
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft
File: uMGYUq7H2lGkUL59p9lYc77eNzQ.mft (raw, json)
Hash identifier: ne5lYQEJAKnVC0KvDMnWC49jeOAyJ5cwY8QHkH7Fnk8=
Subject key identifier: 1E:46:62:16:27:E7:09:20:79:D3:93:FF:69:78:58:F9:63:C7:6B:CE
Authority key identifier: B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34
Certificate issuer: /CN=A917C78E/serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft
Manifest number: 0150
Signing time: Thu 23 Jul 2026 06:46:22 +0000
Manifest this update: Thu 23 Jul 2026 06:46:22 +0000
Manifest next update: Thu 30 Jul 2026 06:46:22 +0000
Files and hashes: 1: uMGYUq7H2lGkUL59p9lYc77eNzQ.crl (hash: X1zxNSv7oI5H+/w9PCjrT6gHLPkFRLJWlIYCTnDiYHU=)
2: 91F29F5E86DD11EFB3D7A929C4F9AE02.roa (hash: NaEScBIeGfqeqtY23FBVtMrm6wm6IYSTw8AJnU7Al0E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl
rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C78E, serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734
Validity
Not Before: Jul 23 06:46:22 2026 GMT
Not After : Jul 30 06:46:22 2026 GMT
Subject: CN=6a61b8be-98c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a7:41:11:0e:c2:54:7d:d0:9f:05:68:79:51:
28:78:0d:52:f2:1f:3e:ad:07:29:22:da:55:c3:52:
67:74:23:b1:5a:d2:ec:54:98:5c:a7:ba:76:07:6f:
2a:78:09:bf:0b:59:0a:89:b3:0c:26:a6:64:c9:ac:
4e:2b:6c:db:ea:11:a7:c3:e2:32:63:6d:8a:00:a7:
f0:43:08:f7:4b:83:b2:1c:99:98:04:88:91:d6:d8:
a1:83:05:fd:fe:5e:0e:d6:3d:5a:ae:82:18:63:9d:
f2:38:cb:b5:00:26:69:7f:d1:8f:18:47:f2:12:6d:
53:20:e8:5b:ab:89:5e:a2:cb:b1:09:94:c8:2f:56:
a7:ac:9e:98:f8:ed:41:2d:6f:dd:0c:23:5e:be:e1:
d0:be:b2:10:5b:d3:b7:cd:70:06:ed:f6:c5:33:5f:
47:2b:79:f6:ab:43:f9:f2:02:67:8f:05:e3:d2:36:
73:40:d8:a4:74:51:2d:23:0c:0f:8f:c3:68:ef:f3:
cd:29:9e:6c:1d:ae:e4:84:87:7f:fd:ba:50:5f:24:
19:4d:b2:84:fa:9f:32:b1:1a:54:c2:56:2c:49:78:
0c:01:c6:e1:b6:c0:57:8c:1e:6a:5a:4d:ce:15:55:
ce:0e:78:6c:a0:f5:3a:1b:e2:a8:79:6d:ad:91:44:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:46:62:16:27:E7:09:20:79:D3:93:FF:69:78:58:F9:63:C7:6B:CE
X509v3 Authority Key Identifier:
keyid:B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:34:16:2b:6e:dc:ad:0e:0c:57:d4:d8:12:71:e1:7f:22:5a:
12:8f:04:b1:87:0b:2e:43:64:7e:15:76:80:6e:53:88:7b:24:
f4:c9:bd:9b:c1:45:c2:90:61:5e:dd:73:35:62:bf:d1:b5:c5:
00:ea:47:6f:50:3f:5d:84:46:c4:45:67:aa:de:ce:c6:f4:6b:
70:ed:5c:95:6a:47:f0:45:a3:ec:19:52:a4:0d:1a:4e:d1:2a:
46:12:f2:f8:42:01:d4:96:e1:3f:61:08:52:49:42:98:ea:0a:
dc:97:a1:05:6f:3a:d3:61:dc:32:18:cb:94:62:4f:60:48:7a:
27:b6:c3:95:09:9f:65:cc:e6:62:41:c6:7c:40:8a:fa:49:da:
9d:6f:f9:39:4e:06:7c:b3:bf:ab:33:e6:2e:d0:a6:be:05:30:
1f:c3:6c:3a:4a:87:ad:43:f7:8b:3e:84:e9:80:12:cf:0b:be:
f4:a1:70:23:95:4f:e0:1a:ca:d1:73:1b:a7:fd:fb:3c:26:73:
d0:25:3c:20:82:d4:7e:cd:ab:67:52:42:18:dc:fa:67:f9:1d:
6d:59:19:08:0b:6e:c7:ad:51:f6:55:72:3d:ed:fc:e9:ad:e4:
57:e0:b5:03:2e:de:bb:e7:b8:8a:75:69:f7:23:e9:71:0f:a8:
e5:c2:15:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:25:13 2026 by rpki-client