
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
File: UMP9EvajMVgZtSurzBmPsNv9QTo.mft (raw, json)
Hash identifier: cYuUomgT4rYAbPC5vYdh3Ftsy/ly3U33bcoVw4KtEjk=
Subject key identifier: F5:B1:15:E1:DA:6E:14:11:44:3D:95:F9:41:F8:F0:60:A5:BB:72:1C
Authority key identifier: 50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A
Certificate issuer: /CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A
Certificate serial: 04E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
Manifest number: 04D5
Signing time: Mon 28 Sep 2026 23:55:13 +0000
Manifest this update: Mon 28 Sep 2026 23:55:13 +0000
Manifest next update: Mon 05 Oct 2026 23:55:13 +0000
Files and hashes: 1: UMP9EvajMVgZtSurzBmPsNv9QTo.crl (hash: z3L92OGw3fMb2TEEjsfCJu86pFIVZdG3VtYfjOkJWsw=)
2: Z_YG6dhQKTsWfLWtRCzo9lMOd0Y.asa (hash: Pj1CoMftu5JyT/x7Oa6gFZSdV0R5bE6ahqyEKoH3VDw=)
3: 296C190484AD11EC9C3F837CC4F9AE02.roa (hash: lbtzXOv7fCZ9ldssOYWEkCJAJ4leYPGz3mQ8urYvDU8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl
rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 23:55:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1250 (0x4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE616, serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A
Validity
Not Before: Sep 28 23:55:13 2026 GMT
Not After : Oct 5 23:55:13 2026 GMT
Subject: CN=6abafe61-bbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:85:ba:08:51:5c:a2:78:ec:ae:d8:d0:c5:d8:
b1:69:68:50:99:8c:b2:79:64:ed:be:d1:db:13:b0:
d0:5a:be:34:98:ec:d7:d2:13:35:24:15:33:65:60:
6d:36:53:6d:d6:1e:88:a6:19:75:b5:0a:88:79:7f:
f3:d7:3c:66:fa:f4:48:6d:30:26:e4:0e:7a:e4:c2:
21:80:40:e1:34:ff:27:be:ce:4f:5b:92:38:6f:a5:
b1:3a:a8:57:28:93:43:2c:6e:3a:f6:53:8d:ae:08:
11:82:35:1d:3e:40:a6:33:c6:4b:2a:34:15:48:3a:
a8:93:4e:ad:34:80:d5:6d:2f:4f:1c:67:5f:38:a4:
93:68:5c:35:ae:0a:6d:a0:d8:df:fc:a8:66:79:12:
58:0c:ce:c5:44:bd:93:03:77:9c:e7:00:b2:da:86:
64:24:e9:35:48:47:80:af:48:6a:46:9f:31:ba:74:
f4:82:6c:9e:6c:54:b0:4f:d6:d5:57:15:8d:a0:70:
9d:9a:78:55:80:f0:5d:9e:44:b6:3b:a3:23:25:f8:
18:dc:23:ad:86:08:a5:d6:da:18:31:2c:19:59:9e:
dc:4f:c9:a7:5b:9e:74:7d:d8:83:b4:66:6b:47:2b:
05:ae:af:d6:b2:6a:c4:21:91:0f:b3:eb:c1:b0:53:
b5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B1:15:E1:DA:6E:14:11:44:3D:95:F9:41:F8:F0:60:A5:BB:72:1C
X509v3 Authority Key Identifier:
keyid:50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:7b:ba:40:01:dd:0e:76:3f:93:b1:0c:e4:c0:10:52:d5:c5:
4e:e8:ce:7a:d5:03:91:fd:34:3e:35:fe:46:b3:08:05:4c:8e:
07:6d:98:4e:54:9e:ef:78:65:f9:9b:7c:f8:52:6f:eb:42:24:
20:4d:38:ed:2b:36:d4:c1:1a:75:54:e8:cc:60:8a:43:3e:36:
9a:d7:d1:30:a9:56:a4:c8:c8:52:f9:ce:04:5b:7a:da:5d:e6:
96:df:e9:e7:b7:c4:b8:d0:b8:77:a0:1e:9e:f7:7c:25:03:73:
a5:02:5e:e9:ba:24:d6:fb:ef:b5:d5:f5:de:ae:ff:3c:1e:3b:
b3:95:70:ab:28:45:66:4c:e1:a0:be:ad:d2:fa:77:9b:02:a1:
93:74:ca:5d:08:82:bb:60:bc:11:ea:93:da:96:cb:ea:5b:e3:
a2:c1:04:30:33:0b:4a:49:a1:14:62:79:77:66:cf:fe:26:da:
c8:e6:16:5f:dc:77:15:0c:b6:ca:08:0b:74:ac:40:ff:5a:eb:
70:7f:ff:3c:66:c1:c8:e1:51:66:19:0c:13:44:ae:4c:50:29:
6b:6f:db:3b:00:f2:e3:55:75:b5:33:e4:a0:87:ad:ae:25:17:
30:89:cb:11:75:61:aa:ee:f8:a1:20:af:ea:b3:55:c7:53:55:
5a:61:c3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:10:33 2026 by rpki-client