
$ rpki-client -vvf rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
File: _UmlE0ai96yBGwCtYuvvDpSiobI.mft (raw, json)
Hash identifier: qfIG5j96yygAAumfSt6r3WbB2x0O41fBuv9uxtSBWiA=
Subject key identifier: 48:AC:12:59:9C:F5:2F:E3:13:60:39:C7:C6:F3:7D:B7:5C:85:EF:4D
Authority key identifier: FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2
Certificate issuer: /CN=A91652B5/serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
Manifest number: 84
Signing time: Thu 23 Jul 2026 09:34:15 +0000
Manifest this update: Thu 23 Jul 2026 09:34:14 +0000
Manifest next update: Thu 30 Jul 2026 09:34:14 +0000
Files and hashes: 1: _UmlE0ai96yBGwCtYuvvDpSiobI.crl (hash: 6Vr9YHcBsosHrC1cMdS3ipuxCbDKq4yjxuzQKA0yOLg=)
2: 535DB56CD1AF11F0A278C10CC4F9AE02.roa (hash: BXUEY5m+3lonf61CO2Aq4e6KwB/tUlOeMJ88DFpi710=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl
rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:34:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91652B5, serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2
Validity
Not Before: Jul 23 09:34:14 2026 GMT
Not After : Jul 30 09:34:14 2026 GMT
Subject: CN=6a61e017-491e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:5f:66:f5:45:d9:86:4c:41:76:51:86:78:2e:
c9:0d:b6:cf:c1:46:83:d5:2f:2d:aa:9e:31:36:4d:
c4:bb:de:bd:7c:32:5b:04:e3:10:58:e9:f7:87:c7:
9f:44:d9:d2:6f:ad:47:c3:99:95:ac:4e:74:52:1d:
2c:bf:0a:72:de:45:00:90:a3:ae:d1:7c:61:c1:01:
b3:bd:71:3b:66:dc:ac:82:7b:7f:33:14:02:50:d1:
db:ea:22:40:e3:fd:bb:9a:82:95:3d:4f:34:2d:45:
8e:b9:79:78:2a:84:92:e8:8f:4a:f9:5a:3c:9b:22:
1f:e8:df:a2:0d:d5:64:2d:2a:fe:42:92:87:03:80:
00:41:25:57:41:d6:8c:37:f5:2a:05:54:b2:8c:89:
f1:5b:33:f8:9f:d8:3d:48:19:20:08:e4:e8:d0:ac:
92:6f:f4:38:15:4c:51:0c:49:91:4e:dc:85:7b:c8:
e2:ae:d9:6e:23:ce:f4:19:01:9c:69:6f:82:c7:a9:
db:1a:9c:80:89:5e:5c:c5:23:93:95:bb:71:4f:00:
74:a0:5a:0e:51:2f:88:6e:a6:81:a1:93:91:51:ec:
42:b8:a1:8b:ff:94:97:ce:3d:0a:c8:d3:2a:cc:fa:
ea:8a:eb:2f:9c:96:02:28:d8:3e:15:63:08:58:de:
f2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AC:12:59:9C:F5:2F:E3:13:60:39:C7:C6:F3:7D:B7:5C:85:EF:4D
X509v3 Authority Key Identifier:
keyid:FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:12:3c:87:c6:92:22:23:de:fe:54:d8:70:c4:97:14:75:c9:
92:e6:7b:ba:b0:8e:32:79:16:32:56:f7:d4:68:ca:34:ef:b9:
5f:ef:63:6f:13:f5:d5:e8:1e:18:39:06:f3:94:6d:74:f5:93:
66:ea:6f:81:de:6f:1c:cc:71:da:5c:e4:2b:e4:03:80:7c:5d:
12:e2:31:e2:4d:d2:2d:52:2b:8d:05:a3:e6:30:c5:84:b3:a4:
53:a1:05:55:90:3f:5f:a8:74:ac:bf:2c:05:c5:6b:55:ad:ab:
df:2f:a7:1f:c8:1c:b4:33:20:7c:6d:2f:f4:17:80:28:aa:8d:
1d:a4:bc:0e:b8:d8:3c:b2:9e:dd:29:71:33:59:58:e1:8c:ca:
77:9f:96:7c:f8:01:4e:42:ab:59:a5:83:0e:b9:b6:31:4a:9b:
fd:cd:bf:ba:44:b9:99:f1:d1:6d:1c:55:7a:83:83:05:1b:f1:
80:9c:fd:92:8e:54:74:b8:d3:d6:8f:e4:2a:34:32:8e:bc:6a:
52:df:83:24:98:19:b5:c1:01:b3:0e:de:e9:15:06:c7:59:2f:
23:f5:8d:98:15:2e:7b:bb:dc:66:00:de:da:e7:ef:b3:4e:2d:
28:86:04:b1:75:e5:5b:86:15:17:96:ea:99:df:3b:1a:2f:ae:
dd:5e:4d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:10:39 2026 by rpki-client