
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
File: xUMJ3BErZYYnvTagMHLnXQYDZNM.mft (raw, json)
Hash identifier: BNI3M5Cg8Oi+pGCuUhPlUGWFC0X3AOcI/RKdC2qLSi4=
Subject key identifier: E6:B4:12:23:D7:67:14:A6:FC:5E:53:3F:43:41:2E:DA:87:36:18:9C
Authority key identifier: C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3
Certificate issuer: /CN=A9199836/serialNumber=C54309DC112B658627BD36A03072E75D060364D3
Certificate serial: 0545
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
Manifest number: 053E
Signing time: Sat 04 Apr 2026 23:15:51 +0000
Manifest this update: Sat 04 Apr 2026 23:15:50 +0000
Manifest next update: Sat 11 Apr 2026 23:15:50 +0000
Files and hashes: 1: xUMJ3BErZYYnvTagMHLnXQYDZNM.crl (hash: /+04tagAQ/ilDaTOcfFjKYLgsVid/P7EUeBJKWMFzg8=)
2: 029F318A366F11ECA773E263C4F9AE02.roa (hash: Wk0rJSEhmI1m146JBYCWjAtB11PfAVxg4es4P8RFH/c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl
rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:15:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1349 (0x545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199836, serialNumber=C54309DC112B658627BD36A03072E75D060364D3
Validity
Not Before: Apr 4 23:15:50 2026 GMT
Not After : Apr 11 23:15:50 2026 GMT
Subject: CN=69d19ba6-49da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:25:11:71:df:41:a7:c3:71:e8:d2:5a:e4:e0:
e2:60:81:4b:dd:10:c5:16:f1:18:be:cc:0f:c9:09:
e6:80:29:5f:1c:f7:73:ef:b4:12:51:06:f0:f7:35:
85:8f:10:a6:ee:ee:dc:4c:e8:96:fc:c0:00:78:9e:
2f:8e:3b:10:a6:f2:47:a2:ba:4c:e7:07:fc:dc:d2:
b2:eb:f5:21:44:4e:b7:6d:17:67:56:0a:9e:ae:1b:
90:fc:a4:72:8e:06:db:ee:8c:49:9f:2d:0b:6d:0d:
e8:7d:92:87:25:13:1e:06:57:7d:a3:23:2f:5e:d3:
49:9f:7e:c6:9f:c8:00:85:3e:0a:12:cd:19:f9:0d:
d7:d9:29:71:47:45:7e:60:30:bf:73:9d:3b:94:6c:
9b:1f:8d:bf:f2:7c:f9:df:b7:a8:e8:64:df:e2:eb:
e0:ad:cd:4a:46:f8:4b:13:fe:ee:20:ac:fd:1a:cb:
63:b5:f5:6d:35:3d:61:0c:a5:1f:3e:5d:df:bd:8f:
c6:32:db:ab:7a:4c:78:49:78:5b:a5:38:bb:7c:14:
4d:0c:c9:34:f1:56:e1:a2:0e:eb:3c:94:bd:cf:66:
14:40:71:60:a5:e8:d4:47:ec:c3:c5:0e:66:2f:c3:
d3:d3:7b:be:d5:be:60:a5:6d:2e:70:fb:eb:02:f4:
d3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B4:12:23:D7:67:14:A6:FC:5E:53:3F:43:41:2E:DA:87:36:18:9C
X509v3 Authority Key Identifier:
keyid:C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d1:22:cf:78:fa:9e:ae:b5:57:52:40:47:e7:73:d8:ea:44:
