
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
File: utY-wFoDGPl_MVby4gWcYZPOOAo.mft (raw, json)
Hash identifier: oF3NyvD0XJ892bBB1who3DXfsaWhU3ONVuQ8QHiV7wQ=
Subject key identifier: 6D:DE:FC:B1:BC:5F:3B:FE:92:59:2A:CD:A2:F4:6D:A8:B9:2A:30:31
Authority key identifier: BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A
Certificate issuer: /CN=A91D5A49/serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A
Certificate serial: 02D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
Manifest number: 02D8
Signing time: Wed 23 Sep 2026 00:54:32 +0000
Manifest this update: Wed 23 Sep 2026 00:54:31 +0000
Manifest next update: Wed 30 Sep 2026 00:54:31 +0000
Files and hashes: 1: utY-wFoDGPl_MVby4gWcYZPOOAo.crl (hash: UXl7Cjo8OPKfFlid5k/Q1iz9Ykyjf2J5sj5Scy+dA10=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl
rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 728 (0x2d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5A49, serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A
Validity
Not Before: Sep 23 00:54:31 2026 GMT
Not After : Sep 30 00:54:31 2026 GMT
Subject: CN=6ab32347-991b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:40:3a:c6:f3:32:f3:e5:12:6d:c6:68:ed:83:
c8:1b:54:d7:04:3b:5d:98:57:ff:c7:67:43:6d:ea:
73:b2:0b:f8:92:14:ce:f8:39:9b:1a:1d:ca:ab:09:
c9:2d:34:29:39:ce:81:de:3a:8a:2f:1a:62:77:38:
39:f0:54:08:b4:56:a4:70:e2:1b:a8:50:c7:3c:a9:
95:74:69:14:a3:ce:b1:e4:21:90:53:2d:ae:39:5f:
31:6e:28:41:a6:e3:e8:cb:1f:33:be:d4:02:ce:1d:
0e:47:b7:05:2f:49:69:65:64:ea:92:4e:fd:21:fa:
c8:79:68:94:79:6b:e6:87:fe:84:f0:48:ad:fd:2c:
67:cc:38:08:c2:f3:04:5a:f5:db:fd:02:2d:0d:37:
1d:e6:a2:12:87:11:11:80:97:73:da:79:db:f5:1c:
53:1d:ab:2b:93:eb:76:2e:c4:f8:70:84:40:3c:ee:
d5:49:3a:23:14:44:6f:c2:f4:1a:eb:e1:c5:75:02:
8b:22:00:32:8f:9d:6e:34:31:0a:59:ec:36:a6:f8:
b9:41:eb:c4:58:fd:d6:fa:fc:db:59:ed:60:0e:9a:
7f:ef:c7:64:9e:ce:af:a7:d3:6d:b7:67:07:d3:47:
5c:b3:0f:c0:82:5b:b4:5d:b8:49:2e:cf:f5:7c:2a:
65:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DE:FC:B1:BC:5F:3B:FE:92:59:2A:CD:A2:F4:6D:A8:B9:2A:30:31
X509v3 Authority Key Identifier:
keyid:BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:17:c7:e4:72:29:19:ed:26:dd:dc:a0:6a:92:5c:d5:d9:9e:
52:54:db:da:1a:73:28:c5:c4:c8:c7:04:99:ea:85:84:97:d0:
63:da:8d:50:41:46:d5:6a:5c:b4:83:f5:d5:66:79:ef:f7:09:
f2:d3:44:88:4c:b8:07:ff:8f:89:ad:95:66:9a:0f:04:ae:3b:
34:48:6f:a8:5e:e1:44:cd:93:ec:c0:9c:01:76:73:b3:fc:87:
91:fd:ca:1c:d9:f1:3e:e8:62:73:e0:f2:db:24:87:99:94:db:
c6:25:5c:aa:91:7d:fd:78:2a:d7:1c:3a:0e:f4:99:44:14:19:
44:9b:22:7d:a0:48:7f:23:ce:73:64:e2:88:58:97:1d:43:1e:
e5:a0:33:22:cd:06:4e:4a:c0:1e:fb:dc:25:6f:17:78:98:58:
b2:4c:70:ee:0b:00:1a:ab:48:a8:e7:9f:52:69:22:45:b0:92:
e3:9a:37:c0:30:07:23:5b:b9:74:37:c7:f2:ab:19:55:ea:9f:
00:4a:aa:15:79:74:2f:c6:69:83:f6:ab:31:53:17:13:15:ec:
5d:83:11:9f:8d:fc:cc:74:09:22:ad:cb:01:71:5a:8e:b6:17:
c4:ab:57:dd:e5:29:6f:85:bf:a2:cf:58:55:9f:4a:04:73:92:
35:d9:27:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:01:45 2026 by rpki-client