d5:
cc:08:0b:4f:08:26:4b:fb:c7:cd:10:df:f3:dc:0d:
74:d5:ed:9e:01:d6:5f:46:9b:aa:74:cb:1b:9d:34:
3f:3b:63:b6:9e:d8:40:4e:89:a0:c3:b0:2a:99:6f:
7a:c9:db:8b:75:38:62:59:6a:a2:f4:4a:cd:fb:d9:
55:4f:ef:c7:a3:cc:ee:47:01:21:42:8f:d7:54:d3:
96:f7:7f:66:a0:8a:e9:00:49:5c:c2:a9:05:ff:bd:
15:b9:18:5f:99:a6:62:d5:c5:1a:ef:02:94:a6:b9:
f1:dd:5b:6c:87:58:f1:5c:5b:8d:8a:3f:c9:ee:ad:
62:79:ee:07:87:77:ec:af:a5:86:1f:4d:ac:31:38:
50:58:57:31:b5:0d:40:3a:32:a6:e2:f0:a8:de:c1:
ca:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:19:38:EA:FD:34:63:2F:EF:71:78:0E:9D:17:92:49:22:E7:B0:4D
X509v3 Authority Key Identifier:
keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6d:49:fc:e8:b4:13:4b:c1:92:f6:2a:e8:c8:94:12:64:16:
a3:be:83:75:fd:08:e3:5c:87:3e:94:44:33:61:ce:5a:4e:5b:
e4:bc:94:d3:82:82:14:10:80:ca:2f:24:19:20:c6:53:01:74:
28:73:20:10:eb:a9:07:07:d1:74:4c:03:70:13:fe:c5:fa:f2:
43:6b:1c:f1:64:73:85:1b:e6:80:74:0c:e9:a4:ea:fb:a0:e3:
c0:7d:bb:0e:4a:16:97:66:9c:41:99:8f:a1:54:c6:69:25:f8:
82:64:59:1e:c2:22:c3:75:b1:62:43:1d:eb:19:2c:e4:43:9e:
43:91:62:c8:0f:f2:b1:1a:47:03:f6:76:e7:6b:79:94:14:5f:
3c:3e:f0:32:c8:10:7a:4c:83:53:0a:d8:79:f6:b0:76:61:a1:
01:32:5c:93:08:89:23:d5:da:37:77:03:54:6f:d2:a1:9f:57:
78:ab:6c:11:51:5e:e6:ee:10:2a:1f:1b:b6:6e:9a:1e:3c:79:
a3:98:73:4a:9f:1c:b3:f4:9d:c9:f3:f0:a6:51:de:31:58:20:
28:52:58:dc:d1:84:45:b3:c9:03:76:06:05:54:1e:57:14:42:
a2:18:20:5d:d1:6b:06:73:5a:e7:e2:cb:b8:18:ae:64:e2:7e:
ea:90:0d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:20:47 2025 by rpki-client