
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
File: umDC9ghXfO5rvRSTcht6rsoodis.mft (raw, json)
Hash identifier: wb+5oyNJWQQ2C+Svt51F7bgVt4BVzfFMGr5OzRfvSng=
Subject key identifier: 83:65:BD:8A:3F:37:EE:CA:7D:A0:FF:74:DE:18:FE:17:F0:99:46:B3
Authority key identifier: BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B
Certificate issuer: /CN=A91326FF/serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B
Certificate serial: 018A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
Manifest number: 018A
Signing time: Fri 25 Sep 2026 04:33:27 +0000
Manifest this update: Fri 25 Sep 2026 04:33:27 +0000
Manifest next update: Fri 02 Oct 2026 04:33:27 +0000
Files and hashes: 1: umDC9ghXfO5rvRSTcht6rsoodis.crl (hash: 0dLHpvQJGQG9EKiVaeGkmzfHlGzAeTqNCxI5L94igzc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl
rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91326FF, serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B
Validity
Not Before: Sep 25 04:33:27 2026 GMT
Not After : Oct 2 04:33:27 2026 GMT
Subject: CN=6ab5f997-0b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:a1:98:63:8a:12:cd:de:30:a3:40:06:08:
be:7d:a4:3f:a0:c1:8c:f4:df:22:12:76:d8:98:5d:
a5:3b:9b:77:50:a3:b8:52:f5:3f:4e:4a:09:46:d0:
ea:b9:c1:d6:9f:ad:51:65:d4:bf:00:f4:9f:16:77:
0d:94:81:46:a1:9e:a0:5a:77:34:fb:2f:e3:e7:23:
0e:3d:9a:61:b6:93:f0:5e:2f:f8:9b:7d:6b:b1:b1:
fc:ec:64:7b:23:1b:63:d3:01:3a:12:b4:51:71:b7:
04:b2:59:78:1c:4b:9e:c8:3a:f2:cd:68:3f:5c:ab:
f5:8a:64:97:36:bf:a4:e9:42:ce:b6:ba:d8:6c:1d:
87:87:59:76:96:49:82:b6:e6:ec:d3:ff:e3:a9:eb:
18:d3:37:00:f5:27:29:32:9b:34:11:c5:09:36:19:
8f:b5:e5:8b:45:8f:31:86:cb:48:93:f0:84:e2:d9:
d8:a1:78:9b:0c:41:4f:d4:11:54:c4:3e:f9:aa:0e:
b2:b1:b1:ba:40:54:6d:62:cd:af:65:e8:e8:c5:bb:
4f:fc:ea:17:08:65:cd:fa:fe:ae:4d:85:0c:c4:d1:
3d:9d:39:1d:ea:89:89:ab:81:db:bd:41:e5:20:79:
8c:cb:b9:29:1c:28:03:8d:28:47:22:85:be:44:a1:
79:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:65:BD:8A:3F:37:EE:CA:7D:A0:FF:74:DE:18:FE:17:F0:99:46:B3
X509v3 Authority Key Identifier:
keyid:BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8c:28:49:d0:78:a6:25:0f:9b:d7:a4:50:e2:be:51:5f:24:
c0:60:b5:44:f3:2f:c0:9f:53:f4:a3:10:d1:58:8d:f6:0d:9d:
bf:06:f3:e4:30:d3:4b:39:c5:f1:e5:7b:db:3e:3c:ed:cd:34:
96:f8:9f:55:d3:46:2c:1d:67:c9:cf:a6:fb:b4:ee:5c:16:86:
57:f4:05:52:09:21:06:a0:a5:16:2a:9e:cd:76:0a:e5:6d:a3:
9b:98:6c:ad:7b:69:e9:00:b1:df:1f:64:18:30:a6:d5:3c:d5:
87:aa:a0:6f:6c:74:ca:d4:2f:b1:d0:c2:07:bb:5e:dc:c8:ad:
a6:64:a1:f7:a5:8c:28:9e:f5:cc:67:5e:97:9c:c9:48:ba:a4:
5c:58:35:1a:0f:60:76:e0:3b:11:ac:71:24:5a:0c:e4:71:e3:
9c:26:82:41:68:b8:95:e6:71:a6:67:35:b2:81:7b:c0:94:d6:
7a:e8:c7:0e:f4:d3:0b:49:70:9a:07:14:02:8f:7e:14:45:7e:
6a:af:2e:dd:73:7a:41:13:05:2a:03:f2:cb:0f:58:9b:3e:54:
60:4a:28:27:40:e4:52:cc:38:54:27:7c:2a:98:0c:13:cf:81:
2c:2d:f1:73:5e:a4:1b:b7:ae:d4:62:29:38:df:ac:28:9b:72:
7e:1e:2c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:15:37 2026 by rpki-client