
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
File: R_UMlYv5z1RcYBresE-KBeEB2aU.mft (raw, json)
Hash identifier: fFoz0ifMpmL08C13eX+Y02hDQJPHJOzHS+NkkYHUG9w=
Subject key identifier: 38:60:DA:4F:E1:46:62:05:6C:33:78:38:2C:BF:B9:F9:C3:B4:DF:D5
Authority key identifier: 47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5
Certificate issuer: /CN=A9153490/serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
Certificate serial: 01A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
Manifest number: 0197
Signing time: Fri 17 Apr 2026 04:03:48 +0000
Manifest this update: Fri 17 Apr 2026 04:03:47 +0000
Manifest next update: Fri 24 Apr 2026 04:03:47 +0000
Files and hashes: 1: R_UMlYv5z1RcYBresE-KBeEB2aU.crl (hash: rvZY5wd31MsbTC+rES8QmNDEFIYfEBGkAyk8hhRAsF8=)
2: 0F0A0C72EBB411EE9D86095BC4F9AE02.roa (hash: hrpObnCPcxRMCt15cylb8b70cp9YbT6TW8DLiHpGHoo=)
3: 0F778EDCEBB411EE9D86095BC4F9AE02.roa (hash: h/OwSIHosa0hSGtUAMFoRQJH1IunWAz+X50+i3Y6izk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl
rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153490, serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
Validity
Not Before: Apr 17 04:03:47 2026 GMT
Not After : Apr 24 04:03:47 2026 GMT
Subject: CN=69e1b124-99ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:d2:bd:ca:62:bc:8a:3f:2d:41:ff:05:61:
cc:88:83:3c:1f:b1:2e:51:aa:34:15:df:bd:9a:77:
28:af:78:45:92:e2:7f:bb:02:04:2a:3f:82:78:6c:
a0:6e:6d:23:dd:33:4f:95:7f:11:80:9f:97:38:0f:
12:32:c6:fe:05:ed:88:b1:bc:45:37:16:80:c8:7b:
84:b4:20:aa:54:47:a7:45:a1:6c:a9:21:ad:1d:c3:
01:ea:d7:c7:e2:28:9c:7e:81:18:3a:3e:5b:49:82:
a0:57:51:09:46:41:b5:42:c3:8e:cd:c8:d4:9b:5c:
d8:82:05:6a:1b:8a:b1:94:bd:5c:ea:73:fb:3a:b7:
6d:2e:2d:47:43:72:0f:4a:5c:02:6f:3d:d6:e2:ec:
d6:eb:ac:31:f6:eb:28:20:02:c0:4e:a8:c7:f4:92:
f9:45:57:09:14:4c:f4:ea:e3:4b:8d:ad:22:0f:f3:
49:fc:6b:4e:91:3b:1a:74:50:30:e2:6d:b7:d8:22:
bc:66:9e:9c:d9:9e:3f:98:ae:5a:1c:6c:a9:f1:a9:
09:d9:e8:e1:b7:5f:92:7f:09:2e:36:9f:8b:fe:c6:
b3:13:de:67:86:94:a3:de:ab:4f:2f:df:2b:b2:4f:
bd:83:ba:56:51:72:dd:2c:2f:80:05:13:eb:72:d9:
8c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:60:DA:4F:E1:46:62:05:6C:33:78:38:2C:BF:B9:F9:C3:B4:DF:D5
X509v3 Authority Key Identifier:
keyid:47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:55:65:f9:75:9a:b6:24:8d:38:55:5d:84:4f:e8:e5:87:51:
0b:2e:69:b5:f6:b9:c0:40:2c:00:b9:2b:58:0d:a9:a8:a1:3f:
5a:60:30:3f:58:77:9e:69:4f:fa:cc:86:b8:6b:e0:82:41:85:
85:2c:bf:e2:c9:a0:8c:65:d3:b6:2a:96:74:51:9f:d9:fe:00:
0d:ed:b1:01:38:47:85:b1:ef:3a:6e:22:13:1c:55:41:a8:0c:
a4:f8:44:96:6a:d3:c0:1c:63:25:54:c3:2f:95:41:f3:96:df:
f7:2e:8f:34:cd:55:fd:ba:d1:06:0a:14:47:66:0b:04:e5:ba:
45:f2:31:d5:c0:d4:15:8e:85:a9:ce:ed:a9:c5:0d:ec:08:43:
df:1b:b2:e4:a4:1a:5e:55:15:37:9b:0d:cc:79:12:54:3e:01:
37:89:ae:53:f3:2a:66:c0:7d:5b:21:ff:dc:1d:71:86:7b:88:
b4:e4:d1:8e:d3:c0:34:8d:f2:33:1e:68:ad:86:e0:dc:4d:7e:
70:86:1e:96:6b:a4:33:31:11:8e:82:b7:ed:f7:c1:dc:6a:e3:
f3:13:ec:4c:35:04:4c:52:54:37:e7:3b:c8:6b:c6:00:15:a5:
9b:77:df:23:f0:fb:1c:a8:04:70:65:33:4a:dc:4c:3c:3f:1e:
5e:95:6f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:33 2026 by rpki-client