
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
File: UMP9EvajMVgZtSurzBmPsNv9QTo.mft (raw, json)
Hash identifier: lSLNgXszw7L1JJismRxL1mOxTAUH7KzYiwflrjIJse0=
Subject key identifier: 2B:AC:6E:0A:C8:D2:65:F2:DE:61:CB:E7:72:3F:2C:E0:95:4A:3E:53
Authority key identifier: 50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A
Certificate issuer: /CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A
Certificate serial: 048D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
Manifest number: 0481
Signing time: Sat 18 Apr 2026 23:58:42 +0000
Manifest this update: Sat 18 Apr 2026 23:58:41 +0000
Manifest next update: Sat 25 Apr 2026 23:58:41 +0000
Files and hashes: 1: UMP9EvajMVgZtSurzBmPsNv9QTo.crl (hash: dmPkLplS8+6sHc7JwfiowSZhaHJsUO2mBbW8xK/kMwA=)
2: 296C190484AD11EC9C3F837CC4F9AE02.roa (hash: lbtzXOv7fCZ9ldssOYWEkCJAJ4leYPGz3mQ8urYvDU8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl
rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 23:58:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1165 (0x48d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE616, serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A
Validity
Not Before: Apr 18 23:58:41 2026 GMT
Not After : Apr 25 23:58:41 2026 GMT
Subject: CN=69e41ab2-ae56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:bf:02:26:6a:c7:81:6d:4d:3c:be:2b:dc:
c9:c3:5f:78:de:4f:e9:7c:e4:41:20:1d:23:37:c9:
b8:7d:b9:e4:61:17:a4:be:50:75:c1:9b:ea:9b:16:
e0:b4:73:2d:f2:7f:94:64:ef:c7:c3:c6:27:df:46:
99:05:56:99:fc:89:21:14:21:1a:06:f6:d1:4c:2f:
c0:a2:5b:4a:fb:96:fa:f3:54:42:55:d4:91:43:61:
f3:97:63:9e:80:37:53:73:8d:08:1a:89:12:ae:24:
f8:54:42:19:ad:e4:27:54:7b:63:32:15:c2:33:49:
a6:63:d7:04:b8:0a:45:0c:95:10:f7:e3:af:62:4c:
b6:dc:72:7e:39:00:6b:13:08:7c:15:e5:ef:b6:4f:
be:2f:c9:98:e2:50:a7:bb:e4:cf:a8:4d:13:cc:15:
27:f3:c9:a6:a3:97:87:f5:59:1a:8c:f8:2b:27:7f:
66:31:c0:8d:ea:5b:25:20:ac:d5:0c:ca:ad:9e:ae:
f0:97:8e:c6:93:8b:65:8c:9b:65:b8:15:5d:d6:77:
2e:d0:81:52:f2:66:7f:b4:a7:af:56:95:74:11:2a:
96:ef:5c:a8:87:0e:e9:9f:5b:8c:54:f7:55:fd:9e:
08:3c:b1:96:14:ec:f2:94:e5:1a:e9:98:0d:ee:38:
12:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AC:6E:0A:C8:D2:65:F2:DE:61:CB:E7:72:3F:2C:E0:95:4A:3E:53
X509v3 Authority Key Identifier:
keyid:50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cf:18:eb:38:8a:68:0c:f0:eb:9a:45:50:a6:c9:a8:0c:85:
7e:37:fb:fc:ca:3d:d7:b2:b5:fb:38:29:46:ff:58:4d:06:b6:
49:e8:7a:03:d6:b3:e7:39:09:eb:a5:5b:60:bd:0c:9e:3e:9f:
a2:54:5f:9d:b9:b4:8b:2b:b8:8d:2f:94:fc:9d:9c:1d:a1:93:
37:7b:49:14:df:ce:98:8a:e3:64:4a:f4:00:c6:63:bf:9b:7f:
4d:e8:d6:a7:92:55:05:59:10:de:60:c7:60:9c:e3:10:bf:72:
19:73:89:ac:0e:6a:c1:23:f8:2d:3b:b4:1f:14:76:78:20:c4:
d2:9c:06:ac:2b:65:d4:89:45:ee:0a:91:0c:95:15:67:a9:76:
90:e4:2d:a2:2f:80:82:83:09:55:cf:07:88:44:6c:e0:0f:85:
79:77:69:fc:79:69:03:78:73:fa:c6:b4:d9:2c:d3:f2:55:2e:
fb:d7:5e:49:54:69:ef:49:16:6a:36:de:89:d5:de:b0:f8:6b:
4f:b6:a5:54:c6:dc:49:4e:2b:86:66:2a:13:be:38:c4:92:2a:
a7:eb:16:94:c7:b4:50:37:09:e5:22:d5:36:6c:31:9a:60:ea:
58:79:2e:d4:6b:81:df:25:a5:45:eb:33:1c:bf:22:97:49:f5:
bd:89:ce:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:20:46 2026 by rpki-client