
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
File: UM3WDPjzEj_evOkIgq83u-PvXEg.mft (raw, json)
Hash identifier: 5MMCgUoC1JxLZf9qtmIrRaCMkIkZD7B9DEM8gaC2cys=
Subject key identifier: 34:8A:96:EF:29:F8:F2:3B:BC:41:91:CB:1A:31:C2:B0:91:15:14:54
Authority key identifier: 50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
Certificate issuer: /CN=A9122C94/serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Certificate serial: 0870
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
Manifest number: 0867
Signing time: Tue 06 Oct 2026 21:03:18 +0000
Manifest this update: Tue 06 Oct 2026 21:03:18 +0000
Manifest next update: Tue 13 Oct 2026 21:03:18 +0000
Files and hashes: 1: UM3WDPjzEj_evOkIgq83u-PvXEg.crl (hash: 9h+2m2H0UtVHWQ8v317dvpIsYHhzoBzDZ/wJyQUihTc=)
2: 5BF797081CF411EBB5ADE642C4F9AE02.roa (hash: 1c98NA9cHWOcz+QEe0M5ImtNh0IRowEb6OME0CEVJwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:40:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2160 (0x870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122C94, serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Validity
Not Before: Oct 6 21:03:18 2026 GMT
Not After : Oct 13 21:03:18 2026 GMT
Subject: CN=6ac56216-edde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4e:5b:00:74:20:80:bd:af:93:90:19:7a:e1:
0e:35:5f:01:a5:5e:f1:89:a0:b5:31:05:7f:8b:8c:
df:7a:48:2d:c5:f8:03:47:be:2c:7d:ea:ca:6e:e6:
ef:c3:78:ee:c4:4e:fe:12:61:d3:bf:25:8a:88:be:
dd:86:fa:b0:2f:8a:5a:16:e1:91:f5:76:63:c9:da:
59:37:02:e1:f5:26:1c:ab:b9:5a:6f:cd:a5:04:32:
48:da:68:d3:67:72:48:5c:e5:33:fb:42:31:be:ff:
c0:32:e8:ba:26:27:76:f0:a0:e7:77:6f:12:df:1c:
57:4f:73:35:b5:cc:75:d7:0f:76:63:9d:09:14:54:
fc:9b:c8:2e:d0:5a:b4:60:d8:a9:3c:47:2d:4a:e1:
4d:d4:1c:56:ab:ed:d1:0b:9f:d4:f9:df:23:d7:30:
91:d4:8e:82:9e:b8:b5:7a:ab:20:60:a3:c2:4d:9e:
07:fc:65:60:e8:40:00:2a:26:7e:b0:23:4e:51:42:
57:a1:32:0f:cc:96:f4:71:5f:95:18:11:73:9d:0f:
c9:9b:2f:db:d0:ae:a1:13:cd:3f:36:43:a5:aa:76:
fc:67:cc:c2:78:af:99:50:a3:e6:5f:88:61:aa:63:
bc:98:6e:5a:0a:e9:ba:4d:d2:5a:8d:6d:f9:2f:58:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8A:96:EF:29:F8:F2:3B:BC:41:91:CB:1A:31:C2:B0:91:15:14:54
X509v3 Authority Key Identifier:
keyid:50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ca:6a:19:13:65:9d:57:0b:53:b3:18:bc:b9:bd:62:4f:92:
44:f5:72:29:ae:59:c7:31:95:fd:36:b1:30:4a:da:b1:b6:ed:
74:97:80:5e:e1:61:69:02:49:d9:23:58:a4:47:73:63:25:1a:
49:af:2f:a7:fb:55:3a:2f:53:3a:6e:df:3c:ad:34:51:66:12:
c6:dc:f4:a3:ab:ff:87:6b:e6:00:7a:7c:c5:32:27:fd:e5:06:
af:13:d2:77:da:af:3e:cd:7e:a2:1b:ef:4e:e4:25:b2:a0:25:
9a:58:cf:03:69:ed:df:37:75:56:8d:fb:7c:29:4c:27:da:55:
c0:24:21:a4:06:46:3f:4f:21:ca:ec:1e:f0:01:a6:56:75:43:
6b:8c:bb:68:59:56:14:57:60:c4:5d:db:0c:c1:2d:1b:da:45:
79:05:92:27:a8:af:c0:f2:5e:fb:8b:f2:75:2e:c1:64:54:f2:
05:c3:f6:99:67:aa:c7:04:6a:d1:3c:3a:51:c5:f5:09:b8:6b:
54:d7:d2:93:a2:20:38:fb:61:bb:e7:ae:ec:d7:19:43:73:7b:
98:c6:9b:be:82:2c:18:e0:ae:2f:60:35:eb:10:04:bd:2c:0a:
81:fd:34:03:c6:8d:09:5d:c7:60:cb:cf:3d:cf:f3:24:52:78:
ad:3e:94:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:07:52 2026 by rpki-client