
$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
File: umDC9ghXfO5rvRSTcht6rsoodis.mft (raw, json)
Hash identifier: MiRdYLDm6Qe0xvfwHihZGop+kdPlaKcfchiYAk4J+v4=
Subject key identifier: 6E:E9:C9:0C:3E:02:B9:5F:DF:DD:1C:F6:97:FB:5B:41:0A:D5:9C:AF
Authority key identifier: BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B
Certificate issuer: /CN=A91326FF/serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B
Certificate serial: 014A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
Manifest number: 014A
Signing time: Thu 21 May 2026 05:18:33 +0000
Manifest this update: Thu 21 May 2026 05:18:32 +0000
Manifest next update: Thu 28 May 2026 05:18:32 +0000
Files and hashes: 1: umDC9ghXfO5rvRSTcht6rsoodis.crl (hash: au2W/Qa9tx65tWPX8B+kppO3xzKp9A5TN+lMXm2TWgw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl
rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91326FF, serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B
Validity
Not Before: May 21 05:18:32 2026 GMT
Not After : May 28 05:18:32 2026 GMT
Subject: CN=6a0e95a9-5f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:77:b2:51:1b:c7:c9:a5:b2:24:3c:72:e5:
1f:dc:31:ad:bf:6c:ce:53:11:d8:8a:c5:88:61:73:
b9:b0:e7:c1:7e:a8:c5:96:a5:32:b1:6a:93:58:b3:
4a:ff:d0:87:3c:7d:72:fe:a5:7a:8a:c3:96:3d:a0:
9a:c9:ff:89:53:d3:42:f9:2d:bc:09:cf:99:49:2d:
c2:e0:1b:95:ee:66:9c:72:fe:74:83:6d:ec:5e:00:
2b:d2:6a:c8:63:04:e5:ee:27:d3:a3:a9:a2:22:01:
e2:c2:da:17:1d:59:00:88:29:55:d1:36:96:dc:99:
94:df:a7:3a:ee:0b:af:44:0b:5d:02:95:46:bd:41:
b9:9f:7b:3b:fa:9c:cb:d1:d8:f7:56:ca:74:28:96:
c7:b2:a8:95:48:86:79:e7:0a:a3:35:72:db:8c:d6:
0e:66:d7:2d:5f:fd:b3:5f:b3:5c:90:97:c1:c5:92:
e1:2a:51:08:3a:eb:29:f1:12:0e:d2:f6:5b:98:f4:
0f:e8:18:e9:d6:59:a9:e6:87:6f:c0:53:bd:c0:41:
c7:8a:ee:1d:77:a5:36:2d:50:c0:31:29:8c:c0:12:
1b:31:4a:4c:05:65:59:e6:15:5c:fd:29:dd:27:7d:
60:6e:0b:3d:3e:85:0d:68:5e:16:a0:33:0b:60:78:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E9:C9:0C:3E:02:B9:5F:DF:DD:1C:F6:97:FB:5B:41:0A:D5:9C:AF
X509v3 Authority Key Identifier:
keyid:BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:49:b0:26:4f:d8:ea:51:1a:c4:f8:86:79:a4:bb:a9:5e:a9:
fb:58:62:33:a8:71:1f:e7:6c:8b:1c:27:78:ab:af:a4:0b:1e:
21:37:8d:46:d8:8d:2b:ec:7a:84:64:27:96:c4:2b:36:90:8a:
a0:c6:00:bc:3b:d8:56:ed:58:6c:79:c1:95:92:6b:75:80:94:
64:ee:79:9c:e7:bb:58:1d:ff:4c:8b:35:13:b1:82:69:3b:3f:
39:df:c3:ae:cb:a9:9c:37:d2:a2:ef:26:d0:0e:5d:1a:83:c4:
98:38:b9:08:df:a7:5a:d1:bf:90:05:ad:c7:f6:6b:70:8f:20:
03:d7:0f:25:e0:7e:6f:8b:20:89:51:ad:f2:fd:6c:16:b2:11:
38:07:f3:d9:98:b1:05:38:e2:95:71:e9:2e:4b:61:53:3f:10:
54:4f:6f:4e:27:4b:ed:6a:91:69:8d:ab:5d:b0:86:15:11:e0:
e6:e1:82:16:db:5b:d0:01:0a:fc:9b:06:77:05:94:b0:68:5d:
72:39:fc:f6:06:b6:06:bf:fe:bf:4a:71:07:5e:b2:7b:51:51:
58:c6:19:9b:c8:a8:e4:e2:d0:91:f7:0f:10:0d:9d:73:82:0d:
9a:03:ca:59:e0:6e:1f:79:69:08:98:98:ff:0d:c8:c9:a1:f4:
6a:6d:72:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:31:10 2026 by rpki-client