
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
File: R_UMlYv5z1RcYBresE-KBeEB2aU.mft (raw, json)
Hash identifier: Q1EWnwV1hHEf443K3tbRhTMETzzsQA8cfl3kk4Da91g=
Subject key identifier: 5C:71:18:97:20:54:AD:62:65:E5:25:4E:24:80:80:57:10:C4:EC:D6
Authority key identifier: 47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5
Certificate issuer: /CN=A9153490/serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
Certificate serial: 0207
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
Manifest number: 01F9
Signing time: Thu 29 Oct 2026 03:54:53 +0000
Manifest this update: Thu 29 Oct 2026 03:54:52 +0000
Manifest next update: Thu 05 Nov 2026 03:54:52 +0000
Files and hashes: 1: R_UMlYv5z1RcYBresE-KBeEB2aU.crl (hash: pmJlE9i9kklX5WYfND47G7AvA09yYtn80LhWWk48ibk=)
2: 0F778EDCEBB411EE9D86095BC4F9AE02.roa (hash: h/OwSIHosa0hSGtUAMFoRQJH1IunWAz+X50+i3Y6izk=)
3: 0F0A0C72EBB411EE9D86095BC4F9AE02.roa (hash: hrpObnCPcxRMCt15cylb8b70cp9YbT6TW8DLiHpGHoo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl
rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 03:54:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153490, serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
Validity
Not Before: Oct 29 03:54:52 2026 GMT
Not After : Nov 5 03:54:52 2026 GMT
Subject: CN=6ae2c38d-f822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:84:98:1a:58:0a:a1:b6:a0:46:5a:b6:b4:
e6:86:e0:66:d4:ec:a6:4b:a3:36:87:91:17:14:60:
a7:53:e9:e6:da:7b:ee:7d:8a:9e:0e:d8:40:bb:84:
01:50:73:15:b1:3f:3c:58:45:8b:d0:7f:24:94:fc:
d3:c0:a2:74:7c:4c:b6:a7:25:c2:59:37:1b:fe:eb:
27:93:80:eb:de:5b:d1:44:54:bc:93:45:3c:16:3b:
cb:f0:d4:43:ee:51:81:bf:85:c3:4d:8d:45:df:0e:
ba:fd:b3:c0:12:5f:68:06:da:ae:6c:9e:9d:42:fc:
f1:b2:a0:ee:2b:ce:6b:48:41:01:a3:02:00:d7:a8:
32:a6:54:b6:f0:ba:44:0e:c7:1d:4a:7b:b9:db:0c:
87:dd:21:d7:10:80:9b:01:6d:08:3c:ea:18:ed:32:
16:c1:dc:df:8d:0c:61:e5:56:93:63:47:70:67:03:
53:22:98:06:43:18:bc:07:7e:ac:9e:7c:26:3a:a9:
74:29:fd:6f:7b:84:90:a1:b9:bd:05:07:76:d6:5b:
58:b7:57:cb:f3:72:ba:a5:88:42:1b:9e:9f:c6:a9:
01:63:3c:de:9d:4d:4c:70:60:1e:0a:0d:02:5c:24:
01:e7:8a:c6:fe:ae:19:04:4b:44:bd:e8:90:93:21:
25:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:71:18:97:20:54:AD:62:65:E5:25:4E:24:80:80:57:10:C4:EC:D6
X509v3 Authority Key Identifier:
keyid:47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:bb:47:ba:8b:5c:7a:fb:4f:99:35:45:a9:c5:55:fd:3d:0e:
6c:f0:6d:40:19:de:75:be:fd:b6:9a:b2:85:f8:05:32:88:af:
8f:3f:68:38:f3:65:7a:2c:01:c9:0c:ae:ce:c2:e9:0b:98:23:
b4:0b:b1:12:89:56:5a:a1:e1:05:be:f3:9a:33:36:ed:ed:73:
6c:f1:83:ba:ef:cc:ce:c8:8e:56:d9:6f:a1:31:e8:6d:60:e2:
a9:dd:81:1b:95:8f:1e:60:9a:e9:89:78:0d:25:9d:0b:f6:9e:
51:59:d9:53:30:db:58:66:a9:c4:49:31:5c:95:1f:b1:c7:b2:
b1:49:ad:39:52:b4:de:45:1b:be:33:03:3e:44:48:00:4e:e9:
69:71:37:7d:b7:40:ff:6f:f0:f3:52:3a:3d:8b:22:59:a3:3a:
4f:ee:0e:41:90:f7:5d:20:ed:d4:22:e7:11:43:d5:22:59:80:
56:2c:23:0a:b0:dc:c8:29:c1:03:77:fd:49:a2:80:63:7b:7d:
be:54:8a:fb:46:99:18:98:31:65:88:44:f6:b5:ad:81:fb:03:
7b:a0:a4:30:4f:39:95:08:50:e8:ee:5b:a9:6d:b2:d4:45:13:
a6:81:9e:6e:e9:f0:0a:45:ea:49:9b:47:49:92:94:fe:ba:85:
49:90:93:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 20:22:41 2026 by rpki-client