
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
File: rUMyA4JywtsyFd2jrfsBU1QVaRM.mft (raw, json)
Hash identifier: rKKeH6Nj/zC369+xzhAxkXLzN0fVE1/EnPHB3Y8jFUc=
Subject key identifier: 49:AF:A1:B8:3C:4C:5A:9F:09:80:AA:E5:30:AD:EF:94:C6:BF:AB:A9
Authority key identifier: AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13
Certificate issuer: /CN=A91CF064/serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913
Certificate serial: 01A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
Manifest number: 01A0
Signing time: Wed 23 Sep 2026 04:07:17 +0000
Manifest this update: Wed 23 Sep 2026 04:07:17 +0000
Manifest next update: Wed 30 Sep 2026 04:07:17 +0000
Files and hashes: 1: rUMyA4JywtsyFd2jrfsBU1QVaRM.crl (hash: mz28uaxKN3V6LMUl8uVkmD7HTry5KeL/I+lpf5BQlFE=)
2: F74324B0464511EFA4CCFA6DC4F9AE02.roa (hash: jiOqsOopgHWdylNJvQ56lnPS2twkZ7rplvNHVmhQWj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl
rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF064, serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913
Validity
Not Before: Sep 23 04:07:17 2026 GMT
Not After : Sep 30 04:07:17 2026 GMT
Subject: CN=6ab35075-6694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:ef:92:16:22:4f:e7:83:7a:af:7e:de:50:
9d:62:1e:70:b4:19:27:6c:0e:ec:a8:f4:e6:44:14:
57:2e:d6:90:4d:02:e3:f2:ea:b1:ad:da:53:4a:c5:
cf:99:5c:8e:09:1f:38:0d:4a:af:43:02:5d:eb:ff:
70:f5:e5:51:a3:11:fe:ba:30:5d:33:d7:9f:71:a4:
1b:d1:b9:24:41:ac:07:6c:ff:b7:28:c2:c0:f0:3a:
69:59:1a:64:b1:98:d3:56:14:ce:28:79:16:af:66:
69:c7:61:7c:b6:cd:58:95:65:21:2a:43:81:31:57:
76:29:2c:1a:67:87:23:14:f3:82:32:0c:a3:cd:81:
58:5f:26:45:c0:35:5d:f4:66:63:f1:d1:2c:cb:ef:
ac:87:6e:99:b0:e7:51:54:44:a9:7e:9e:79:7a:09:
08:1e:11:a7:23:83:82:98:f1:04:75:da:6f:41:2a:
3a:14:08:c3:0e:e0:4b:f8:2e:85:a0:73:23:1d:89:
22:f8:2c:24:00:d1:97:f1:9b:97:74:c9:7e:39:c4:
75:47:49:83:47:65:36:ac:1a:fb:11:39:53:b9:45:
a8:fc:98:47:f7:ba:d0:5b:54:38:03:b6:f0:81:8a:
1d:7c:b8:5d:33:f4:94:cc:de:dc:66:25:81:79:57:
8d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AF:A1:B8:3C:4C:5A:9F:09:80:AA:E5:30:AD:EF:94:C6:BF:AB:A9
X509v3 Authority Key Identifier:
keyid:AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:69:a2:18:36:37:c2:a7:b6:f1:d5:56:2e:fd:26:c1:3f:fe:
f3:b1:e7:40:88:aa:d4:19:00:db:52:5d:22:9c:8c:cd:7f:da:
56:76:8f:ce:cd:e9:70:fc:a4:9b:d9:a9:d6:05:13:7b:ba:6c:
cd:b0:1d:df:a1:b1:b6:0a:be:96:e4:28:47:4b:2e:5a:df:5a:
d9:ba:0f:82:15:08:95:43:f6:21:10:bb:02:d1:43:1f:a9:34:
18:14:c0:de:22:c9:ff:fa:7f:d7:2c:13:46:15:20:63:98:ea:
1b:fe:03:a0:f7:4a:0f:47:2b:17:10:11:d4:7b:a4:8a:a4:c8:
a9:eb:09:b2:0f:23:8c:0a:af:c2:bb:f1:31:10:ae:4b:22:cf:
3b:a6:ab:c9:00:6b:ab:a0:8d:28:42:a9:08:94:c2:22:d8:8c:
4e:3b:ef:1a:76:42:8f:2b:f7:f4:2a:c0:ca:21:98:4e:8c:20:
f1:c1:b8:13:78:f6:ed:6c:b1:2c:76:8c:75:d4:57:3f:8a:79:
fe:68:34:05:12:72:5b:da:ee:96:72:94:4b:29:d5:a7:1f:d5:
c8:e2:48:cf:b0:cb:b7:d4:c7:f8:04:d2:38:e6:18:85:b5:ee:
0e:5f:2e:7c:e1:62:eb:cb:ba:d2:76:d7:23:80:a8:d5:7b:26:
5f:38:64:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:42:50 2026 by rpki-client