
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
File: UMP9EvajMVgZtSurzBmPsNv9QTo.mft (raw, json)
Hash identifier: 5z3bPvFGxr8hbgZ6CGA/MAGusZbgpyRqms/xBGkQkg8=
Subject key identifier: 9B:FC:2B:D5:80:1F:00:8C:9A:E5:00:63:F9:7F:3F:5B:22:D3:96:A4
Authority key identifier: 50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A
Certificate issuer: /CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A
Certificate serial: 0462
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
Manifest number: 045D
Signing time: Wed 18 Feb 2026 23:25:06 +0000
Manifest this update: Wed 18 Feb 2026 23:25:05 +0000
Manifest next update: Wed 25 Feb 2026 23:25:05 +0000
Files and hashes: 1: UMP9EvajMVgZtSurzBmPsNv9QTo.crl (hash: diF+0Kd1H8xsyf3BoQxv7lzmqgpZc+OhVDPtv7wrzD8=)
2: 296C190484AD11EC9C3F837CC4F9AE02.roa (hash: /RxOlV3ierU9U8XUpOrcDZ1BfZBiiZXrWx/RXW8pGyY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl
rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1122 (0x462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE616, serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A
Validity
Not Before: Feb 18 23:25:05 2026 GMT
Not After : Feb 25 23:25:05 2026 GMT
Subject: CN=69964a52-82a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:9f:82:38:96:b1:22:14:5b:1f:43:09:4b:
fc:a0:9b:55:5d:a8:97:65:ff:71:49:89:03:a5:94:
2a:f3:5d:d2:90:bb:4b:73:7d:73:d4:3b:d4:60:0c:
0c:3f:fe:74:09:b6:48:9f:f1:c6:65:c2:48:3f:81:
db:17:3d:45:22:f3:70:68:66:f3:92:2e:91:9d:8b:
4a:45:e6:4e:35:ca:f9:69:49:5e:fb:f7:bb:a0:1b:
62:2a:0d:aa:77:bf:99:03:73:78:4b:eb:ea:32:0e:
c9:88:20:5b:15:4e:f1:e8:e9:1b:f3:64:b6:4f:99:
91:19:7b:51:2a:4f:50:e1:e5:ff:40:d6:a3:cc:72:
e4:d3:a4:f1:46:18:11:a5:2f:46:ba:8d:18:53:a4:
95:63:14:4d:cb:58:ff:9c:d0:43:72:03:0f:29:3e:
bf:06:c3:2a:93:cf:c6:c8:3a:2d:d1:dc:3b:20:9b:
33:cf:34:fc:a4:a4:7f:89:69:04:02:23:95:38:80:
df:2a:06:ed:ef:ba:f5:f1:7c:28:67:64:92:91:80:
48:b4:e6:d5:d6:2c:41:0c:ce:c7:de:1c:21:b6:77:
46:c0:1e:45:22:2c:ea:1a:18:62:26:94:d1:4f:f9:
eb:ee:84:ea:de:14:39:65:fe:95:64:03:63:ff:9b:
08:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FC:2B:D5:80:1F:00:8C:9A:E5:00:63:F9:7F:3F:5B:22:D3:96:A4
X509v3 Authority Key Identifier:
keyid:50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:57:18:b5:21:67:a0:ed:b3:84:20:0d:f7:22:19:c2:b2:3a:
f7:70:97:7c:aa:a9:92:68:ba:94:8b:5f:44:5a:54:72:fc:6e:
cb:55:b9:36:4f:4e:9c:b6:66:9a:53:59:0b:af:01:b7:6a:75:
5f:c2:72:75:bb:76:99:25:de:be:cc:a4:00:cb:88:f6:0a:b0:
54:21:2b:cd:b8:bc:2b:bf:b3:4f:29:e1:0d:fc:c3:c7:4d:df:
a6:68:bf:9c:83:3f:69:1a:9c:5b:e8:f8:53:0c:71:b9:da:a5:
9a:62:af:23:67:77:08:c2:e1:7c:83:3c:e4:c9:3c:79:d5:4e:
92:c1:5e:b2:8b:9b:6c:11:f1:04:bd:e5:4f:fe:06:41:20:f3:
00:80:88:22:7e:b6:c9:54:10:e9:32:46:60:b4:db:23:dc:26:
64:41:8f:b1:43:b2:51:a2:23:1d:8b:4c:48:f7:85:8b:11:3a:
5e:b7:58:b1:0f:71:32:3d:88:81:b8:e9:86:c1:f4:9d:3e:39:
32:70:ec:46:64:17:a9:e5:3d:fa:1e:14:df:20:e0:bc:2b:f9:
17:d3:74:17:86:90:61:0f:b2:74:28:4e:03:22:86:3f:54:8c:
73:2e:6d:00:2d:9c:df:a3:98:8d:4c:d2:91:70:51:38:fe:15:
82:00:16:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:18:04 2026 by rpki-client