
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft
File: uMGYUq7H2lGkUL59p9lYc77eNzQ.mft (raw, json)
Hash identifier: Xj6cYta88gDE4AIQbKIy1n94pPGd7Uqc9yDDlO+9Wv0=
Subject key identifier: A8:4D:EE:46:15:AE:9B:48:4D:C3:54:8F:F1:0A:13:69:1D:C7:56:F2
Authority key identifier: B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34
Certificate issuer: /CN=A917C78E/serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734
Certificate serial: 017E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft
Manifest number: 017A
Signing time: Tue 13 Oct 2026 05:19:49 +0000
Manifest this update: Tue 13 Oct 2026 05:19:49 +0000
Manifest next update: Tue 20 Oct 2026 05:19:49 +0000
Files and hashes: 1: uMGYUq7H2lGkUL59p9lYc77eNzQ.crl (hash: 0niNqVXa7RjQU/AIWXPSrcgDtIqeq/z/Zg/MDGHqekI=)
2: 91F29F5E86DD11EFB3D7A929C4F9AE02.roa (hash: NaEScBIeGfqeqtY23FBVtMrm6wm6IYSTw8AJnU7Al0E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl
rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 05:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C78E, serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734
Validity
Not Before: Oct 13 05:19:49 2026 GMT
Not After : Oct 20 05:19:49 2026 GMT
Subject: CN=6acdbf75-c72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:b1:41:06:c7:bb:d8:3e:bc:75:88:71:92:
8f:13:c9:9c:87:94:6c:f3:2d:b9:f1:cf:ce:9a:97:
f1:cb:51:4c:c2:ae:b3:a0:14:98:c6:e5:ea:4d:69:
6c:b7:eb:52:c5:f8:f7:6a:79:e2:90:98:46:b1:e7:
26:b4:0b:2e:01:6f:6c:0c:f2:e9:25:25:9f:bf:04:
f2:29:62:14:12:28:aa:19:a7:30:9a:52:23:7f:0b:
b6:3b:25:2a:ec:4b:d5:74:0a:6f:9a:c7:f0:f4:a9:
73:91:e6:d8:71:3b:3b:94:a3:95:d2:36:3d:35:ca:
42:70:69:2b:39:6f:00:f0:4e:b4:7b:14:52:85:44:
6d:01:4c:81:26:2d:f4:1e:53:ff:4c:17:d3:64:e6:
51:68:4a:5d:f3:80:08:f7:89:a7:99:4f:37:82:4d:
29:90:46:74:ad:e3:55:bd:c0:06:20:f2:8f:9c:81:
41:7a:70:0f:b9:45:3c:0e:2e:63:b5:3f:f0:6b:12:
48:51:e3:7e:f7:b9:b1:76:db:34:85:3e:65:3f:d4:
b3:4c:68:0f:82:89:96:6b:ef:ce:5d:a7:e7:e8:1d:
bf:4d:1c:d9:bb:5b:45:99:bd:33:d1:76:0e:3a:d3:
d8:45:26:33:63:db:ad:48:06:3d:5c:97:b2:32:a2:
34:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4D:EE:46:15:AE:9B:48:4D:C3:54:8F:F1:0A:13:69:1D:C7:56:F2
X509v3 Authority Key Identifier:
keyid:B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:d1:35:4a:d7:a2:c6:5d:31:9b:41:f7:94:bd:d6:10:c3:9b:
47:2a:b2:7a:9e:90:45:7d:84:b8:c5:64:b1:77:c7:5a:1a:b5:
b2:81:06:18:ab:be:52:42:ed:ca:59:c5:40:92:cd:9d:5e:64:
0a:19:dd:b1:1c:67:89:8c:53:58:c1:1a:bd:9f:79:43:0b:fa:
15:67:f3:87:79:e0:b7:24:c1:de:f8:94:6c:a6:7b:c1:61:13:
52:97:ad:c1:66:95:ea:ea:6b:87:ba:d3:3d:a6:92:5a:d0:a2:
c8:42:41:2b:e5:a0:33:e1:01:a4:03:99:a4:6c:77:24:3c:ad:
ba:65:23:6a:64:15:b9:4f:a7:dc:92:c8:c8:d3:3a:04:5b:c8:
e2:4b:35:36:e9:bf:84:d6:d9:e1:51:a3:ab:bc:25:d2:1c:8e:
08:a0:98:b4:78:6b:b6:d5:7a:ec:fc:70:e0:e8:b4:93:34:43:
ea:89:11:25:f6:51:5d:b9:42:84:9c:75:99:a2:f7:24:f3:3b:
0d:ed:7a:76:c0:b4:ea:b3:3a:ca:19:4e:08:37:2e:82:e1:0e:
e7:ea:81:39:1f:87:cb:8b:5e:d7:ab:9a:8b:ad:d3:50:ce:26:
df:96:33:e3:32:28:7c:cd:77:74:e8:7f:88:b4:b3:7a:80:50:
aa:b1:56:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:33:44 2026 by rpki-client