
$ rpki-client -vvf rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
File: _UmlE0ai96yBGwCtYuvvDpSiobI.mft (raw, json)
Hash identifier: KJXUWJegEYpkSCO0c5RWkwvIAy6pVl5vdVQ6cDfVViA=
Subject key identifier: FF:86:C7:41:C2:56:36:D2:BB:A6:33:78:A6:E5:06:FC:40:59:EF:A6
Authority key identifier: FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2
Certificate issuer: /CN=A91652B5/serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2
Certificate serial: 55
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
Manifest number: 4E
Signing time: Sun 05 Apr 2026 07:39:15 +0000
Manifest this update: Sun 05 Apr 2026 07:39:14 +0000
Manifest next update: Sun 12 Apr 2026 07:39:14 +0000
Files and hashes: 1: _UmlE0ai96yBGwCtYuvvDpSiobI.crl (hash: aWsrtUHnq9v4A+CfcXas+t/kkcsy5wTe3qaCDoKSQzE=)
2: 535DB56CD1AF11F0A278C10CC4F9AE02.roa (hash: BXUEY5m+3lonf61CO2Aq4e6KwB/tUlOeMJ88DFpi710=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl
rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:39:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91652B5, serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2
Validity
Not Before: Apr 5 07:39:14 2026 GMT
Not After : Apr 12 07:39:14 2026 GMT
Subject: CN=69d211a3-ba50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:56:90:29:ba:6a:3a:11:61:ce:f3:c3:b9:47:
b4:c6:fd:eb:8b:c8:6c:31:07:41:37:b8:35:da:a0:
0e:cc:7e:1c:dc:bd:5d:75:ba:b0:a4:ad:16:e3:18:
67:7a:6a:0a:d5:34:4d:2a:e6:ce:6b:13:5e:a4:9c:
02:c0:b6:11:9a:31:7d:cb:29:1e:65:5d:66:8e:3d:
44:8e:61:88:fa:c9:77:d6:ee:2b:9e:6f:93:4e:b2:
33:65:81:54:af:8b:d0:3b:dd:f1:7b:da:54:a5:4b:
eb:61:f9:74:3e:00:ea:cb:c0:2b:83:29:34:d8:2f:
4a:33:d8:51:c5:52:86:7f:ae:6e:44:ec:32:af:16:
fe:58:f6:7d:ab:f6:06:80:27:66:c1:96:ca:0c:4e:
eb:d3:3b:08:b5:83:c0:66:b3:30:cb:47:a5:71:dc:
0a:6a:ab:80:c9:ae:cc:b4:c5:32:1a:78:d4:74:cc:
0e:d6:33:6f:ab:ec:4d:8f:76:4b:4a:d1:5b:71:14:
49:a2:dc:b1:bf:94:05:7e:7a:b5:cd:db:64:13:25:
57:f3:a6:af:86:28:66:07:5d:12:c5:18:cb:cf:02:
75:01:9e:db:78:4b:f1:63:83:aa:ed:d7:7b:c6:e9:
b8:4b:3b:58:81:00:37:48:9f:58:67:ad:f2:cd:17:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:86:C7:41:C2:56:36:D2:BB:A6:33:78:A6:E5:06:FC:40:59:EF:A6
X509v3 Authority Key Identifier:
keyid:FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:18:fc:a5:cd:09:0d:d0:0e:23:b6:ba:e6:b9:09:ee:19:81:
96:ae:40:d8:f4:2b:2d:fb:84:45:2d:c6:a4:09:bf:7e:e6:aa:
63:58:eb:0f:30:d7:58:96:ae:06:ec:6f:7d:29:7e:8f:01:09:
d7:77:b9:37:a2:2a:f7:80:d7:da:fa:e3:df:b0:c7:48:89:17:
2c:5d:25:3f:69:97:e6:d5:b4:3b:7d:30:d3:f4:e3:6f:15:07:
bc:14:fc:75:73:10:5e:af:e1:58:ac:0b:b2:73:b7:82:66:c5:
c6:c4:c9:5f:b3:42:bf:f6:36:07:42:96:18:cb:5f:1e:3c:ed:
93:fb:aa:14:8f:bb:00:17:e3:04:88:c3:09:a3:89:27:64:a6:
2c:48:e1:d7:98:bf:8a:eb:79:bc:54:3d:34:c9:68:53:da:9e:
6d:14:e7:5f:fc:2a:4c:30:fd:73:07:98:3b:75:16:e1:e0:ca:
ac:b2:91:9f:8b:7a:9a:4e:42:17:39:dd:4c:55:f2:84:f9:1b:
39:9d:9a:53:73:d9:d8:cc:36:25:8a:5a:0e:87:1b:52:a2:eb:
19:58:17:fa:32:0a:d0:49:c3:e1:d3:42:ce:37:35:2d:f8:4b:
87:a1:62:89:b4:c5:3a:57:c5:36:4a:14:da:16:83:d4:b5:8a:
e7:94:75:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 01:23:59 2026 by rpki-client