
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
File: R_UMlYv5z1RcYBresE-KBeEB2aU.mft (raw, json)
Hash identifier: YIhA3ZjeZ+ukTuZMJ/NFtjosnb2Vuk5nWQMc9eiJ68M=
Subject key identifier: D6:C1:BE:6B:C8:9D:70:14:D8:00:98:E1:25:26:D3:77:13:52:DD:6E
Authority key identifier: 47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5
Certificate issuer: /CN=A9153490/serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
Certificate serial: 01BC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
Manifest number: 01AE
Signing time: Mon 01 Jun 2026 04:50:18 +0000
Manifest this update: Mon 01 Jun 2026 04:50:17 +0000
Manifest next update: Mon 08 Jun 2026 04:50:17 +0000
Files and hashes: 1: R_UMlYv5z1RcYBresE-KBeEB2aU.crl (hash: ORldS2Rnf7Xcz05IhtbpiVk2PGV5xPPKhi0hUJX3Q0o=)
2: 0F778EDCEBB411EE9D86095BC4F9AE02.roa (hash: h/OwSIHosa0hSGtUAMFoRQJH1IunWAz+X50+i3Y6izk=)
3: 0F0A0C72EBB411EE9D86095BC4F9AE02.roa (hash: hrpObnCPcxRMCt15cylb8b70cp9YbT6TW8DLiHpGHoo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl
rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 04:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153490, serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
Validity
Not Before: Jun 1 04:50:17 2026 GMT
Not After : Jun 8 04:50:17 2026 GMT
Subject: CN=6a1d0f8a-2ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:64:f6:ac:21:64:12:92:ca:9c:3c:09:d2:
6e:0e:42:ad:8f:a5:24:8a:14:0d:2c:dd:f8:97:41:
8b:79:03:0f:f5:28:64:3a:55:bd:cd:29:8b:a0:6c:
d5:bc:5b:86:a5:f5:ec:a8:c7:ff:35:a8:a6:18:0c:
46:0f:dd:a1:da:c4:a6:33:19:56:5c:88:bb:5c:df:
0c:31:5d:c4:c5:b9:32:a6:88:f5:57:9f:2a:c1:f2:
06:02:fe:1a:8c:e6:ed:b6:87:ca:80:3d:19:ff:2e:
09:81:f0:86:c1:80:bd:18:0a:c3:4e:d3:5a:16:04:
ba:0b:ea:70:31:64:69:4c:92:eb:1a:ad:0a:2a:22:
c1:af:16:b9:74:5b:76:80:eb:f7:e0:33:56:69:14:
75:71:76:ac:5e:e6:01:f8:fb:0d:86:3a:d1:d9:e0:
0e:d3:89:c0:69:87:95:b1:be:75:82:c4:d8:80:38:
07:0d:8a:ce:fc:ac:f0:66:c9:0f:a3:9a:9a:70:21:
f9:29:6d:f2:25:46:f1:58:92:cd:69:22:66:2c:58:
07:c3:23:83:6b:b7:de:64:30:e2:b1:80:02:0a:85:
ca:f6:a8:a7:c0:ad:2c:ec:c3:1b:ba:82:08:27:ce:
60:9f:3b:b1:a5:5f:30:43:f6:27:c8:8f:26:cc:8d:
69:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C1:BE:6B:C8:9D:70:14:D8:00:98:E1:25:26:D3:77:13:52:DD:6E
X509v3 Authority Key Identifier:
keyid:47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:26:08:f1:f5:bb:20:e0:be:84:9d:68:ae:32:b8:f5:80:10:
a5:6b:d4:31:57:70:e4:92:d6:06:07:84:9c:2f:97:28:de:2f:
59:af:9d:a3:6b:56:da:8f:d7:33:73:3d:6e:60:be:54:9f:c5:
ac:ca:a7:11:59:97:6e:b5:4c:54:96:84:1d:0f:83:a4:f6:cb:
34:15:7e:35:89:4c:5e:a9:aa:92:ce:db:2c:af:33:63:eb:6d:
b3:19:23:08:37:ba:07:a5:6a:19:4b:0b:05:6f:75:f4:43:49:
ac:d5:f5:4f:08:0d:14:41:03:ee:eb:59:38:32:f4:45:0a:00:
9b:80:8a:71:f1:26:e3:2d:de:a8:dc:4b:e0:67:8e:bc:56:7c:
cf:0c:1d:46:ec:7f:68:2d:d0:39:c4:8e:14:18:22:81:e2:4b:
c3:b3:ee:2d:9c:a6:66:20:40:bd:fc:33:ac:cb:92:01:06:d4:
b3:63:7f:df:2b:1d:69:65:e3:3e:20:db:ef:0d:ef:f4:d7:9b:
8c:45:ed:af:7b:99:89:4b:89:0e:49:71:b6:8c:22:ef:d4:66:
15:9b:06:d3:ac:c8:3b:91:01:29:5c:eb:8d:81:46:83:19:f7:
b9:14:d5:0c:73:ff:b6:cb:33:50:ec:41:ea:60:68:d8:b3:ad:
9f:4b:fb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:45 2026 by rpki-client