
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
File: UM3WDPjzEj_evOkIgq83u-PvXEg.mft (raw, json)
Hash identifier: IxxHVzrx9V0twhRLYbC40pMnb+gtovf86rhseLQr1D0=
Subject key identifier: 29:76:01:B1:83:31:C3:B0:34:E0:B2:1C:AD:4C:B7:1D:D7:B3:C8:09
Authority key identifier: 50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
Certificate issuer: /CN=A9122C94/serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Certificate serial: 086E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
Manifest number: 0865
Signing time: Fri 02 Oct 2026 21:13:06 +0000
Manifest this update: Fri 02 Oct 2026 21:13:05 +0000
Manifest next update: Fri 09 Oct 2026 21:13:05 +0000
Files and hashes: 1: UM3WDPjzEj_evOkIgq83u-PvXEg.crl (hash: e7sWmZXedncD/JMT/xGDsagT3FJFVvCvI/qQKxjb60k=)
2: 5BF797081CF411EBB5ADE642C4F9AE02.roa (hash: 1c98NA9cHWOcz+QEe0M5ImtNh0IRowEb6OME0CEVJwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 21:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2158 (0x86e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122C94, serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Validity
Not Before: Oct 2 21:13:05 2026 GMT
Not After : Oct 9 21:13:05 2026 GMT
Subject: CN=6ac01e62-89b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dc:42:16:45:e3:d9:83:8c:9b:07:2f:ee:3b:
1d:50:00:8f:a3:74:c4:db:c2:87:d2:38:73:52:c8:
53:7d:7c:5f:4b:22:ef:4f:03:63:4e:09:10:26:37:
4c:18:40:e1:25:52:9a:fb:7f:b3:a0:e5:04:0e:62:
a3:68:8d:ca:8b:a7:d4:bb:9b:15:7a:60:68:b4:46:
a0:1f:11:0f:37:0d:35:c6:bc:a6:41:a6:53:be:32:
31:e5:f6:f2:45:b7:2c:14:ba:59:4c:23:f0:1c:e5:
9e:5f:35:fb:15:a5:cb:e2:15:65:c5:18:ca:90:90:
e1:f7:c8:21:d5:08:7e:52:5c:d0:3b:99:ef:d5:2e:
f9:f7:fe:bc:2c:e6:66:db:b6:6b:37:34:cc:94:a0:
ce:4f:a5:59:91:3c:12:a6:df:42:c6:59:b9:4d:d9:
0a:dd:1e:1c:0e:98:e2:50:02:03:74:2a:6b:05:16:
59:2d:fc:6e:47:81:7a:21:43:f5:72:46:9e:2c:72:
54:f3:b7:0d:f8:f9:5e:d9:96:af:36:95:52:4e:f9:
4a:ac:8b:66:21:c2:80:a5:fd:03:70:dd:08:14:e6:
66:e1:20:99:87:b8:97:2b:26:50:ac:01:93:3d:f5:
9a:eb:dd:c5:55:72:63:e5:7c:9e:a9:34:33:25:50:
1b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:76:01:B1:83:31:C3:B0:34:E0:B2:1C:AD:4C:B7:1D:D7:B3:C8:09
X509v3 Authority Key Identifier:
keyid:50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:79:70:52:1e:d5:35:03:ed:b9:c8:ff:27:e1:c8:da:d4:0f:
70:f7:ee:79:d0:1a:8b:b6:03:a4:44:5a:0c:86:9a:9a:ed:e2:
e7:3c:3e:3e:cd:7d:ab:f1:64:e8:f5:1e:47:af:44:a2:9a:e4:
e2:47:ac:3a:3a:8c:11:81:04:90:e4:89:71:69:48:d3:3f:11:
d4:74:e7:0d:4f:02:fa:3f:42:7d:54:c3:b0:de:b0:19:37:14:
98:9e:8d:2d:96:79:24:6a:68:3a:a6:b0:61:32:43:58:5b:5e:
7a:22:33:48:f2:71:d6:60:5f:4d:1b:57:ea:02:f4:4e:1c:03:
81:57:d4:88:c3:32:85:42:79:fb:27:4d:a4:42:f4:c8:bf:1c:
7c:db:1f:56:96:f2:b6:e9:fa:79:c4:39:d8:12:03:c9:f5:28:
0e:4e:c9:98:63:9d:17:ee:6f:30:ba:1b:00:f6:58:d4:30:ce:
39:f9:16:4f:bb:27:17:12:13:68:c6:08:2e:36:11:33:af:4a:
57:ad:d4:f3:0e:c1:94:6b:4f:28:e1:40:2a:14:4b:08:9e:57:
85:9f:f0:d8:da:e1:09:42:8e:dc:c5:62:cf:31:aa:61:02:95:
51:2c:1c:6f:f7:5f:e0:c6:e5:3f:5a:59:17:76:5d:53:18:80:
e9:9e:06:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJDOTQxMTAvBgNVBAUTKDUwQ0RENjBDRjhGMzEyM0ZERUJDRTkwODgyQUYzN0JC
RTNFRjVDNDgwHhcNMjYxMDAyMjExMzA1WhcNMjYxMDA5MjExMzA1WjAYMRYwFAYD
VQQDEw02YWMwMWU2Mi04OWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzdxCFkXj2YOMmwcv7jsdUACPo3TE28KH0jhzUshTfXxfSyLvTwNjTgkQJjdM
GEDhJVKa+3+zoOUEDmKjaI3Ki6fUu5sVemBotEagHxEPNw01xrymQaZTvjIx5fby
RbcsFLpZTCPwHOWeXzX7FaXL4hVlxRjKkJDh98gh1Qh+UlzQO5nv1S759/68LOZm
27ZrNzTMlKDOT6VZkTwSpt9Cxlm5TdkK3R4cDpjiUAIDdCprBRZZLfxuR4F6IUP1
ckaeLHJU87cN+Ple2ZavNpVSTvlKrItmIcKApf0DcN0IFOZm4SCZh7iXKyZQrAGT
PfWa693FVXJj5XyeqTQzJVAbfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCl2AbGD
McOwNOCyHK1Mtx3Xs8gJMB8GA1UdIwQYMBaAFFDN1gz48xI/3rzpCIKvN7vj71xI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC84MjIyQzI3RTFD
RjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVqX2V2T2tJZ3E4M3UtUHZY
RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VNM1dEUGp6RWpfZXZPa0lncTgzdS1QdlhFZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkM5NC84MjIyQzI3RTFDRjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVq
X2V2T2tJZ3E4M3UtUHZYRWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiXlwUh7VNQPtucj/J+HI2tQPcPfuedAai7YDpERaDIaamu3i5zw+Ps19q/Fk
6PUeR69Eoprk4kesOjqMEYEEkOSJcWlI0z8R1HTnDU8C+j9CfVTDsN6wGTcUmJ6N
LZZ5JGpoOqawYTJDWFteeiIzSPJx1mBfTRtX6gL0ThwDgVfUiMMyhUJ5+ydNpEL0
yL8cfNsfVpbytun6ecQ52BIDyfUoDk7JmGOdF+5vMLobAPZY1DDOOfkWT7snFxIT
aMYILjYRM69KV63U8w7BlGtPKOFAKhRLCJ5XhZ/w2NrhCUKO3MVizzGqYQKVUSwc
b/df4MblP1pZF3ZdUxiA6Z4GMQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 02:24:58 2026 by rpki-client