
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
File: R_UMlYv5z1RcYBresE-KBeEB2aU.mft (raw, json)
Hash identifier: YSNeZJWzz8Ym5UhNuqDVsAqKtYagSUkTye+3+rzQ5cE=
Subject key identifier: 5F:B5:C6:2B:A3:E4:60:BF:16:41:66:AF:F5:7A:2B:73:AE:5E:9A:DD
Authority key identifier: 47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5
Certificate issuer: /CN=A9153490/serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
Certificate serial: 01EC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
Manifest number: 01DE
Signing time: Sat 05 Sep 2026 03:22:56 +0000
Manifest this update: Sat 05 Sep 2026 03:22:55 +0000
Manifest next update: Sat 12 Sep 2026 03:22:55 +0000
Files and hashes: 1: R_UMlYv5z1RcYBresE-KBeEB2aU.crl (hash: 4cZFzRrxd6kpEVL/DRwWUva/uigBfvCqAlrwfyULZWo=)
2: 0F778EDCEBB411EE9D86095BC4F9AE02.roa (hash: h/OwSIHosa0hSGtUAMFoRQJH1IunWAz+X50+i3Y6izk=)
3: 0F0A0C72EBB411EE9D86095BC4F9AE02.roa (hash: hrpObnCPcxRMCt15cylb8b70cp9YbT6TW8DLiHpGHoo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl
rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 03:22:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 492 (0x1ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153490, serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
Validity
Not Before: Sep 5 03:22:55 2026 GMT
Not After : Sep 12 03:22:55 2026 GMT
Subject: CN=6a9b8b10-e7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c7:b0:49:bb:bc:6b:f4:b6:08:1e:c7:68:e2:
a3:a9:7f:2c:42:2c:87:30:53:fe:31:30:b6:3f:4c:
b4:98:97:f7:8d:34:9a:59:d5:b7:ee:05:31:d7:ed:
77:a7:e6:c5:f9:ea:b8:84:a8:f8:4e:51:8e:20:f2:
bb:88:f1:67:39:1e:3a:4a:6f:fb:06:21:5e:27:97:
52:7e:e4:64:45:08:fb:9b:57:ca:af:d9:41:3c:cb:
81:04:8a:08:7f:fa:67:33:95:71:f3:ff:d1:4f:1e:
be:fc:3f:b1:f5:d0:bf:08:b8:47:df:9c:e3:61:f5:
4b:29:0e:8a:a0:24:c0:60:18:a3:36:da:77:bf:44:
d7:7e:9d:2f:1d:49:dd:30:ed:9b:8a:22:79:ca:0d:
9e:85:cc:29:dd:f5:0c:d6:90:14:a3:b3:6e:96:d1:
46:d4:e8:b4:7e:0b:49:06:74:8c:ee:ab:a4:00:3f:
4c:eb:52:da:0c:d4:a6:0e:dd:9d:1b:8f:a1:3b:44:
04:96:4b:19:31:50:dc:8b:0a:9c:11:05:4d:52:79:
97:54:9a:74:04:03:dc:35:28:4c:fc:60:b2:84:4e:
4e:13:c4:68:79:48:01:5c:2b:ad:42:a9:96:a0:f5:
99:bc:bd:68:4c:c9:2e:3d:b3:d8:db:24:78:66:53:
8a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B5:C6:2B:A3:E4:60:BF:16:41:66:AF:F5:7A:2B:73:AE:5E:9A:DD
X509v3 Authority Key Identifier:
keyid:47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:79:c7:b4:04:8e:50:00:0a:ba:1e:53:39:30:20:64:f8:5f:
db:f3:73:76:5b:af:9d:4b:1b:b9:ef:56:c6:80:aa:dc:5f:08:
0f:58:fb:33:e1:39:f1:09:5e:7f:cb:18:98:be:e2:13:b1:63:
f4:e1:d6:38:42:1c:70:51:06:fd:73:2d:fd:20:2c:50:5e:2e:
6e:7b:d5:e9:cc:e3:15:cd:a4:9f:cf:58:8f:1b:0f:2a:1a:7f:
7c:65:c9:ea:17:9d:a6:4b:e7:0c:31:de:f7:c1:61:b8:66:cb:
a6:35:bf:0d:50:bc:66:e3:40:aa:8a:4d:e8:30:b5:7e:ca:f7:
1a:f2:d4:f7:cc:50:a7:22:45:d6:d6:89:5e:81:3f:ba:c2:08:
26:d9:17:26:9e:49:14:66:1e:1a:5f:85:54:4b:90:4e:29:26:
87:a3:f7:5e:d5:56:95:4e:41:d0:34:4c:5e:a7:5a:29:1b:67:
52:02:77:85:cc:f6:61:d1:a8:da:e3:f5:5a:9d:2e:33:25:74:
4e:d6:06:95:7a:69:de:ca:24:14:ee:92:df:4b:40:1e:8d:a2:
0d:c8:19:10:d9:8f:5c:12:77:0a:3d:d9:a1:61:28:63:76:d3:
a9:f1:84:1b:52:b8:ae:d0:65:d5:a0:3f:fd:87:f6:5f:22:a3:
1c:9c:8e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:00:18 2026 by rpki-client