
$ rpki-client -vvf rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
File: _UmlE0ai96yBGwCtYuvvDpSiobI.mft (raw, json)
Hash identifier: 809i7O4XxAv3u0Q5l/+cVyp3a6PRSzU8keRqRJSO13U=
Subject key identifier: 13:B3:98:2A:FA:3D:BF:D2:BD:C5:01:7C:62:79:57:72:4A:FC:BC:7C
Authority key identifier: FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2
Certificate issuer: /CN=A91652B5/serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
Manifest number: 60
Signing time: Mon 11 May 2026 08:14:49 +0000
Manifest this update: Mon 11 May 2026 08:14:49 +0000
Manifest next update: Mon 18 May 2026 08:14:49 +0000
Files and hashes: 1: _UmlE0ai96yBGwCtYuvvDpSiobI.crl (hash: BZYi8azojVrWMpiEgw2ip8XI41q+1xhvvFsg7nWmHXo=)
2: 535DB56CD1AF11F0A278C10CC4F9AE02.roa (hash: BXUEY5m+3lonf61CO2Aq4e6KwB/tUlOeMJ88DFpi710=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl
rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:14:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91652B5, serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2
Validity
Not Before: May 11 08:14:49 2026 GMT
Not After : May 18 08:14:49 2026 GMT
Subject: CN=6a018ff9-44f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:f2:7e:d9:4d:0e:f6:44:fe:12:1b:59:f2:
e6:a4:1d:4e:d5:79:af:05:16:07:1f:e7:10:50:a8:
f3:30:80:b2:65:23:17:8f:2c:04:9e:6b:30:c0:27:
91:d4:f1:bc:80:f6:ff:6f:31:a4:09:60:8a:92:e9:
eb:de:f9:45:71:94:2b:d9:de:a2:14:f2:53:6f:00:
78:ae:ad:92:3f:88:df:4d:2b:c5:1d:6c:ba:33:cc:
10:12:0f:4c:98:19:d3:1a:8d:f4:b6:0a:64:bd:df:
1a:5e:2f:f0:66:e9:56:47:f5:3d:c7:9f:8e:6d:18:
4f:08:49:4a:8e:eb:bc:71:d6:40:b2:d5:e6:ac:3f:
6d:c9:df:0c:5f:12:41:d1:ab:3a:85:83:ac:bf:56:
fa:60:35:62:2b:45:66:01:c2:02:c6:20:56:23:2f:
93:b6:53:ca:6b:73:b7:18:b6:7f:f3:2a:30:a8:d9:
de:f0:66:d2:c7:7e:c9:d5:0b:89:ae:8c:a4:51:e0:
fe:b6:70:e7:34:36:35:62:7c:d1:84:22:33:99:7e:
19:88:c3:4a:eb:5f:6b:56:86:20:b8:ab:b7:f3:b8:
f1:01:44:6a:ef:94:8c:6c:ea:3f:e0:84:63:34:cf:
e2:10:93:d8:10:3c:9c:a0:68:95:3a:28:bb:04:4b:
e0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B3:98:2A:FA:3D:BF:D2:BD:C5:01:7C:62:79:57:72:4A:FC:BC:7C
X509v3 Authority Key Identifier:
keyid:FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fa:32:1c:c0:23:68:74:87:9e:b4:d3:ef:e8:76:d6:b3:47:
4a:2a:31:bb:77:18:c0:31:ce:dc:a3:8a:59:be:c9:f2:05:eb:
84:9f:b7:77:86:47:cb:77:18:ec:7e:3a:c7:d4:e1:82:04:7b:
01:1b:0e:ae:17:78:3a:35:8d:9f:ba:85:25:ed:b9:80:d1:0b:
90:c2:56:a5:cb:d8:ec:ed:2c:0a:78:e2:d8:d1:c0:33:c7:a4:
f7:d2:ec:38:9f:03:bc:ea:38:1e:97:bb:20:e0:cb:39:a9:ba:
2e:a8:fd:d5:a8:44:62:25:a0:15:63:5d:f8:de:4d:20:8d:95:
c1:9f:df:a8:91:b7:40:63:14:4b:52:b7:03:1e:b0:00:67:0f:
d0:57:64:02:67:39:26:6c:46:a4:b8:06:fa:d8:a3:4e:93:0d:
0a:aa:97:6c:09:10:4d:30:8a:4c:9e:32:9e:b5:e7:f2:d2:4a:
55:f0:02:bc:07:c1:1c:73:42:37:3b:29:3b:df:a7:67:76:8d:
b5:f1:bf:03:94:6b:6a:09:b7:16:f9:fb:a8:99:01:13:39:29:
9a:3e:f6:fa:81:63:9d:a1:60:c2:a2:ce:3e:96:25:d3:04:3f:
9e:27:4c:b4:0b:45:f7:7c:36:34:14:4f:8e:98:43:02:4d:10:
b6:3d:8c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:04:39 2026 by rpki-client