
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
File: UTbgDQPR84UAq2cpty7T1yzWoQU.mft (raw, json)
Hash identifier: w2fEKZHmgaS59mNoHZQS+h4nk4CMXuBpbMk5BNzdLMA=
Subject key identifier: 83:74:DA:62:10:97:2E:55:78:9E:F9:18:A5:AC:0C:53:2F:03:19:39
Authority key identifier: 51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05
Certificate issuer: /CN=A919B3BC/serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
Certificate serial: 1EEE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
Manifest number: 1ED6
Signing time: Wed 22 Jul 2026 16:07:42 +0000
Manifest this update: Wed 22 Jul 2026 16:07:41 +0000
Manifest next update: Wed 29 Jul 2026 16:07:41 +0000
Files and hashes: 1: UTbgDQPR84UAq2cpty7T1yzWoQU.crl (hash: KEC1FpMn0ZeO615F2iV1jziLxfCbNqG+VShDg9h4dAw=)
2: 03D29A521AD611F0BC67FC1CC4F9AE02.roa (hash: +XTRUVrSV5075aMr9L+PWUwss00Y7Wsa3jtDnMwf+RQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl
rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7918 (0x1eee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B3BC, serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
Validity
Not Before: Jul 22 16:07:41 2026 GMT
Not After : Jul 29 16:07:41 2026 GMT
Subject: CN=6a60eacd-925a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fa:72:99:45:13:8d:aa:d4:dd:97:56:3f:68:
3b:12:e8:30:97:c0:49:09:92:26:af:8a:cb:51:20:
80:18:d4:8e:5a:a1:4a:38:b8:aa:be:90:43:fc:4d:
a5:df:fa:34:1e:c4:40:3f:c5:67:70:fe:d0:d8:46:
9e:e6:1f:ae:6d:f3:1f:d6:45:5c:11:35:7f:67:7d:
c9:a7:0e:bd:20:47:97:89:9a:a4:cf:54:9f:ae:d7:
ac:0a:ad:2d:77:60:8b:5a:b4:28:3c:c5:24:8b:98:
2d:af:38:24:4a:23:a1:cf:54:30:fb:91:c2:74:4d:
c0:74:f3:63:15:63:8b:7d:eb:f6:ce:67:ef:76:53:
35:3f:ae:b8:0d:1e:f6:fa:9f:9d:63:df:6f:35:67:
15:eb:4d:3b:c9:77:2f:a3:e4:f0:c0:3f:10:22:9c:
52:5a:4a:03:83:d9:39:f6:57:04:d4:ef:65:a1:f6:
70:f2:35:90:69:e4:9a:03:51:ae:dc:8d:ca:74:0a:
49:24:6e:fa:12:04:46:62:53:4a:45:4a:74:9b:bd:
60:b7:80:34:fe:7f:96:90:ad:a4:18:a5:8e:3c:cc:
36:90:91:e7:a2:0a:28:77:00:99:11:95:03:64:b6:
09:09:aa:61:ad:61:18:d7:3a:2b:d6:e8:b8:c6:93:
46:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:74:DA:62:10:97:2E:55:78:9E:F9:18:A5:AC:0C:53:2F:03:19:39
X509v3 Authority Key Identifier:
keyid:51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a8:84:0d:07:a5:eb:e6:88:ad:a1:c2:37:46:b5:10:e8:8a:
15:6d:5f:6b:c8:5d:55:e3:81:ed:db:4a:35:24:c1:27:f7:6e:
b7:dc:e5:f2:94:8d:df:2b:cf:b6:57:60:b1:16:cb:b1:bf:ff:
de:a5:cb:8b:71:cf:96:ee:ed:ab:a8:91:ce:ed:2b:8b:05:49:
b2:ea:c4:d9:91:10:e3:5b:bb:17:94:a4:90:bd:27:8f:39:28:
dd:ee:8c:a9:f4:63:62:91:9f:5d:5e:c3:28:32:14:4e:28:52:
20:1f:ab:63:81:3b:72:0c:a1:84:c9:79:bb:71:42:6f:35:be:
78:2a:29:38:6e:b7:07:ea:03:a6:df:bd:be:f3:f2:68:5b:7c:
3a:1f:62:7a:ba:7c:8f:48:34:5f:c1:a6:6b:15:81:0f:e4:bf:
30:8b:50:42:6e:71:80:3d:e6:71:de:c3:71:5c:0e:51:a8:bb:
a1:14:6a:dd:29:cb:7f:40:e2:5d:ba:c1:61:49:df:02:d5:17:
7f:85:35:7f:bf:e5:b2:a4:d6:dc:61:44:f2:db:5a:85:89:78:
63:1a:18:d4:24:82:b9:fa:26:4c:24:63:42:0a:23:f1:1e:8d:
4c:66:14:8c:e5:0a:c6:6f:f7:ef:e0:a8:10:6a:88:09:9f:49:
79:bd:70:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUIzQkMxMTAvBgNVBAUTKDUxMzZFMDBEMDNEMUYzODUwMEFCNjcyOUI3MkVEM0Q3
MkNENkExMDUwHhcNMjYwNzIyMTYwNzQxWhcNMjYwNzI5MTYwNzQxWjAYMRYwFAYD
VQQDEw02YTYwZWFjZC05MjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlPpymUUTjarU3ZdWP2g7Eugwl8BJCZImr4rLUSCAGNSOWqFKOLiqvpBD/E2l
3/o0HsRAP8VncP7Q2Eae5h+ubfMf1kVcETV/Z33Jpw69IEeXiZqkz1SfrtesCq0t
d2CLWrQoPMUki5gtrzgkSiOhz1Qw+5HCdE3AdPNjFWOLfev2zmfvdlM1P664DR72
+p+dY99vNWcV6007yXcvo+TwwD8QIpxSWkoDg9k59lcE1O9lofZw8jWQaeSaA1Gu
3I3KdApJJG76EgRGYlNKRUp0m71gt4A0/n+WkK2kGKWOPMw2kJHnogoodwCZEZUD
ZLYJCaphrWEY1zor1ui4xpNGhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIN02mIQ
ly5VeJ75GKWsDFMvAxk5MB8GA1UdIwQYMBaAFFE24A0D0fOFAKtnKbcu09cs1qEF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjNCQy8zMDQxOTdFODhG
OUIxMUU2QkVDNUNCMjVDNEY5QUUwMi9VVGJnRFFQUjg0VUFxMmNwdHk3VDF5eldv
UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VUYmdEUVBSODRVQXEyY3B0eTdUMXl6V29RVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QjNCQy8zMDQxOTdFODhGOUIxMUU2QkVDNUNCMjVDNEY5QUUwMi9VVGJnRFFQUjg0
VUFxMmNwdHk3VDF5eldvUVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATqiEDQel6+aIraHCN0a1EOiKFW1fa8hdVeOB7dtKNSTBJ/dut9zl8pSN3yvP
tldgsRbLsb//3qXLi3HPlu7tq6iRzu0riwVJsurE2ZEQ41u7F5SkkL0njzko3e6M
qfRjYpGfXV7DKDIUTihSIB+rY4E7cgyhhMl5u3FCbzW+eCopOG63B+oDpt+9vvPy
aFt8Oh9ierp8j0g0X8GmaxWBD+S/MItQQm5xgD3mcd7DcVwOUai7oRRq3SnLf0Di
XbrBYUnfAtUXf4U1f7/lsqTW3GFE8ttahYl4YxoY1CSCufomTCRjQgoj8R6NTGYU
jOUKxm/37+CoEGqICZ9Jeb1wkw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:32 2026 by rpki-client