
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
File: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft (raw, json)
Hash identifier: rosoIQWyUe4l4xx3+EOkKy7zXEnL3YYJ1sITPBC3rhw=
Subject key identifier: 49:E0:1E:D7:FE:2C:2A:C8:B7:2F:DE:F7:CB:4A:49:1A:8E:2B:16:F7
Authority key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
Certificate issuer: /CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
Certificate serial: 0BC6
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
Manifest number: 0BBB
Signing time: Tue 24 Mar 2026 18:46:09 +0000
Manifest this update: Tue 24 Mar 2026 18:46:09 +0000
Manifest next update: Tue 31 Mar 2026 18:46:09 +0000
Files and hashes: 1: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl (hash: 9GSE4sIveyR/fKer2iUwg0yhdTy+FAEwBUD02JdChLA=)
2: BC60BC2A63F711EA8CBEB029C4F9AE02.roa (hash: cA+0IoAyCHHDkjIL9MPmk5AdVUHzu0n7NznpD3I+o6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl
rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3014 (0xbc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EF51, serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
Validity
Not Before: Mar 24 18:46:09 2026 GMT
Not After : Mar 31 18:46:09 2026 GMT
Subject: CN=69c2dbf1-0441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:86:6a:3d:03:24:29:77:70:c6:c9:d6:a8:c6:
c2:ca:8f:b8:aa:98:46:d7:28:3f:3a:fb:29:a7:0a:
64:49:75:e4:e6:fe:7d:f9:8d:00:16:4b:8e:59:82:
31:71:a7:09:0a:73:1c:24:cb:c0:39:8b:fa:57:fe:
a9:5e:eb:56:b3:d9:0d:81:77:87:52:a6:4d:5f:97:
49:a0:98:23:24:2d:47:07:05:90:65:7b:b8:45:9d:
23:db:86:72:b9:a3:70:09:10:d8:65:f0:4f:bf:cc:
09:e8:ca:6b:2e:4d:30:d0:eb:84:e8:a2:8e:e1:89:
e8:be:1a:5d:e9:ed:44:fc:8c:b7:0e:28:24:2d:25:
1d:40:d1:24:61:c1:10:19:3b:2b:7a:b4:90:47:61:
78:28:13:ff:f4:18:d7:e1:8a:42:3a:2b:63:71:41:
e3:72:d4:47:1e:a5:e4:3b:fa:5a:1f:ea:4b:57:e9:
2d:b7:68:78:19:b7:1f:92:5e:19:67:ec:06:f5:17:
f3:b7:5f:af:fb:be:6e:0d:a4:d5:53:3a:d5:37:eb:
41:72:76:9b:cb:f3:d0:bd:b0:de:61:f2:8b:88:ab:
67:d7:f4:b6:90:6a:a1:20:99:f6:e4:00:f8:07:24:
ac:fd:17:8b:81:f4:37:d8:f3:69:72:49:a8:a6:b9:
ee:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E0:1E:D7:FE:2C:2A:C8:B7:2F:DE:F7:CB:4A:49:1A:8E:2B:16:F7
X509v3 Authority Key Identifier:
keyid:52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:c5:2c:30:4c:a9:ae:91:6c:0b:c2:39:60:e4:64:39:04:07:
6f:9c:b1:2c:ee:ac:b6:24:b4:98:da:d6:d7:08:11:bb:1c:b3:
a7:67:a8:b0:f7:14:b0:ea:87:05:ba:e0:09:94:3f:a6:35:86:
7c:84:52:84:ae:7f:c0:a8:f3:60:0b:5c:c7:d7:b9:95:b3:b1:
37:09:17:a9:bc:1d:a1:43:c1:70:d0:1e:e3:22:59:f5:0f:2d:
4e:48:15:90:11:ec:6c:f1:59:8b:ca:58:2b:18:e9:d3:9a:a7:
f7:04:e9:3f:f5:3b:24:af:ba:bc:1b:80:2b:62:f9:26:d9:8c:
1f:c4:13:d3:3e:12:b6:45:6e:be:4e:48:b8:62:a5:42:2d:86:
db:e1:7f:ef:ae:79:b7:4c:d8:d3:89:c1:91:17:09:4c:17:49:
01:05:48:f8:61:70:26:0f:20:6e:3f:cc:b9:21:53:0e:3c:54:
56:d2:ce:96:e6:4c:40:da:6b:19:50:3c:96:00:ef:8e:26:06:
0b:06:d9:26:52:03:6a:eb:fe:b9:19:0a:af:a9:77:4d:58:1c:
5b:fa:b7:e6:aa:f8:27:a5:9d:8f:a0:ba:9c:dc:39:90:87:5b:
11:48:9a:4e:ce:9a:a0:41:0d:53:bd:70:5f:a3:60:17:ed:24:
8b:55:39:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVGNTExMTAvBgNVBAUTKDUyRDY4MEUwNDVEQ0U5OTA3ODlFMEQ3NzcyNjE3QzYw
QzM2RUQxOEUwHhcNMjYwMzI0MTg0NjA5WhcNMjYwMzMxMTg0NjA5WjAYMRYwFAYD
VQQDEw02OWMyZGJmMS0wNDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA84ZqPQMkKXdwxsnWqMbCyo+4qphG1yg/OvsppwpkSXXk5v59+Y0AFkuOWYIx
cacJCnMcJMvAOYv6V/6pXutWs9kNgXeHUqZNX5dJoJgjJC1HBwWQZXu4RZ0j24Zy
uaNwCRDYZfBPv8wJ6MprLk0w0OuE6KKO4Ynovhpd6e1E/Iy3DigkLSUdQNEkYcEQ
GTsrerSQR2F4KBP/9BjX4YpCOitjcUHjctRHHqXkO/paH+pLV+ktt2h4Gbcfkl4Z
Z+wG9Rfzt1+v+75uDaTVUzrVN+tBcnaby/PQvbDeYfKLiKtn1/S2kGqhIJn25AD4
BySs/ReLgfQ32PNpckmoprnuuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEngHtf+
LCrIty/e98tKSRqOKxb3MB8GA1UdIwQYMBaAFFLWgOBF3OmQeJ4Nd3JhfGDDbtGO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9CQTNDRDRBNjNE
ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9VdGFBNEVYYzZaQjRuZzEzY21GOFlNTnUw
WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1V0YUE0RVhjNlpCNG5nMTNjbUY4WU1OdTBZNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUY1MS9CQTNDRDRBNjNEODIxMUVBOUYyNjczNzBDNEY5QUUwMi9VdGFBNEVYYzZa
QjRuZzEzY21GOFlNTnUwWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQcUsMEyprpFsC8I5YORkOQQHb5yxLO6stiS0mNrW1wgRuxyzp2eosPcUsOqH
BbrgCZQ/pjWGfIRShK5/wKjzYAtcx9e5lbOxNwkXqbwdoUPBcNAe4yJZ9Q8tTkgV
kBHsbPFZi8pYKxjp05qn9wTpP/U7JK+6vBuAK2L5JtmMH8QT0z4StkVuvk5IuGKl
Qi2G2+F/7655t0zY04nBkRcJTBdJAQVI+GFwJg8gbj/MuSFTDjxUVtLOluZMQNpr
GVA8lgDvjiYGCwbZJlIDauv+uRkKr6l3TVgcW/q35qr4J6Wdj6C6nNw5kIdbEUia
Ts6aoEENU71wX6NgF+0ki1U5CQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:09 2026 by rpki-client