
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
File: _UmlE0ai96yBGwCtYuvvDpSiobI.mft (raw, json)
Hash identifier: BrjXY9rDYVW7yIbfELuxN1aiAisZPFDbtxII7xLj0Cw=
Subject key identifier: 30:FA:C2:3C:BC:92:AB:5A:AA:D6:4F:60:15:5C:79:EC:FD:13:E4:25
Authority key identifier: FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2
Certificate issuer: /CN=A91652B5/serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2
Certificate serial: B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
Manifest number: AB
Signing time: Wed 07 Oct 2026 07:41:25 +0000
Manifest this update: Wed 07 Oct 2026 07:41:24 +0000
Manifest next update: Wed 14 Oct 2026 07:41:24 +0000
Files and hashes: 1: _UmlE0ai96yBGwCtYuvvDpSiobI.crl (hash: IZo72oyV40wE8/3qjh1EpBIQoJ6wWc9OsCJgKDK37Qw=)
2: 535DB56CD1AF11F0A278C10CC4F9AE02.roa (hash: BXUEY5m+3lonf61CO2Aq4e6KwB/tUlOeMJ88DFpi710=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl
rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:41:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91652B5, serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2
Validity
Not Before: Oct 7 07:41:24 2026 GMT
Not After : Oct 14 07:41:24 2026 GMT
Subject: CN=6ac5f7a5-56eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1c:07:f0:ac:e3:23:92:38:d4:37:30:43:ee:
73:b4:0e:ca:fa:ae:99:fc:4f:45:43:1d:66:f0:06:
8f:31:92:ab:a7:bb:db:b9:54:78:67:b4:55:05:13:
69:6c:42:62:de:31:9d:bc:a3:e2:10:31:35:eb:7a:
3f:2e:e2:fc:e7:a9:3b:65:d0:e8:0c:5c:72:01:07:
fb:cb:11:98:7a:e9:e6:9f:08:a4:99:2c:c9:89:52:
51:de:23:1b:04:29:23:fa:d5:85:bc:92:65:b0:60:
06:42:fa:ac:05:ca:a3:26:63:e3:4e:2d:43:44:5c:
e6:89:dd:ea:b3:95:7b:bf:bb:ab:38:41:67:29:e8:
f2:77:80:11:69:f6:9d:29:4f:70:82:34:45:b2:33:
67:7e:15:7e:69:03:c0:06:51:6e:c9:be:4b:70:59:
60:b9:41:28:b0:e7:23:11:cb:c3:0b:3d:93:d7:43:
04:8e:2e:81:b6:75:2a:c7:e9:5e:4b:cc:65:52:77:
9c:1a:ca:34:65:0c:ee:61:07:4e:ba:12:c3:14:52:
c3:03:34:6e:df:ca:39:e3:c6:7f:da:9b:97:52:6b:
33:4b:94:28:26:78:c6:80:0f:3b:d2:89:f2:93:f3:
96:b0:b9:3e:68:ab:f6:a0:05:99:6a:3b:79:4f:3e:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FA:C2:3C:BC:92:AB:5A:AA:D6:4F:60:15:5C:79:EC:FD:13:E4:25
X509v3 Authority Key Identifier:
keyid:FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:55:21:d1:44:95:a0:a6:c3:7f:db:1d:bd:06:9e:3f:f3:ae:
b2:47:0e:c3:98:cb:68:f1:3d:49:aa:79:bf:5f:24:ef:d7:d1:
ae:81:e0:74:28:3e:33:c9:77:2f:4b:52:c9:06:33:35:45:2b:
e3:71:db:c4:b4:67:a7:41:1d:0d:b4:3c:0e:c5:66:75:17:17:
33:0c:a1:d6:88:15:68:32:f0:f4:40:06:10:d8:a4:34:cd:86:
fd:5c:49:7a:e6:fb:35:9d:c9:1f:5a:03:b9:c0:b9:b1:46:ef:
38:be:44:ac:ec:d3:7c:da:6e:d5:b1:dc:d5:a2:ce:83:60:0a:
e8:9d:3c:f1:d6:cf:af:d8:01:17:21:48:ee:22:2c:eb:10:ed:
19:6f:e5:35:3a:a0:b2:04:26:13:8a:49:a9:9c:c9:5e:a4:81:
a4:a7:4e:c9:43:ce:43:ec:2d:cb:b2:61:af:1f:8f:42:1d:a4:
2a:89:d2:bf:f2:40:b4:c6:c1:47:bc:d7:8c:ea:8f:a8:64:9a:
5c:77:ab:48:27:2b:93:4e:85:ab:31:f8:42:77:f4:2e:62:5c:
94:f5:47:62:ff:68:ac:5a:e4:51:a0:26:d5:46:67:a3:dc:a4:
77:db:28:12:86:81:f6:66:0e:27:94:36:e1:3f:38:ae:70:62:
1f:b2:ea:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:17:38 2026 by rpki-client