
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
File: UMP9EvajMVgZtSurzBmPsNv9QTo.mft (raw, json)
Hash identifier: bbKTvj2E7OohgpceSYB++l1HZBxmihc3qUZdRLRW+zM=
Subject key identifier: 34:6B:C9:4A:1E:6B:32:87:81:5D:7E:81:1E:35:01:5D:65:50:83:54
Authority key identifier: 50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A
Certificate issuer: /CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A
Certificate serial: 04BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
Manifest number: 04B1
Signing time: Thu 23 Jul 2026 00:44:49 +0000
Manifest this update: Thu 23 Jul 2026 00:44:49 +0000
Manifest next update: Thu 30 Jul 2026 00:44:49 +0000
Files and hashes: 1: UMP9EvajMVgZtSurzBmPsNv9QTo.crl (hash: 13VVwqYSRGtO4DwxEgaWt0mg26lgmQE3pJUTa1Dw9lU=)
2: 296C190484AD11EC9C3F837CC4F9AE02.roa (hash: lbtzXOv7fCZ9ldssOYWEkCJAJ4leYPGz3mQ8urYvDU8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl
rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1213 (0x4bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE616, serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A
Validity
Not Before: Jul 23 00:44:49 2026 GMT
Not After : Jul 30 00:44:49 2026 GMT
Subject: CN=6a616401-fea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:92:0a:c0:09:9e:12:44:fb:98:bc:fe:1c:
99:cc:00:fb:49:19:2a:a8:0b:59:a4:19:bf:dc:da:
1f:c9:7e:69:a2:17:e1:17:26:f6:78:dc:d1:b5:7f:
77:cb:27:7f:b2:00:4e:40:47:1d:d8:cc:49:27:64:
61:b1:b2:25:a8:cc:f8:2d:1c:ca:5d:46:77:82:2e:
ad:7b:08:fa:61:59:d7:5d:1d:9a:02:ea:e0:b9:a3:
c7:31:1f:11:bd:10:f5:24:f5:b6:f1:cd:8b:19:04:
83:ee:2c:89:11:48:93:d7:70:c9:3e:33:bf:bd:d4:
f5:2d:54:13:3b:90:cd:6d:18:0a:3e:0e:5b:2b:49:
2e:11:b1:ec:6e:85:ee:46:fa:a2:45:e7:c9:28:fd:
76:d6:97:9b:2a:78:58:2c:9a:89:06:4a:32:0d:12:
d8:1f:01:66:92:54:d4:fe:b0:5f:c5:e8:b1:b6:79:
b5:0a:4e:16:a8:70:36:68:48:1c:c1:86:ad:f4:19:
4a:d0:f7:d8:e8:9d:6b:19:01:e5:f9:1f:2d:1e:88:
73:7b:13:ac:8d:50:f7:e0:76:18:84:a6:73:15:4c:
06:9d:7c:57:b2:76:a4:35:9e:be:80:38:c1:7c:47:
41:ed:32:eb:8a:6b:d9:95:69:cf:30:b8:65:5a:76:
59:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6B:C9:4A:1E:6B:32:87:81:5D:7E:81:1E:35:01:5D:65:50:83:54
X509v3 Authority Key Identifier:
keyid:50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:78:02:b1:da:8f:bb:10:f7:c6:c6:29:0d:a0:b0:c4:81:a7:
71:5c:92:1a:c7:d6:e8:48:ad:e7:ef:5d:96:77:b4:5e:b3:4b:
cb:8c:8a:1b:28:85:0c:7f:4c:14:c4:c2:46:01:ed:45:a2:be:
ee:e0:1f:b4:04:f7:70:c8:5b:9a:1b:09:32:98:1c:d9:dd:a5:
6e:9d:19:f7:5e:06:eb:17:ef:21:a9:53:1f:9b:93:9f:5a:90:
ab:b7:db:bb:f0:f0:cc:30:80:ca:54:db:71:64:6b:66:89:c1:
d6:fc:1f:cd:cc:cc:58:7d:66:3a:ee:f8:e8:6c:17:8a:e7:52:
56:4e:f4:c6:16:7a:67:f1:e6:7d:c6:29:d9:9a:8f:8b:92:70:
84:3a:96:ed:a9:60:99:af:b7:da:af:51:1c:3d:f8:9f:5f:73:
bf:a0:3c:81:b9:46:a4:93:4c:fa:47:e4:b1:b1:7f:a4:51:b4:
5a:ca:f1:76:2c:48:92:11:92:b9:c1:ad:af:1f:85:4b:c8:bb:
82:5c:48:ff:2a:15:82:27:28:16:85:31:fe:11:a5:db:53:86:
30:81:63:15:25:f5:a1:60:c9:0a:7e:17:6b:1a:a1:9c:6f:a0:
41:1f:52:68:af:6c:ef:e9:47:9e:41:cf:c1:e6:59:66:3b:94:
c8:94:aa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:34 2026 by rpki-client