
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
File: xUMJ3BErZYYnvTagMHLnXQYDZNM.mft (raw, json)
Hash identifier: G0Fj1KbsPcALKCFvjo/gYB2oYymFneUi/Q4BNv/4m6M=
Subject key identifier: B3:8C:DA:8B:3C:C9:FC:36:81:1A:27:57:29:4B:E8:FC:65:7B:39:23
Authority key identifier: C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3
Certificate issuer: /CN=A9199836/serialNumber=C54309DC112B658627BD36A03072E75D060364D3
Certificate serial: 052F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
Manifest number: 052A
Signing time: Sun 01 Mar 2026 00:08:42 +0000
Manifest this update: Sun 01 Mar 2026 00:08:42 +0000
Manifest next update: Sun 08 Mar 2026 00:08:42 +0000
Files and hashes: 1: xUMJ3BErZYYnvTagMHLnXQYDZNM.crl (hash: Yrx3ScVo/ACv563z4M3lt2ytJ2ZuvgNOqo4O31PRkzM=)
2: 029F318A366F11ECA773E263C4F9AE02.roa (hash: XUaIWvSjvHJx2WjE0nq5LCjXyTsCoEUciSF2lpWLzf8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl
rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1327 (0x52f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199836, serialNumber=C54309DC112B658627BD36A03072E75D060364D3
Validity
Not Before: Mar 1 00:08:42 2026 GMT
Not After : Mar 8 00:08:42 2026 GMT
Subject: CN=69a3838a-1853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:4b:26:93:bf:42:94:0f:56:01:ec:e4:ba:
21:f2:90:5e:cf:10:8d:9f:14:d4:5c:78:7b:f8:76:
3b:70:42:fc:f2:b6:f3:d5:f8:05:15:99:57:c3:ee:
b5:ef:9e:70:be:d6:42:0b:54:7f:d4:1f:d8:4f:54:
ec:78:0f:36:b7:f3:6a:84:71:e6:f5:e2:84:c1:31:
96:0d:43:f0:af:67:85:05:f4:9c:c0:4b:65:8f:10:
7c:76:b0:dc:cf:0e:ce:68:e0:42:6d:69:38:6f:8a:
f9:1e:1b:b0:ee:ae:79:6f:72:ce:bf:2f:9c:e3:68:
72:22:fe:9e:3a:56:ac:26:e2:1a:c4:ff:27:07:33:
aa:ec:15:f1:49:b9:2b:91:5b:60:dd:33:30:b9:e4:
91:b9:29:52:b6:1c:95:cd:e1:df:c0:94:4c:da:0f:
96:5c:c8:4b:9f:0f:c6:a0:f5:7e:e9:35:5f:45:16:
7e:53:9d:87:99:5d:52:e1:7c:52:05:b5:8a:4d:1a:
e5:45:bc:8a:60:9d:21:a1:48:66:b8:ff:25:05:59:
b9:d1:56:74:ee:e8:95:80:85:ec:8b:ac:c9:30:f2:
90:45:a0:c8:9b:86:83:0e:03:2c:6a:95:1a:d2:b7:
89:fa:e3:16:5b:fb:4e:f8:52:b7:f8:f1:b2:68:6f:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8C:DA:8B:3C:C9:FC:36:81:1A:27:57:29:4B:E8:FC:65:7B:39:23
X509v3 Authority Key Identifier:
keyid:C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:56:ec:85:ac:64:e0:d7:69:6e:e0:81:b8:c5:dc:f7:d3:74:
fe:54:35:75:8b:d0:d0:66:24:39:e8:6e:92:5b:d1:ed:8c:33:
29:be:89:31:7a:cd:0e:04:64:7e:a2:b9:32:74:f9:84:eb:fd:
c1:8b:11:4b:f3:57:df:8c:c3:13:ba:ca:1a:be:3a:56:c7:45:
94:ae:bf:53:d0:e8:6b:20:c7:59:5b:06:51:0f:9e:53:4c:f1:
1f:34:44:d1:b1:ac:f5:b4:f6:ed:84:16:1d:df:de:cc:ef:86:
cf:cb:93:0b:f5:c8:dc:d3:6a:b8:42:34:bd:78:21:38:32:ac:
3b:7d:dd:4e:62:33:fa:c9:4b:28:79:f7:e2:cb:42:c8:a2:6c:
e0:b8:9a:45:25:7d:a8:1b:18:a5:48:19:3d:af:37:a5:90:3e:
ce:e5:24:4e:82:d3:fc:eb:85:6c:d6:f5:d4:f6:b3:db:c0:4f:
e5:00:7e:6c:f9:be:a4:e0:b3:fd:93:06:d0:61:f1:0b:3a:71:
9c:2d:ef:75:7b:a5:af:22:32:d9:05:ee:cb:eb:68:da:03:f1:
bc:dc:68:fe:18:e8:e1:87:2c:bb:27:68:22:a2:f0:bd:81:f1:
43:f9:4f:34:83:b7:32:0f:15:95:7a:ad:1d:c6:ba:f1:a2:16:
26:ad:83:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:21 2026 by rpki-client