
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
File: UM3WDPjzEj_evOkIgq83u-PvXEg.mft (raw, json)
Hash identifier: y8YzYbFPiZ3+U9TxfqdR/p65IkKpr+ZhDOLppgrhWZg=
Subject key identifier: 9F:42:E5:CF:06:2F:1C:89:7F:C5:0F:62:D5:29:FC:BD:B5:6B:73:FD
Authority key identifier: 50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
Certificate issuer: /CN=A9122C94/serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Certificate serial: 084B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
Manifest number: 0842
Signing time: Sun 26 Jul 2026 21:40:30 +0000
Manifest this update: Sun 26 Jul 2026 21:40:29 +0000
Manifest next update: Sun 02 Aug 2026 21:40:29 +0000
Files and hashes: 1: UM3WDPjzEj_evOkIgq83u-PvXEg.crl (hash: SUJyPvd3nnelPIuVLvWRMvZXBDdSQSK6uOy6LloXDsM=)
2: 5BF797081CF411EBB5ADE642C4F9AE02.roa (hash: 1c98NA9cHWOcz+QEe0M5ImtNh0IRowEb6OME0CEVJwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2123 (0x84b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122C94, serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Validity
Not Before: Jul 26 21:40:29 2026 GMT
Not After : Aug 2 21:40:29 2026 GMT
Subject: CN=6a667ecd-b7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:52:8a:f3:24:a9:17:05:15:55:f8:14:48:
ed:70:70:30:83:39:cf:43:14:ca:d5:15:b1:e2:4b:
44:8b:91:41:7c:d9:2d:b4:1b:23:85:21:d0:6e:62:
fd:50:27:78:55:74:54:8f:fd:78:f9:8a:36:be:0d:
bf:9a:83:c6:63:79:43:eb:69:41:b1:1d:69:0a:31:
86:3e:90:9e:cc:4d:39:95:5b:f6:7b:33:20:ea:f4:
26:1f:4e:d6:c8:2f:24:ab:54:5a:b3:04:1d:68:37:
71:6c:51:1a:c0:cc:ba:0a:b0:6f:4a:b6:21:ab:c6:
fc:2b:1b:5a:95:7d:19:30:c0:7d:dc:16:07:9f:24:
84:f1:65:f2:4a:d8:79:b4:9a:21:f4:6d:7a:67:de:
1b:cd:63:6f:f6:fd:0a:68:f1:72:c7:65:7c:a9:9a:
de:21:88:fa:41:10:28:0a:66:ba:70:04:6d:8e:65:
bc:cd:e0:b6:d3:dc:15:6c:58:ac:7e:c2:2f:60:d1:
96:f4:aa:a2:35:3a:07:d1:e5:f4:38:ae:a5:a3:2d:
06:32:c6:6a:aa:ab:d7:3e:15:f8:6c:10:b8:de:38:
e8:c2:5a:34:13:83:10:d3:ea:97:e8:96:b9:62:1c:
31:53:6b:4a:df:6b:ab:c4:f1:f4:b3:8d:20:e4:f7:
47:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:42:E5:CF:06:2F:1C:89:7F:C5:0F:62:D5:29:FC:BD:B5:6B:73:FD
X509v3 Authority Key Identifier:
keyid:50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:cc:f5:f2:96:e1:61:ca:a4:96:1d:aa:91:27:e5:63:a9:78:
00:da:3b:1d:69:a0:54:c2:8c:37:51:fb:31:31:37:58:47:31:
88:df:d3:37:2c:6b:94:70:16:a2:1b:0e:05:63:dc:25:77:f4:
18:6c:38:42:36:c5:b4:b2:a1:14:2f:e3:aa:11:2c:09:2f:df:
82:c7:5a:83:0a:74:e3:f2:cf:f0:70:6c:c5:db:d4:30:0b:de:
ad:3e:c1:07:51:83:a1:dd:d8:32:9d:f1:46:c5:4b:66:55:f5:
c9:29:f0:b2:86:ad:09:af:bd:5d:c9:f6:f1:26:2d:c3:e6:51:
c4:5d:94:28:c2:77:af:b5:69:07:bb:2d:98:42:dc:35:d3:f2:
31:45:78:fb:96:70:d7:08:63:aa:cb:bf:1d:11:6e:b8:cb:2a:
10:8c:c2:18:2d:04:10:f8:8b:76:91:d0:27:11:74:81:32:44:
53:67:89:7d:c6:a8:c8:12:7d:48:50:17:e1:33:fa:64:13:08:
20:89:aa:78:5e:cb:d7:ff:7c:e3:7c:11:5d:e3:f1:dd:0d:fd:
95:43:45:32:0d:5e:45:3a:aa:de:fe:aa:45:1a:9e:68:e9:13:
a8:f8:e8:a8:86:3a:ca:fc:07:aa:48:57:14:43:be:66:9a:67:
2d:91:64:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:33 2026 by rpki-client