
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft
File: umn8tA4zSXV_ok-OM1eRxfAEXVg.mft (raw, json)
Hash identifier: +T3f2JRBaPgIL7VLasTzFB2+PRiVC/Erp7DjFKh9JLw=
Subject key identifier: 57:1D:EF:71:78:EA:83:D9:F0:6E:B5:BA:78:DA:98:46:AD:BE:42:40
Authority key identifier: BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58
Certificate issuer: /CN=A91EBA81/serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58
Certificate serial: 04F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft
Manifest number: 04E8
Signing time: Thu 23 Jul 2026 00:36:33 +0000
Manifest this update: Thu 23 Jul 2026 00:36:33 +0000
Manifest next update: Thu 30 Jul 2026 00:36:33 +0000
Files and hashes: 1: umn8tA4zSXV_ok-OM1eRxfAEXVg.crl (hash: rVX+36aK0z+0wb418DGegkiDdaJ6EL3yFJT6lWBj2PE=)
2: 159DA092E9B711EFB8454123C4F9AE02.roa (hash: 7ShatlVB6jSiCRe5XmNvlt4TSEhHSPt1cgEmAve1hIw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl
rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1269 (0x4f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA81, serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58
Validity
Not Before: Jul 23 00:36:33 2026 GMT
Not After : Jul 30 00:36:33 2026 GMT
Subject: CN=6a616211-5fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:76:d7:8c:0b:39:83:be:d7:cf:60:b4:d3:aa:
30:52:55:f1:63:7f:bf:72:da:9a:23:82:13:c6:83:
54:01:37:47:ee:c2:1c:00:1e:d3:b3:86:85:ed:28:
b5:bc:95:79:69:2a:e5:6f:5e:c4:88:df:9d:5c:ba:
30:3f:b3:9a:c5:5a:29:7c:d8:2a:73:7d:f7:ec:82:
e5:41:e0:c9:ab:b6:e0:f6:86:35:d7:f0:62:d3:ae:
16:a6:52:3c:81:06:3c:d7:52:b0:23:97:68:9d:d5:
6d:99:85:64:0b:a4:df:c9:b8:e4:2f:3e:6c:03:f8:
39:d9:e9:54:42:8b:b8:90:1b:f1:79:78:4d:55:51:
90:00:2c:99:39:2a:1b:97:49:d5:69:ea:e1:c4:17:
5b:2d:88:df:18:7a:74:32:ed:aa:60:1b:b5:d0:06:
2a:92:31:f2:05:15:b1:35:e7:dd:a5:6d:bb:02:02:
a5:37:c1:87:72:87:67:87:bc:f3:0d:27:a5:c4:5f:
5f:5b:bd:71:c3:04:64:75:f7:83:de:8a:90:89:c1:
29:d8:9b:19:b1:9f:e6:5e:07:01:ba:bf:1b:94:2f:
e9:03:a2:61:c1:0f:6e:c9:64:01:f9:37:23:20:c0:
84:06:21:2e:19:08:8d:fc:6c:b0:e8:b4:54:26:69:
f4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1D:EF:71:78:EA:83:D9:F0:6E:B5:BA:78:DA:98:46:AD:BE:42:40
X509v3 Authority Key Identifier:
keyid:BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:b3:12:2a:9c:be:02:cd:74:42:2d:55:1f:69:0b:76:d6:f8:
05:1f:fd:97:73:f5:e1:e1:67:24:a2:7e:9d:b3:a2:3a:d2:54:
e1:7e:68:8b:3c:58:22:9e:5a:cd:91:47:77:5a:57:3d:25:c5:
18:b5:09:13:15:cd:44:43:99:1d:1d:90:7e:8b:b3:97:dd:12:
b4:bb:24:c3:10:22:a7:2c:e2:6d:bd:57:5b:27:80:90:dc:32:
49:82:90:72:bb:ef:5c:f5:33:36:5b:4e:70:3e:02:1a:db:e6:
df:e8:58:fa:1b:85:59:71:12:46:48:38:63:b5:a2:5f:20:52:
2f:36:9f:a7:41:ff:d0:43:7c:a3:49:10:26:1b:5a:18:4d:f8:
4b:c1:6a:df:93:03:5d:1f:24:bc:64:14:32:e0:13:ee:6b:d8:
13:b5:1e:ac:14:63:9f:f5:10:4c:59:7b:22:0a:48:16:89:af:
b5:06:af:92:c7:df:aa:6e:8c:48:af:dd:20:12:b8:36:4c:e8:
b2:fc:ed:66:fe:5e:1e:fc:ac:88:f0:78:1b:12:8e:cd:c2:cf:
e9:7d:7b:6a:d3:ea:74:ec:e6:ce:05:6a:41:9c:f9:0b:d5:03:
75:1f:2d:d0:58:b7:39:33:a9:af:39:02:84:be:59:e1:05:53:
df:5a:c0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:05:52 2026 by rpki-client