
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft
File: umn8tA4zSXV_ok-OM1eRxfAEXVg.mft (raw, json)
Hash identifier: 9oGhDyNDmyI9YOrP1H4CDJeaFxnVQ3sEKZtkw+56oYY=
Subject key identifier: 90:D0:4B:90:4C:A9:C0:C2:2B:60:F4:75:65:13:BB:5F:6B:BC:29:0B
Authority key identifier: BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58
Certificate issuer: /CN=A91EBA81/serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58
Certificate serial: 051A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft
Manifest number: 050D
Signing time: Fri 02 Oct 2026 23:57:31 +0000
Manifest this update: Fri 02 Oct 2026 23:57:31 +0000
Manifest next update: Fri 09 Oct 2026 23:57:31 +0000
Files and hashes: 1: umn8tA4zSXV_ok-OM1eRxfAEXVg.crl (hash: RCHJKv3XVzfd7Ly1QSlgGSPi1vyLN4f6OQGm8MUaJuo=)
2: 159DA092E9B711EFB8454123C4F9AE02.roa (hash: 7ShatlVB6jSiCRe5XmNvlt4TSEhHSPt1cgEmAve1hIw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl
rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 23:57:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1306 (0x51a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA81, serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58
Validity
Not Before: Oct 2 23:57:31 2026 GMT
Not After : Oct 9 23:57:31 2026 GMT
Subject: CN=6ac044eb-7a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:e6:fd:4e:37:a8:05:4b:dc:e8:50:6d:7b:
a7:51:c4:e7:cd:33:82:a1:23:e7:60:b1:c4:02:32:
d0:05:e3:bf:ee:ca:fe:f9:14:c1:67:3b:4b:b8:3c:
f4:c8:e5:1a:29:84:ae:63:17:00:af:3c:39:f8:f1:
07:65:0c:88:8e:91:29:c5:bc:88:67:5d:f9:4d:f1:
12:14:a8:3e:5a:7c:df:e0:d4:9a:bf:d7:15:4d:7d:
8e:b8:36:8c:4f:78:d6:28:3c:c5:c5:54:9c:5b:66:
6e:a5:48:e2:14:60:03:54:61:5a:80:56:1f:17:58:
3d:ab:5c:5f:8a:1f:91:14:8f:aa:5c:8e:ca:c2:3e:
c1:99:4c:e7:14:1b:e6:f5:37:7b:90:97:c8:b6:d5:
dd:14:a3:fd:98:a6:fa:85:b8:15:e4:c8:b3:98:84:
a5:55:75:ec:c0:da:eb:dc:6b:20:61:1e:ad:be:9a:
76:f5:c5:57:ec:a0:e1:de:ce:05:25:d5:c6:6d:40:
32:12:b6:2d:08:a6:23:e6:15:48:86:a8:b0:96:a2:
6b:94:d2:a2:96:58:ba:2f:0e:93:a3:aa:dc:54:f0:
de:48:0a:58:a1:32:41:85:31:e8:f1:d0:5a:d1:65:
65:b2:31:be:65:39:05:73:5f:4d:cc:c8:67:cf:b8:
f0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D0:4B:90:4C:A9:C0:C2:2B:60:F4:75:65:13:BB:5F:6B:BC:29:0B
X509v3 Authority Key Identifier:
keyid:BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d6:b7:60:47:7d:79:4b:41:18:d1:e0:57:7a:6c:25:4a:32:
44:88:3b:df:ef:62:54:49:97:7b:85:ba:2d:f3:3d:6b:71:f3:
4f:74:a8:3f:c2:20:b3:27:fe:fe:43:be:14:f1:6b:91:2a:99:
eb:4a:a8:f9:aa:32:f9:00:d1:1b:8a:82:4d:85:49:3c:65:3a:
46:56:b7:4f:f0:6c:2e:f7:5c:fd:68:0a:24:18:a3:d9:45:00:
1b:62:3d:b8:6e:67:08:a5:f7:32:2f:ee:6e:c4:c2:5a:1b:d0:
1e:bc:b7:45:17:35:73:80:e7:2f:10:d4:aa:68:f9:81:d9:bc:
ec:8a:39:ec:71:25:11:6c:04:16:5d:98:4d:93:a3:54:18:5d:
2b:a0:aa:04:4a:b9:b3:63:9e:01:a9:01:55:e0:c0:66:f6:f4:
0b:ee:36:c3:c5:eb:3d:5a:4f:86:b3:b1:3a:90:ab:73:ca:dc:
fd:8f:40:80:64:80:3f:fc:f5:26:69:1f:a3:cd:d8:7b:22:e5:
ed:71:df:65:6b:95:15:41:85:32:45:ca:73:ac:d4:ba:02:07:
6b:f6:67:b0:21:46:73:16:98:d5:b6:19:df:18:30:93:60:bb:
37:c0:1a:1a:df:d3:38:ef:25:b6:dc:3e:1d:02:97:d2:58:74:
57:cd:28:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:21:43 2026 by rpki-client