
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
File: uRM0fmudd6kbsHSCrkXNdBFrAi0.mft (raw, json)
Hash identifier: eJy5wRB8lNaV6tut9ErqT6xcA8O3X2EOxgV0UVb8i7Q=
Subject key identifier: 93:0C:B8:0D:13:55:AB:69:94:63:6D:7C:93:82:37:7A:9B:37:70:E9
Authority key identifier: B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D
Certificate issuer: /CN=A919FBF3/serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
Manifest number: 7B
Signing time: Mon 27 Jul 2026 10:03:02 +0000
Manifest this update: Mon 27 Jul 2026 10:03:01 +0000
Manifest next update: Mon 03 Aug 2026 10:03:01 +0000
Files and hashes: 1: uRM0fmudd6kbsHSCrkXNdBFrAi0.crl (hash: lKidyvSgzRz6uG99UFU5It+1Ai1jyQKfI8mRJVqS+C8=)
2: BDCEEAE6843411F183C1FD4067A30FBC.roa (hash: UPATNGlHXmJqHIJuyFnrs3+A/CO0YHg7jQZSNo968UQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl
rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FBF3, serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
Validity
Not Before: Jul 27 10:03:01 2026 GMT
Not After : Aug 3 10:03:01 2026 GMT
Subject: CN=6a672cd6-476f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d0:63:01:b7:d5:ee:ea:6b:11:9f:a4:26:c2:
cb:76:85:1f:38:54:b4:fe:9d:bf:36:64:bc:4a:71:
c7:f1:df:8b:1a:ac:5d:8d:06:ef:51:97:d3:3d:63:
03:bf:9a:76:55:cd:94:c6:80:c6:42:70:57:a8:63:
c7:e6:44:2a:18:40:37:e9:f7:2e:6a:83:df:ac:68:
9d:d9:46:ec:52:6d:55:28:d8:04:04:f2:d0:25:2c:
31:e2:a6:fe:df:c5:28:3c:7e:38:3c:56:cf:d3:e2:
6c:1b:be:ec:4f:eb:48:63:41:98:12:3b:81:be:d5:
f1:f6:02:8e:44:8e:db:2e:d5:03:1f:62:26:ba:5d:
0c:5d:9c:24:4c:aa:e3:9d:af:3c:f4:cd:d0:94:c9:
c0:f3:a1:6d:ee:75:dd:8d:8e:45:0a:78:eb:f3:68:
0a:ea:5f:1a:04:d7:14:53:e0:01:65:c8:69:4e:4f:
d6:5f:6f:70:0a:21:31:a9:74:00:3c:44:1b:97:22:
65:e7:a3:e6:da:73:45:69:75:f3:b1:e1:01:40:f9:
b9:16:d7:f7:b4:82:e1:75:5f:2b:29:a0:a4:83:98:
37:b9:78:ad:ef:1d:5a:bd:9f:d5:a4:a3:06:9b:6e:
48:de:77:88:45:d7:e8:a5:0a:a2:c1:35:8b:c5:f4:
2e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0C:B8:0D:13:55:AB:69:94:63:6D:7C:93:82:37:7A:9B:37:70:E9
X509v3 Authority Key Identifier:
keyid:B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:e5:fe:df:46:29:34:78:2c:da:bc:ed:27:48:d3:08:df:fe:
b5:ab:f9:d5:ff:16:e0:03:98:3d:7c:3d:3e:7a:2f:32:b0:e0:
1d:e4:c5:99:8a:a4:d9:ec:3f:ec:2e:1f:c1:81:b8:b6:b1:7f:
cc:4d:fd:1e:ab:56:76:f4:4f:d3:bb:a5:33:f7:51:7e:4d:25:
c8:d0:7f:c8:2f:fc:c3:33:66:9b:de:f9:ac:c8:9a:7a:b2:6e:
19:31:ea:ce:e4:6f:60:25:4c:d3:33:49:6b:f7:6e:b8:4c:97:
d3:a2:59:31:8d:6d:14:b4:22:5a:3e:ea:69:42:d9:97:13:07:
80:ea:a6:cc:b1:21:5f:15:5b:c7:33:31:80:f9:ee:0a:7e:47:
73:81:eb:86:01:b6:1f:db:22:2f:d6:6d:bf:92:50:87:b0:34:
6b:f3:bf:30:a2:20:53:f4:70:52:f8:81:f3:c2:cf:ed:b3:ac:
cc:4b:c0:5e:5d:94:0f:ca:9d:cc:70:1a:b6:7c:f9:5e:36:ab:
0e:ee:f8:8e:d1:08:1b:20:54:5f:2e:9d:9e:80:68:08:b1:b3:
d3:af:57:50:fa:80:46:83:a4:73:4a:22:b7:35:38:e7:31:b5:
ca:5f:9c:c2:79:c1:de:fa:bd:a3:63:09:f2:2e:ea:c1:1e:f6:
80:74:67:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:16 2026 by rpki-client