
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
File: utY-wFoDGPl_MVby4gWcYZPOOAo.mft (raw, json)
Hash identifier: 5s63rRU9HXk6vXPLPlUmsUVf3DUUPEjlQn+DkObgzF4=
Subject key identifier: 46:94:12:CE:77:69:C5:B3:A4:DC:E6:27:EF:C3:5A:30:1D:D4:87:BB
Authority key identifier: BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A
Certificate issuer: /CN=A91D5A49/serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A
Certificate serial: 0293
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
Manifest number: 0293
Signing time: Mon 11 May 2026 01:40:51 +0000
Manifest this update: Mon 11 May 2026 01:40:51 +0000
Manifest next update: Mon 18 May 2026 01:40:51 +0000
Files and hashes: 1: utY-wFoDGPl_MVby4gWcYZPOOAo.crl (hash: PbHM7qAlOVotVbW4hnAXVTaxGdxw79TQZLTLoWSEUdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl
rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 01:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659 (0x293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5A49, serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A
Validity
Not Before: May 11 01:40:51 2026 GMT
Not After : May 18 01:40:51 2026 GMT
Subject: CN=6a0133a3-d5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2a:83:f1:84:d0:ae:36:43:88:a5:e5:d7:f2:
26:b7:e8:1e:fb:14:23:b1:f1:d3:10:30:19:3f:af:
a3:ed:a8:67:e3:1e:1b:42:1c:72:f7:0f:19:86:82:
0f:ed:98:db:91:d7:db:76:e8:2f:5d:e1:c6:52:dc:
f7:88:7c:29:25:12:69:ce:66:5a:31:72:7e:24:e8:
2a:b2:4c:5a:55:49:13:c2:56:e7:d8:45:c6:6f:64:
f1:cf:eb:52:c8:04:94:5e:5a:b2:8b:76:14:cf:60:
54:35:f1:a5:e3:d4:75:9f:f6:c6:65:8c:6e:ff:62:
96:af:bd:af:c3:e5:77:8e:0c:6d:55:7c:95:ff:e2:
a0:51:28:b5:84:76:e3:c0:27:cb:64:da:7f:58:84:
ca:9d:c8:38:da:86:a9:06:53:87:34:7f:95:3b:70:
fe:d6:f1:2e:75:3c:ea:18:eb:65:ae:ff:b4:90:40:
38:73:c3:e8:4e:f9:87:76:4d:51:e0:18:9e:b2:e8:
ec:24:7b:e1:38:d6:ed:58:ba:39:8a:c4:bb:d9:f3:
f3:45:46:8c:98:16:87:a5:c6:89:31:4d:53:30:d3:
71:d4:e2:9a:65:2c:83:95:41:e2:fe:34:3b:56:b8:
c3:44:7e:74:50:9a:9d:75:b5:fe:50:3b:0e:75:b5:
a7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:94:12:CE:77:69:C5:B3:A4:DC:E6:27:EF:C3:5A:30:1D:D4:87:BB
X509v3 Authority Key Identifier:
keyid:BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:1f:cb:87:b6:cc:31:a8:47:1a:50:23:79:11:e0:14:56:84:
df:8c:f1:39:e0:5a:f1:28:aa:0f:3a:00:0a:4c:50:28:fb:f5:
d4:1d:ba:e2:db:a0:58:5d:2c:03:b1:cd:fe:af:28:66:ee:99:
e3:ab:32:2c:a4:22:09:6f:9d:7f:eb:08:fd:ed:61:74:95:21:
ea:b6:c6:89:a7:15:1d:67:6f:fd:ed:af:0a:52:30:ec:4e:68:
28:0d:cd:08:16:b1:25:05:29:b0:76:08:70:a5:d4:cb:93:06:
e1:d2:06:17:f2:30:7e:b7:4b:13:9b:0d:15:e2:84:5c:bc:89:
a2:df:8e:30:63:d4:f3:1f:79:c6:7e:28:d9:55:eb:b5:94:27:
a5:0b:56:59:45:53:fc:a0:73:03:62:5d:97:5c:4d:88:f0:23:
6f:bd:56:8a:24:5d:b9:75:47:1d:7e:93:74:29:28:b5:c1:0c:
30:21:f5:47:94:e5:c0:7f:0e:3d:19:b5:1b:72:94:26:03:b7:
52:e6:93:53:a3:a0:a0:f2:8e:59:3f:c5:36:61:36:49:74:3e:
4b:a5:20:f9:96:05:60:71:aa:a1:b1:c9:1d:5c:96:02:9e:d9:
fb:1e:ec:37:67:ac:70:18:56:97:84:d1:c3:0b:ea:c9:54:eb:
59:77:f5:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDVBNDkxMTAvBgNVBAUTKEJBRDYzRUMwNUEwMzE4Rjk3RjMxNTZGMkUyMDU5QzYx
OTNDRTM4MEEwHhcNMjYwNTExMDE0MDUxWhcNMjYwNTE4MDE0MDUxWjAYMRYwFAYD
VQQDEw02YTAxMzNhMy1kNWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmCqD8YTQrjZDiKXl1/Imt+ge+xQjsfHTEDAZP6+j7ahn4x4bQhxy9w8ZhoIP
7ZjbkdfbdugvXeHGUtz3iHwpJRJpzmZaMXJ+JOgqskxaVUkTwlbn2EXGb2Txz+tS
yASUXlqyi3YUz2BUNfGl49R1n/bGZYxu/2KWr72vw+V3jgxtVXyV/+KgUSi1hHbj
wCfLZNp/WITKncg42oapBlOHNH+VO3D+1vEudTzqGOtlrv+0kEA4c8PoTvmHdk1R
4BiesujsJHvhONbtWLo5isS72fPzRUaMmBaHpcaJMU1TMNNx1OKaZSyDlUHi/jQ7
VrjDRH50UJqddbX+UDsOdbWnmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEaUEs53
acWzpNzmJ+/DWjAd1Ie7MB8GA1UdIwQYMBaAFLrWPsBaAxj5fzFW8uIFnGGTzjgK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUE0OS9GOTEzMURBNjU4
QTYxMUVEQTJCQjIwNjBDNEY5QUUwMi91dFktd0ZvREdQbF9NVmJ5NGdXY1laUE9P
QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V0WS13Rm9ER1BsX01WYnk0Z1djWVpQT09Bby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NUE0OS9GOTEzMURBNjU4QTYxMUVEQTJCQjIwNjBDNEY5QUUwMi91dFktd0ZvREdQ
bF9NVmJ5NGdXY1laUE9PQW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiB/Lh7bMMahHGlAjeRHgFFaE34zxOeBa8SiqDzoACkxQKPv11B264tugWF0s
A7HN/q8oZu6Z46syLKQiCW+df+sI/e1hdJUh6rbGiacVHWdv/e2vClIw7E5oKA3N
CBaxJQUpsHYIcKXUy5MG4dIGF/IwfrdLE5sNFeKEXLyJot+OMGPU8x95xn4o2VXr
tZQnpQtWWUVT/KBzA2Jdl1xNiPAjb71WiiRduXVHHX6TdCkotcEMMCH1R5TlwH8O
PRm1G3KUJgO3UuaTU6OgoPKOWT/FNmE2SXQ+S6Ug+ZYFYHGqobHJHVyWAp7Z+x7s
N2escBhWl4TRwwvqyVTrWXf16w==
-----END CERTIFICATE-----
Generated at Wed May 13 01:33:54 2026 by rpki-client