
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
File: UTbgDQPR84UAq2cpty7T1yzWoQU.mft (raw, json)
Hash identifier: i65pABRj8J4JeCt5Cey7GzZHKyharTiokbYx49jUFLY=
Subject key identifier: 31:F7:4D:32:A2:56:86:B9:32:E4:3E:60:FA:95:67:08:AD:31:54:13
Authority key identifier: 51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05
Certificate issuer: /CN=A919B3BC/serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
Certificate serial: 1EB1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
Manifest number: 1E99
Signing time: Tue 24 Mar 2026 15:59:21 +0000
Manifest this update: Tue 24 Mar 2026 15:59:20 +0000
Manifest next update: Tue 31 Mar 2026 15:59:20 +0000
Files and hashes: 1: UTbgDQPR84UAq2cpty7T1yzWoQU.crl (hash: OUO/v1DX1TwzqZ2X0fYJ3wlNLXmXuT48H7bD+kZFbf4=)
2: 03D29A521AD611F0BC67FC1CC4F9AE02.roa (hash: +XTRUVrSV5075aMr9L+PWUwss00Y7Wsa3jtDnMwf+RQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl
rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7857 (0x1eb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B3BC, serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
Validity
Not Before: Mar 24 15:59:20 2026 GMT
Not After : Mar 31 15:59:20 2026 GMT
Subject: CN=69c2b4d9-e22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:63:44:44:d0:97:0f:44:9a:8a:03:70:6d:c7:
90:6a:e5:62:fb:f7:50:9a:10:65:a7:18:e0:52:79:
92:14:97:a4:04:0f:08:46:79:a5:67:fe:d1:76:e0:
15:3a:eb:5f:5e:3c:af:57:03:00:04:89:cf:ad:72:
2c:8f:67:e8:30:f1:c9:a7:e0:d1:81:9f:f8:cf:51:
ce:7d:99:d4:a5:ab:2a:74:39:d6:1b:90:66:76:e6:
ed:3e:3a:98:ee:ce:c5:42:e9:2a:97:57:50:43:40:
0c:1a:cf:02:e8:9f:24:99:bb:c7:65:ca:12:68:83:
16:f3:df:75:14:52:d0:e8:1d:e4:dc:16:37:e8:01:
84:6b:c6:7c:9a:d5:87:e7:f1:fb:4a:a6:e8:aa:3f:
85:76:8c:0b:63:9c:85:9e:09:bb:c6:84:f3:78:b6:
dc:5b:81:b4:10:c9:82:67:46:8c:d1:9e:2d:68:6e:
fe:28:0f:dd:44:c2:e3:c2:5a:90:fc:7e:8f:31:97:
a5:8d:da:47:f6:f2:84:64:29:b2:11:dc:df:1f:89:
87:4f:29:f6:d5:45:6c:88:89:f5:20:f5:53:6b:d5:
53:9c:26:fb:73:ae:94:b3:34:b0:07:9c:1b:5d:d9:
14:ce:40:33:dc:33:fd:fb:90:b4:be:b9:0e:61:72:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F7:4D:32:A2:56:86:B9:32:E4:3E:60:FA:95:67:08:AD:31:54:13
X509v3 Authority Key Identifier:
keyid:51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:c8:b5:10:b6:01:2d:09:1c:2d:c0:28:5d:c5:52:dc:cf:65:
12:2c:59:2b:50:5e:4a:97:92:43:0d:d0:34:03:0f:0b:89:95:
58:77:b7:a3:b0:ad:4d:42:99:41:f8:ff:2d:a7:b7:39:1f:fd:
d8:ae:7e:c4:ec:f4:4e:43:cd:fe:c6:8d:a4:02:ce:9e:0a:a3:
f9:86:40:b6:10:59:76:98:44:41:d0:f1:84:c9:b0:6b:94:e3:
86:6b:b2:b7:00:40:66:c3:f3:ac:03:2f:aa:e8:f6:34:b2:9b:
bd:df:3a:3d:f2:5a:f1:cd:96:3f:b2:90:56:34:11:59:19:45:
39:46:bf:64:52:b3:da:f5:53:49:52:f6:33:a5:c5:c2:da:74:
b7:f6:1e:0c:87:c4:e9:91:a8:75:cc:fc:cd:71:09:af:05:b6:
e1:c9:24:5f:72:0e:c2:d3:6f:d8:98:fd:37:7e:f5:01:9f:c7:
a5:12:9f:57:9d:48:cc:31:8a:2b:7c:d3:2b:97:20:91:11:57:
e5:c3:2f:1d:60:24:d1:f2:5c:17:e4:0e:72:1d:ae:a9:ee:43:
41:08:60:2e:64:b1:11:c8:8e:b4:fa:04:c5:85:7f:f9:94:a6:
b2:29:30:54:29:10:c6:da:69:6c:eb:e4:ac:24:4e:71:44:e6:
fe:d1:11:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:05:15 2026 by rpki-client