
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
File: xUMJ3BErZYYnvTagMHLnXQYDZNM.mft (raw, json)
Hash identifier: QQKT6KJzWpxE1oiuuBExBOcpz2f9ysF+ARh7LLH/JEE=
Subject key identifier: 0E:72:0A:E4:55:E8:03:46:94:E3:95:4F:92:D8:91:48:0E:A3:57:39
Authority key identifier: C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3
Certificate issuer: /CN=A9199836/serialNumber=C54309DC112B658627BD36A03072E75D060364D3
Certificate serial: 059F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
Manifest number: 0597
Signing time: Tue 22 Sep 2026 22:53:04 +0000
Manifest this update: Tue 22 Sep 2026 22:53:03 +0000
Manifest next update: Tue 29 Sep 2026 22:53:03 +0000
Files and hashes: 1: xUMJ3BErZYYnvTagMHLnXQYDZNM.crl (hash: zqmdb26IDlXjlHZ4URfS81b6jkUv1r1gok/+QO2xjRw=)
2: 029F318A366F11ECA773E263C4F9AE02.roa (hash: H74pxewpIAfUm8/FUa/m3c/v+hEej5T/CVejW+xMk8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl
rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1439 (0x59f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199836, serialNumber=C54309DC112B658627BD36A03072E75D060364D3
Validity
Not Before: Sep 22 22:53:03 2026 GMT
Not After : Sep 29 22:53:03 2026 GMT
Subject: CN=6ab306d0-205b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:af:23:ce:e8:d7:53:ba:4c:cc:c6:4f:4c:
e7:49:e8:ca:b3:f1:72:d1:21:a8:33:4b:18:50:b5:
de:c8:25:ad:62:d5:c6:1f:4f:a5:ca:b5:c8:cd:ee:
62:da:b0:7c:c9:0d:3a:43:e6:fa:06:54:91:db:cd:
ef:40:5e:ce:9f:8b:ca:9a:ef:75:64:67:6a:1d:04:
9f:9e:7e:67:65:f3:f4:ba:f5:99:07:cb:84:5b:cf:
a3:f8:8b:7f:0e:91:9e:7b:22:9b:11:31:1e:a5:33:
12:a5:77:1f:3f:46:5b:97:d0:93:c0:0f:63:f6:0e:
1b:17:00:20:39:95:30:fb:98:df:3e:fa:23:04:45:
cc:a9:d2:95:c7:a6:b4:74:c8:4e:32:87:12:b7:09:
30:4d:63:8a:17:2c:bf:bb:e3:c1:d9:ef:2d:7c:ab:
23:b9:0f:5e:18:a9:ca:2a:80:af:62:49:d6:bc:23:
83:f5:16:b9:57:34:89:50:d2:d5:64:b8:0a:a4:74:
59:b2:38:57:12:7a:fb:76:5d:b9:54:fc:eb:48:fb:
9e:fa:10:50:fc:d2:69:5f:2f:18:7f:a2:db:da:bd:
5c:34:6f:6e:d4:1f:fb:0a:92:44:c6:20:4b:02:15:
dc:a2:d3:a3:4f:57:e5:77:6d:2c:c4:5d:de:6f:ba:
75:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:72:0A:E4:55:E8:03:46:94:E3:95:4F:92:D8:91:48:0E:A3:57:39
X509v3 Authority Key Identifier:
keyid:C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:c8:05:a6:e2:bb:ad:bb:95:c4:dc:a4:c0:a0:0e:84:f0:ee:
0b:8c:c6:5c:81:3d:f6:bf:49:18:ac:e1:9a:7b:45:f0:f8:a8:
60:3a:07:26:33:3d:ea:d6:22:c5:9a:ff:ca:6a:ea:5d:33:b3:
ef:6b:d5:b4:e4:4f:fc:cd:16:5e:db:95:46:bd:3b:ce:49:5b:
07:94:9b:3a:2b:87:2f:24:2d:f0:19:94:1b:b2:f1:25:d3:3d:
92:42:fd:28:c6:cc:25:ce:a3:bc:1a:61:29:56:48:30:2d:70:
86:4b:d9:ed:4c:13:d4:c2:9c:77:4f:64:6a:d0:fe:99:2a:53:
32:fc:79:1a:13:87:6f:58:24:7f:b8:71:f2:c8:76:b1:29:06:
5f:40:a2:44:bb:9f:fc:0f:52:5e:8d:13:b3:e2:21:d7:38:22:
e7:c5:a4:06:b8:31:12:81:10:ec:8a:d2:58:8c:2c:da:eb:b7:
88:b5:64:e9:f1:13:e0:81:1b:ae:c9:e0:34:3f:15:bc:70:7a:
a2:12:b5:70:ab:24:f9:29:21:10:83:28:8a:de:17:ec:bd:15:
b2:8d:1e:9e:b4:38:4d:0c:a0:ed:a2:11:a7:c3:f4:34:a7:ee:
25:7e:4e:1e:ed:40:04:95:62:89:32:25:39:e2:fc:f6:68:3a:
46:7c:93:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:18:45 2026 by rpki-client