
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
File: rUMyA4JywtsyFd2jrfsBU1QVaRM.mft (raw, json)
Hash identifier: ozg4JDLf7Vy/R4jNslxvDwuaBXNskZAHvB0YhnSOPgo=
Subject key identifier: 76:D2:85:1E:A6:85:93:98:8F:E2:3F:85:C8:7F:CE:9F:EB:78:6A:5C
Authority key identifier: AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13
Certificate issuer: /CN=A91CF064/serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913
Certificate serial: 0188
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
Manifest number: 0180
Signing time: Thu 23 Jul 2026 06:08:51 +0000
Manifest this update: Thu 23 Jul 2026 06:08:51 +0000
Manifest next update: Thu 30 Jul 2026 06:08:51 +0000
Files and hashes: 1: rUMyA4JywtsyFd2jrfsBU1QVaRM.crl (hash: Mi8dcZu8+PKnuMHkmNDxj+1eud278l+s+wZPl/4zYc0=)
2: F74324B0464511EFA4CCFA6DC4F9AE02.roa (hash: jiOqsOopgHWdylNJvQ56lnPS2twkZ7rplvNHVmhQWj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl
rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF064, serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913
Validity
Not Before: Jul 23 06:08:51 2026 GMT
Not After : Jul 30 06:08:51 2026 GMT
Subject: CN=6a61aff3-d778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8d:70:c7:d6:c8:bf:e9:3e:eb:b6:de:4d:f0:
b3:6d:e4:86:8d:0f:9e:3f:86:4a:0e:90:c0:6a:b1:
17:f9:d7:7c:de:28:ec:5d:af:35:33:77:31:80:39:
a7:eb:b4:e6:5c:91:0f:bf:67:fb:4e:ff:f1:7b:b8:
eb:36:22:4b:8a:e8:4b:6a:a4:65:3a:31:de:91:d8:
12:e2:f2:0e:83:ff:3f:6a:56:39:86:d3:48:e1:15:
e5:e1:f2:25:4c:6c:e0:f1:64:26:d6:93:0f:87:1a:
d7:d5:5b:55:b3:36:e5:a6:4a:c6:d2:01:a8:24:09:
d0:ea:3d:b2:a3:e1:a1:64:dc:0f:b8:45:c0:98:52:
61:ab:a4:e8:8c:4e:be:ca:2b:66:1a:c7:85:83:96:
1b:aa:86:26:1d:01:83:64:61:58:74:74:5d:46:24:
67:7f:59:51:7a:53:1e:23:a5:e8:f1:0f:23:99:b1:
8c:06:28:20:0b:65:ab:46:92:28:3a:22:86:67:45:
14:17:8b:a3:39:69:58:d5:93:40:e0:c0:17:4c:26:
c4:19:3f:af:16:81:3c:a2:30:39:00:12:8a:ba:5a:
d0:51:0a:e7:a1:da:ac:ef:6c:e6:55:50:f5:7d:31:
52:51:0e:c9:5c:bc:82:8f:54:0e:ae:9b:97:34:e6:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D2:85:1E:A6:85:93:98:8F:E2:3F:85:C8:7F:CE:9F:EB:78:6A:5C
X509v3 Authority Key Identifier:
keyid:AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:3a:62:f7:0e:fc:9d:2f:09:75:69:42:e0:10:8f:d4:97:74:
de:d8:6f:d5:0e:33:05:e0:4b:c2:18:ee:7c:d8:73:1e:ce:43:
ab:5f:9d:fa:a6:4d:3e:18:67:b0:87:15:0c:37:bc:2b:e1:f7:
bc:bc:7c:50:4b:64:31:4a:e8:25:83:03:55:18:0e:12:ba:53:
dc:d7:2f:cb:78:1d:fd:98:95:74:dc:58:61:8a:ae:fa:40:22:
43:18:4b:92:9e:4a:91:26:cf:ed:69:2c:67:ba:59:61:72:82:
62:a3:71:2e:76:30:4d:c1:0c:e4:a4:42:db:a2:ff:67:4c:86:
68:4c:25:07:bc:0d:14:f4:3d:25:5f:38:2c:4a:4a:60:e0:b5:
68:5f:54:f7:87:c2:54:9a:73:f3:ef:4e:c3:8a:67:5d:74:79:
a7:d8:fb:d7:a6:8c:77:06:6d:98:aa:32:07:b4:66:97:60:74:
f9:ed:e7:eb:1c:6f:28:01:8c:cc:3a:37:10:af:6d:2d:65:fd:
03:3e:7f:4c:69:7b:87:3f:6f:a8:cd:b2:f8:f8:c2:74:28:e8:
a2:9d:88:7f:c7:49:22:0e:b3:4a:0e:84:2a:ff:e9:48:da:aa:
21:02:ba:7d:65:a1:e0:c7:c4:1d:f6:29:d8:68:67:77:28:e0:
a5:ac:59:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:21 2026 by rpki-client