0e:6d:6e:c9:45:96:85:15:5c:68:9a:9f:c0:11:96:bb:95:9c:
a3:f1:b6:f9:79:87:af:5d:3b:06:3f:5a:ec:8b:e0:cc:9e:98:
db:0d:3a:b7:70:bd:6f:92:3e:24:04:c8:0b:e7:96:e4:d4:09:
19:a8:2f:bd:a7:71:30:6a:72:fe:ed:8b:a8:b6:b6:a5:39:88:
78:10:79:41:c8:b8:2f:51:6a:48:80:05:9f:93:6b:80:64:16:
4a:f2:32:f0:62:22:3a:2f:ab:35:93:73:8d:9e:f6:a8:e7:31:
50:ab:44:05:6e:9c:cf:98:10:8b:f5:ce:10:e5:9d:87:a2:65:
ee:54:ee:ca:83:8e:3b:ea:7a:1a:25:5d:f6:e2:35:2b:4f:47:
7d:37:65:54:44:72:1c:4d:e7:2d:d7:c9:bd:22:00:54:c0:57:
b0:d8:de:83:35:98:3b:2e:76:86:da:56:f5:73:6d:b1:b3:04:
af:c4:3c:d6:f1:93:e3:93:cc:f6:7f:0f:96:38:b5:2f:70:e2:
a6:47:73:31:ac:f3:aa:72:c6:d6:70:22:b9:2b:14:12:84:fe:
05:a5:f0:3c:21:37:86:5a:1e:bc:4e:eb:03:59:e1:47:25:28:
44:50:da:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk4MzYxMTAvBgNVBAUTKEM1NDMwOURDMTEyQjY1ODYyN0JEMzZBMDMwNzJFNzVE
MDYwMzY0RDMwHhcNMjYwNDA0MjMxNTUwWhcNMjYwNDExMjMxNTUwWjAYMRYwFAYD
VQQDEw02OWQxOWJhNi00OWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0yURcd9Bp8Nx6NJa5ODiYIFL3RDFFvEYvswPyQnmgClfHPdz77QSUQbw9zWF
jxCm7u7cTOiW/MAAeJ4vjjsQpvJHorpM5wf83NKy6/UhRE63bRdnVgqerhuQ/KRy
jgbb7oxJny0LbQ3ofZKHJRMeBld9oyMvXtNJn37Gn8gAhT4KEs0Z+Q3X2SlxR0V+
YDC/c507lGybH42/8nz537eo6GTf4uvgrc1KRvhLE/7uIKz9GstjtfVtNT1hDKUf
Pl3fvY/GMturekx4SXhbpTi7fBRNDMk08Vbhog7rPJS9z2YUQHFgpejUR+zDxQ5m
L8PT03u+1b5gpW0ucPvrAvTTBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOa0EiPX
ZxSm/F5TP0NBLtqHNhicMB8GA1UdIwQYMBaAFMVDCdwRK2WGJ702oDBy510GA2TT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTgzNi8yOTM2RkZCMjM2
MkUxMUVDODkwOUU4NkZDNEY5QUUwMi94VU1KM0JFclpZWW52VGFnTUhMblhRWURa
Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hVTUozQkVyWllZbnZUYWdNSExuWFFZRFpOTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTgzNi8yOTM2RkZCMjM2MkUxMUVDODkwOUU4NkZDNEY5QUUwMi94VU1KM0JFclpZ
WW52VGFnTUhMblhRWURaTk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbNEiz3j6nq61V1JAR+dz2OpEDm1uyUWWhRVcaJqfwBGWu5Wco/G2+XmHr107
Bj9a7IvgzJ6Y2w06t3C9b5I+JATIC+eW5NQJGagvvadxMGpy/u2LqLa2pTmIeBB5
Qci4L1FqSIAFn5NrgGQWSvIy8GIiOi+rNZNzjZ72qOcxUKtEBW6cz5gQi/XOEOWd
h6Jl7lTuyoOOO+p6GiVd9uI1K09HfTdlVERyHE3nLdfJvSIAVMBXsNjegzWYOy52
htpW9XNtsbMEr8Q81vGT45PM9n8Plji1L3DipkdzMazzqnLG1nAiuSsUEoT+BaXw
PCE3hloevE7rA1nhRyUoRFDaVA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:31 2026 by rpki-client