
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
File: UM3WDPjzEj_evOkIgq83u-PvXEg.mft (raw, json)
Hash identifier: bMHZfj9534tGW8Ak9+UbwHu88HkQd2yRSK8ACN3eFmo=
Subject key identifier: 6C:69:2B:5F:75:2B:AB:C7:33:7D:1C:20:29:C1:DE:5F:C1:D3:0C:47
Authority key identifier: 50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
Certificate issuer: /CN=A9122C94/serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Certificate serial: 0849
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
Manifest number: 0840
Signing time: Wed 22 Jul 2026 21:34:27 +0000
Manifest this update: Wed 22 Jul 2026 21:34:27 +0000
Manifest next update: Wed 29 Jul 2026 21:34:27 +0000
Files and hashes: 1: UM3WDPjzEj_evOkIgq83u-PvXEg.crl (hash: 2UQZZEjQ8lnxSP+YBtDNeRHN5xEIrmeT22hCvj2vbD0=)
2: 5BF797081CF411EBB5ADE642C4F9AE02.roa (hash: 1c98NA9cHWOcz+QEe0M5ImtNh0IRowEb6OME0CEVJwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:34:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122C94, serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Validity
Not Before: Jul 22 21:34:27 2026 GMT
Not After : Jul 29 21:34:27 2026 GMT
Subject: CN=6a613763-9b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:8c:6b:ad:23:e0:a3:f4:0b:10:d8:0d:60:
c2:72:3f:8e:c8:36:07:e3:be:0b:b8:23:e3:d1:28:
b8:dd:e7:a3:ee:ac:52:c9:14:18:b6:94:73:55:72:
e4:eb:1b:e4:ca:da:5b:b1:67:7b:2e:47:06:f0:9a:
34:e6:a0:78:fd:bd:24:fd:8e:63:0a:8e:2d:f9:b6:
fd:fd:99:30:09:67:ed:c8:d1:24:e1:d9:39:ff:97:
b2:dc:e8:82:e7:16:ba:29:50:51:86:5b:c1:44:17:
2f:d1:f8:92:3b:fc:17:32:5d:29:18:bf:07:a0:e4:
3b:94:08:3f:92:6c:9d:37:66:90:96:20:da:31:f6:
06:f6:07:9c:b4:11:c5:ae:e8:92:31:c1:db:1f:67:
10:6c:c3:34:aa:64:c1:45:ca:f5:7e:90:52:60:94:
00:91:bd:68:e0:ad:a3:3a:df:df:cb:4b:dc:52:30:
3d:0a:74:c0:cb:f2:a4:8b:1c:27:92:ce:5e:fe:6a:
33:89:55:a0:86:10:cb:6a:6c:92:a9:3a:fc:d9:33:
c0:f7:64:59:85:85:c6:72:5f:b0:c1:c7:ad:f3:b2:
4a:df:7d:1e:31:02:2d:4e:53:b7:07:6f:6f:3f:fc:
65:1c:9c:8d:5e:d3:45:43:56:40:19:e3:9b:8c:37:
d8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:69:2B:5F:75:2B:AB:C7:33:7D:1C:20:29:C1:DE:5F:C1:D3:0C:47
X509v3 Authority Key Identifier:
keyid:50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:45:85:cd:88:ce:da:ef:2a:97:3e:fe:70:a0:83:3f:29:f8:
55:49:46:62:70:7e:e8:5b:bf:3e:b5:3c:26:5b:ae:ac:da:11:
8b:0d:db:a0:c3:dd:36:0a:84:c2:d6:a5:26:f3:56:87:29:44:
9f:ec:3e:66:d2:10:78:e0:5a:8d:07:27:b5:9f:7b:ef:b0:88:
2d:1b:0a:88:3b:56:6a:13:0f:9a:73:a2:91:25:c0:c0:88:1a:
e3:cf:8b:43:d5:15:aa:1d:13:d9:55:c2:06:78:bd:cc:52:22:
51:3c:43:af:0e:1b:dc:16:27:91:c1:a7:c2:5a:ef:54:33:55:
a3:f7:57:cb:10:ae:33:5d:1e:d0:b0:d5:ce:d8:cc:85:a7:e3:
5f:4c:53:41:3c:5e:e6:e1:41:0b:fd:0b:de:33:49:6f:01:10:
9e:f5:24:bd:28:eb:7c:eb:31:d6:ef:95:9b:dd:ff:d9:57:ec:
63:1e:26:9a:f1:79:86:14:58:02:38:9b:57:d9:a9:ff:3f:5d:
f8:b0:e8:37:a0:d0:85:e5:f3:31:ba:8a:de:7f:e5:db:d0:dd:
07:14:b0:e2:1d:e0:3c:61:5e:b1:25:b3:96:eb:d0:92:fb:4b:
18:74:c2:53:2c:db:2c:6b:11:46:49:07:69:db:fc:6a:79:3d:
06:9d:56:50
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJDOTQxMTAvBgNVBAUTKDUwQ0RENjBDRjhGMzEyM0ZERUJDRTkwODgyQUYzN0JC
RTNFRjVDNDgwHhcNMjYwNzIyMjEzNDI3WhcNMjYwNzI5MjEzNDI3WjAYMRYwFAYD
VQQDEw02YTYxMzc2My05YjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArRKMa60j4KP0CxDYDWDCcj+OyDYH474LuCPj0Si43eej7qxSyRQYtpRzVXLk
6xvkytpbsWd7LkcG8Jo05qB4/b0k/Y5jCo4t+bb9/ZkwCWftyNEk4dk5/5ey3OiC
5xa6KVBRhlvBRBcv0fiSO/wXMl0pGL8HoOQ7lAg/kmydN2aQliDaMfYG9gectBHF
ruiSMcHbH2cQbMM0qmTBRcr1fpBSYJQAkb1o4K2jOt/fy0vcUjA9CnTAy/Kkixwn
ks5e/moziVWghhDLamySqTr82TPA92RZhYXGcl+wwcet87JK330eMQItTlO3B29v
P/xlHJyNXtNFQ1ZAGeObjDfYGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGxpK191
K6vHM30cICnB3l/B0wxHMB8GA1UdIwQYMBaAFFDN1gz48xI/3rzpCIKvN7vj71xI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC84MjIyQzI3RTFD
RjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVqX2V2T2tJZ3E4M3UtUHZY
RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VNM1dEUGp6RWpfZXZPa0lncTgzdS1QdlhFZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkM5NC84MjIyQzI3RTFDRjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVq
X2V2T2tJZ3E4M3UtUHZYRWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvUWFzYjO2u8qlz7+cKCDPyn4VUlGYnB+6Fu/PrU8JluurNoRiw3boMPdNgqE
wtalJvNWhylEn+w+ZtIQeOBajQcntZ9777CILRsKiDtWahMPmnOikSXAwIga48+L
Q9UVqh0T2VXCBni9zFIiUTxDrw4b3BYnkcGnwlrvVDNVo/dXyxCuM10e0LDVztjM
hafjX0xTQTxe5uFBC/0L3jNJbwEQnvUkvSjrfOsx1u+Vm93/2VfsYx4mmvF5hhRY
AjibV9mp/z9d+LDoN6DQheXzMbqK3n/l29DdBxSw4h3gPGFesSWzluvQkvtLGHTC
UyzbLGsRRkkHadv8ank9Bp1WUA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:31:45 2026 by rpki-client