
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
File: UM3WDPjzEj_evOkIgq83u-PvXEg.mft (raw, json)
Hash identifier: I+W0aXykNSdMvhp1vSJ9hw2ZfFDlB/GA0X6qXTNJNe0=
Subject key identifier: F5:C7:6D:29:C4:83:76:DB:9B:B3:46:74:CE:23:F9:36:92:3E:76:01
Authority key identifier: 50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
Certificate issuer: /CN=A9122C94/serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Certificate serial: 080C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
Manifest number: 0803
Signing time: Tue 24 Mar 2026 20:54:54 +0000
Manifest this update: Tue 24 Mar 2026 20:54:54 +0000
Manifest next update: Tue 31 Mar 2026 20:54:54 +0000
Files and hashes: 1: UM3WDPjzEj_evOkIgq83u-PvXEg.crl (hash: kh5QfGvSY8mCKd1uI/qHGzrQwpJ3+9OY2/7LGa+D9Yc=)
2: 5BF797081CF411EBB5ADE642C4F9AE02.roa (hash: 1c98NA9cHWOcz+QEe0M5ImtNh0IRowEb6OME0CEVJwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:54:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2060 (0x80c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122C94, serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Validity
Not Before: Mar 24 20:54:54 2026 GMT
Not After : Mar 31 20:54:54 2026 GMT
Subject: CN=69c2fa1e-1f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:01:bc:50:e5:20:ab:97:49:9e:f0:1b:47:
21:fd:fc:8a:bb:cd:e9:92:e7:75:cb:df:30:d8:60:
35:a8:ad:8a:14:f2:f8:cd:d8:23:0c:65:45:05:8b:
15:4a:79:2b:ab:75:f8:ec:76:dd:e3:c0:6f:46:77:
88:4f:e8:5f:8c:5b:9a:d9:e5:94:bb:bd:86:98:62:
d3:0b:eb:cb:a1:59:3e:bf:71:f3:bc:77:59:77:a5:
e3:65:24:f4:ee:20:b9:47:80:cf:dc:5b:7d:64:de:
99:fa:38:75:3a:e8:ed:28:ba:f1:05:1b:87:81:e7:
d9:d8:ba:30:86:da:87:ec:bb:c5:b3:ab:e9:3b:a3:
22:5e:ff:be:52:77:6b:6b:be:bc:fa:da:e6:0e:2e:
da:88:c7:9f:b1:6f:d6:99:b8:7f:2c:15:18:ec:ba:
3c:c8:68:9e:71:12:c6:2c:1a:cb:15:a3:65:94:8f:
78:84:e5:72:91:7e:28:2a:95:19:ca:e9:8f:a5:e7:
66:80:20:8e:b1:e0:27:ae:b3:56:cb:03:66:d4:4f:
0a:8c:56:79:ef:17:1b:3b:4c:82:d9:09:00:26:c7:
43:43:f8:96:b9:6e:09:7c:fa:e6:e3:8c:52:fd:69:
ea:d9:92:28:ef:20:dc:08:66:ac:bc:da:1e:2c:e4:
5a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C7:6D:29:C4:83:76:DB:9B:B3:46:74:CE:23:F9:36:92:3E:76:01
X509v3 Authority Key Identifier:
keyid:50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:21:09:64:1a:24:aa:1d:f5:8e:9b:94:6e:b1:5a:56:ed:42:
be:c2:a6:6b:35:1c:7d:19:32:47:a1:07:11:ba:22:9f:bb:8b:
d5:11:b4:56:a6:5a:9f:af:f8:28:be:5e:bc:be:98:bb:59:c3:
d5:15:66:63:b3:9d:64:e0:8c:05:37:70:dc:50:fe:5b:02:7d:
95:a0:12:a2:57:c5:2c:2a:2b:e9:a3:25:04:20:26:af:c9:0a:
b5:a4:5c:fc:bb:5d:ce:6b:c9:ad:eb:50:72:c3:a0:41:f6:d3:
e3:7c:c9:8c:f8:9e:2d:90:27:e2:10:32:8b:cd:ec:5c:7a:f6:
93:7d:4b:c3:51:9e:8d:5b:0c:a1:ce:03:71:f0:9c:26:07:c1:
58:d0:d3:50:41:28:c9:e0:c9:46:3d:f7:be:58:e8:58:5d:d1:
73:87:47:38:9d:84:12:b9:8b:de:3f:1e:21:bd:75:17:27:3a:
34:c4:2a:ce:e2:53:ae:e2:64:89:a5:20:86:61:18:7b:8a:ab:
04:d3:63:27:ba:2c:96:59:35:5b:44:06:39:e3:77:de:df:22:
04:ce:28:f6:89:14:10:e4:f4:9d:bf:5a:35:b0:b3:48:51:be:
fe:5d:82:3a:36:5f:8b:83:6d:d8:ab:a6:bf:e7:77:59:24:9a:
4b:da:64:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:39 2026 by rpki-client