
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
File: UM3WDPjzEj_evOkIgq83u-PvXEg.mft (raw, json)
Hash identifier: uXu19kRmWmr5T8TZBSxaRCaotTz7fLTMJLY2E44RpgM=
Subject key identifier: A6:E6:A9:11:3B:B3:05:7B:CE:2D:15:7E:83:4A:E3:3C:3F:8D:12:F1
Authority key identifier: 50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
Certificate issuer: /CN=A9122C94/serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Certificate serial: 0869
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
Manifest number: 0860
Signing time: Tue 22 Sep 2026 20:43:21 +0000
Manifest this update: Tue 22 Sep 2026 20:43:20 +0000
Manifest next update: Tue 29 Sep 2026 20:43:20 +0000
Files and hashes: 1: UM3WDPjzEj_evOkIgq83u-PvXEg.crl (hash: ap8KmJBahaB8VweocnXk53qIHkLONkDaZuEqF2XUOLM=)
2: 5BF797081CF411EBB5ADE642C4F9AE02.roa (hash: 1c98NA9cHWOcz+QEe0M5ImtNh0IRowEb6OME0CEVJwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:43:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2153 (0x869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122C94, serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Validity
Not Before: Sep 22 20:43:20 2026 GMT
Not After : Sep 29 20:43:20 2026 GMT
Subject: CN=6ab2e868-5b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:23:74:fa:71:9d:17:29:46:66:29:04:9c:f0:
4a:c1:f7:3a:0d:9d:46:97:03:b1:fe:01:43:6f:e5:
c8:97:d8:16:ba:c0:6c:f6:d1:4f:52:af:70:e1:e5:
fc:a2:60:b7:a2:9c:37:43:8f:c6:8e:43:d9:a8:8c:
df:6d:0d:61:66:45:c2:ac:b1:fd:44:ce:9b:87:3f:
03:70:30:d0:e9:14:d7:34:9f:cd:6b:7a:1f:5b:8f:
4e:a7:bc:fa:19:54:a9:a0:b2:8e:18:1e:6b:fe:40:
e1:1a:69:e2:6c:51:9c:98:cc:b4:77:79:4e:5e:7c:
b4:fd:4b:8e:75:b7:76:48:fe:13:af:52:f8:43:21:
45:97:82:2e:28:f9:ff:a3:51:d4:25:84:a0:33:6c:
fd:ef:6e:a9:90:ab:88:ef:14:60:32:5d:d2:a5:cb:
94:ba:0f:a1:d8:eb:ae:53:e9:bb:5c:17:6e:d0:79:
db:82:fd:53:30:78:f0:ff:ad:41:2a:90:c8:62:22:
e5:70:51:c4:d5:f7:1d:99:4b:86:24:23:b3:c2:df:
0a:52:a0:26:d6:9b:64:ea:9e:89:f1:8e:29:d3:5a:
86:ab:0f:1c:c2:03:ed:01:b9:a8:c9:45:af:c7:35:
8e:b8:7e:34:7e:99:6f:59:94:87:00:e8:13:3b:c9:
0d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E6:A9:11:3B:B3:05:7B:CE:2D:15:7E:83:4A:E3:3C:3F:8D:12:F1
X509v3 Authority Key Identifier:
keyid:50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:cd:36:e5:a2:76:bb:7d:b5:65:b5:ab:6a:86:75:38:51:6e:
ff:de:8f:69:c3:55:df:2e:aa:b8:9c:e5:b8:b9:41:5b:56:3f:
9e:90:83:35:3d:4d:2c:24:70:a9:73:ed:e7:fd:c7:a5:f4:4a:
c5:07:e0:dd:ac:32:73:e8:13:58:65:e8:b3:fd:21:7c:dd:3b:
da:a8:9c:71:bf:c7:07:ba:51:42:3d:0a:2b:4a:1e:3b:31:a3:
88:93:cf:24:6f:6b:c5:d6:9b:65:69:2c:73:c8:22:b2:a1:2e:
9a:fb:08:a0:10:de:56:f8:ca:60:6b:85:15:26:07:97:21:35:
04:99:8c:72:00:a0:74:1c:fd:f3:1d:ea:84:4f:e8:2b:ef:2b:
49:1f:6c:46:ae:77:c3:c3:34:f7:51:b0:5a:fa:af:69:0a:a8:
a7:71:a3:08:21:ec:71:c2:dc:98:43:d2:d6:4a:53:1c:9e:e2:
09:b3:50:ef:db:c6:b0:77:8f:45:ea:66:30:de:33:51:d0:3f:
80:94:12:2e:0c:af:50:83:b8:aa:c8:95:61:bd:a0:13:c3:e9:
b5:d1:87:ca:75:70:cd:a6:fa:ac:c3:ec:d6:d2:62:b2:4a:e4:
a5:fa:35:07:c5:13:f8:59:41:ac:e1:17:c5:82:93:86:d5:e3:
61:a6:40:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJDOTQxMTAvBgNVBAUTKDUwQ0RENjBDRjhGMzEyM0ZERUJDRTkwODgyQUYzN0JC
RTNFRjVDNDgwHhcNMjYwOTIyMjA0MzIwWhcNMjYwOTI5MjA0MzIwWjAYMRYwFAYD
VQQDEw02YWIyZTg2OC01YjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoSN0+nGdFylGZikEnPBKwfc6DZ1GlwOx/gFDb+XIl9gWusBs9tFPUq9w4eX8
omC3opw3Q4/GjkPZqIzfbQ1hZkXCrLH9RM6bhz8DcDDQ6RTXNJ/Na3ofW49Op7z6
GVSpoLKOGB5r/kDhGmnibFGcmMy0d3lOXny0/UuOdbd2SP4Tr1L4QyFFl4IuKPn/
o1HUJYSgM2z9726pkKuI7xRgMl3SpcuUug+h2OuuU+m7XBdu0Hnbgv1TMHjw/61B
KpDIYiLlcFHE1fcdmUuGJCOzwt8KUqAm1ptk6p6J8Y4p01qGqw8cwgPtAbmoyUWv
xzWOuH40fplvWZSHAOgTO8kNFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKbmqRE7
swV7zi0VfoNK4zw/jRLxMB8GA1UdIwQYMBaAFFDN1gz48xI/3rzpCIKvN7vj71xI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC84MjIyQzI3RTFD
RjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVqX2V2T2tJZ3E4M3UtUHZY
RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VNM1dEUGp6RWpfZXZPa0lncTgzdS1QdlhFZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkM5NC84MjIyQzI3RTFDRjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVq
X2V2T2tJZ3E4M3UtUHZYRWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaM025aJ2u321ZbWraoZ1OFFu/96PacNV3y6quJzluLlBW1Y/npCDNT1NLCRw
qXPt5/3HpfRKxQfg3awyc+gTWGXos/0hfN072qiccb/HB7pRQj0KK0oeOzGjiJPP
JG9rxdabZWksc8gisqEumvsIoBDeVvjKYGuFFSYHlyE1BJmMcgCgdBz98x3qhE/o
K+8rSR9sRq53w8M091GwWvqvaQqop3GjCCHsccLcmEPS1kpTHJ7iCbNQ79vGsHeP
RepmMN4zUdA/gJQSLgyvUIO4qsiVYb2gE8PptdGHynVwzab6rMPs1tJiskrkpfo1
B8UT+FlBrOEXxYKThtXjYaZAnw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:42:14 2026 by rpki-client