
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
File: UM3WDPjzEj_evOkIgq83u-PvXEg.mft (raw, json)
Hash identifier: jb33le9jiAvhgsmWpeYU3Ez4Ybms/Ma0GmaQuUbOz0k=
Subject key identifier: 4E:30:DB:27:D9:D1:FB:5B:40:38:04:7A:DA:19:03:62:66:3E:4D:C3
Authority key identifier: 50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
Certificate issuer: /CN=A9122C94/serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Certificate serial: 0825
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
Manifest number: 081C
Signing time: Tue 12 May 2026 21:10:52 +0000
Manifest this update: Tue 12 May 2026 21:10:52 +0000
Manifest next update: Tue 19 May 2026 21:10:52 +0000
Files and hashes: 1: UM3WDPjzEj_evOkIgq83u-PvXEg.crl (hash: MbzBIQNk9rIIsjGmSfy7GxZmYmbtvOZVkZdSI7nbtqU=)
2: 5BF797081CF411EBB5ADE642C4F9AE02.roa (hash: 1c98NA9cHWOcz+QEe0M5ImtNh0IRowEb6OME0CEVJwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:10:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2085 (0x825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122C94, serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Validity
Not Before: May 12 21:10:52 2026 GMT
Not After : May 19 21:10:52 2026 GMT
Subject: CN=6a03975c-73e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:6f:0e:e4:95:9d:1e:7a:f8:e8:ad:8e:fc:
91:ab:0f:c1:36:60:61:42:30:c7:b8:b0:d3:73:75:
98:a5:bb:db:45:63:46:85:ee:62:6c:63:70:77:12:
e3:82:3a:ba:c7:37:d5:4d:08:dd:e1:41:bf:6f:25:
9c:87:b3:76:89:ed:b6:71:28:86:ea:bc:15:b3:f4:
57:a5:dc:8e:97:dc:02:3b:1a:88:5c:60:a9:58:97:
fe:f1:fc:b8:1d:07:db:78:c6:14:ee:47:15:b9:73:
9d:2a:9b:69:7f:57:4a:72:e0:53:2b:63:a5:62:e2:
e7:bc:16:2a:fd:c7:02:c6:aa:d5:86:88:c7:8f:a9:
c6:16:e0:3c:4a:54:a6:bf:df:31:40:db:55:e6:aa:
08:90:09:1c:ac:19:c3:00:2e:da:3f:c8:8f:29:92:
f5:98:e4:b4:8d:ae:c2:a1:7b:41:6c:df:be:41:09:
eb:09:ce:eb:2f:00:d8:e6:04:96:65:81:2a:b5:4d:
89:22:83:cd:64:a8:94:4b:e1:8c:87:55:ce:ef:9c:
9b:fc:64:be:12:98:c8:0b:0b:90:7c:c6:4b:30:b4:
56:c8:c4:26:ef:92:3d:a1:5a:15:53:e0:0c:69:9f:
41:8d:4f:f4:99:29:af:d5:5a:33:30:97:2d:e5:f7:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:30:DB:27:D9:D1:FB:5B:40:38:04:7A:DA:19:03:62:66:3E:4D:C3
X509v3 Authority Key Identifier:
keyid:50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:c6:96:19:6c:89:16:2b:c7:80:94:f4:f9:36:cf:14:3b:a6:
a1:4d:16:c0:ab:cf:7e:78:63:dc:9d:a3:ef:9c:ab:f9:29:33:
a5:77:45:64:b8:c8:85:2c:d5:71:61:64:cc:23:be:25:9b:5b:
71:2f:4d:c5:01:f7:74:83:b9:21:75:52:86:e9:86:dc:50:b9:
a1:90:3e:78:67:13:6a:c1:c2:ed:69:fe:6d:ab:1f:b2:e7:f9:
dc:34:27:df:91:73:5f:f2:63:47:2d:da:ea:c1:db:69:9e:ef:
32:6f:92:82:49:56:24:87:ce:54:f6:9c:05:6f:36:6a:41:2c:
09:3b:8a:42:28:06:1c:ab:48:9a:c5:ca:a5:86:eb:b2:7c:57:
92:fd:6a:33:9a:8f:47:c8:04:52:11:de:df:bf:d9:fe:3b:cd:
fb:82:b1:4d:45:e6:46:09:a5:d5:d5:e8:b8:69:db:33:a3:01:
fa:dc:c0:56:78:6b:69:e6:6f:11:a7:64:d9:84:db:46:6e:ac:
6f:09:5f:fb:49:58:97:dc:8c:77:52:e8:67:ae:e7:bb:5d:23:
43:64:12:c6:21:e9:ec:97:d4:41:4f:a9:80:6c:c4:45:24:92:
0f:0d:1e:45:3d:aa:88:90:9a:8a:00:e2:32:21:4a:d6:4a:31:
8e:76:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:07:37 2026 by rpki-client