
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
File: UT3TCM11FCJ69R2AXlVApqn10zk.mft (raw, json)
Hash identifier: tCIHmZ3JTt8sfvtvLkFya6gm3EfQ8AUDsvJkx9I/yqY=
Subject key identifier: 96:67:44:E9:46:E7:D5:74:79:B3:A3:4C:C8:5E:9A:C7:0E:43:DF:65
Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
Certificate issuer: /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Certificate serial: 109B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
Manifest number: 1091
Signing time: Tue 12 May 2026 15:42:41 +0000
Manifest this update: Tue 12 May 2026 15:42:41 +0000
Manifest next update: Tue 19 May 2026 15:42:41 +0000
Files and hashes: 1: UT3TCM11FCJ69R2AXlVApqn10zk.crl (hash: lsvy86oo2RU3foMQXRxLhbliJ4Xy6FLbt/L51NX8/Is=)
2: 8BCB105015EA11EC86834E2FC4F9AE02.roa (hash: mHPPM3GX+02Dm30uq1wseLE1/5qkA4HH/6sTSHF4ag8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4251 (0x109b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8119, serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Validity
Not Before: May 12 15:42:41 2026 GMT
Not After : May 19 15:42:41 2026 GMT
Subject: CN=6a034a71-136a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a7:fe:76:ba:41:04:0b:81:42:fb:9f:b2:b2:
0f:87:47:c6:31:24:26:c5:50:77:09:ad:27:e4:00:
99:e6:31:9a:26:c4:d2:4e:0c:8f:bb:f2:f3:25:b3:
37:45:e3:d2:b1:69:c4:75:a8:fb:1a:4b:90:59:8e:
3e:47:9d:ad:02:dd:f2:70:be:8a:e5:95:0f:a3:e3:
51:84:21:31:19:3f:a1:de:a8:49:1f:99:d4:cf:c0:
83:42:4a:06:1b:63:ff:41:24:31:d3:cd:5e:9f:3d:
c3:d5:5b:6c:b0:cb:5f:4c:b8:89:f6:95:ad:d4:ea:
fa:26:48:3a:53:69:9e:44:97:97:b9:a1:3f:15:1f:
ac:1c:c7:96:e1:fd:0a:20:d7:3e:af:59:88:cd:c3:
c9:e3:99:ed:77:6f:e5:64:43:4f:b5:ed:ed:de:e6:
0e:7e:47:0e:ef:e9:cc:16:bd:84:93:d6:47:63:84:
d0:ee:16:48:d2:a8:5a:44:5e:09:ef:97:da:31:3a:
16:fb:56:f3:f8:37:55:a5:3e:80:f1:72:92:00:26:
61:0b:69:52:a2:ac:5c:aa:1c:f2:b3:64:a4:09:28:
f7:52:fe:04:cd:65:bd:02:c1:62:e4:db:2a:04:a1:
87:d3:67:b8:33:6c:78:37:74:ca:9a:7d:42:bd:0f:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:67:44:E9:46:E7:D5:74:79:B3:A3:4C:C8:5E:9A:C7:0E:43:DF:65
X509v3 Authority Key Identifier:
keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:fa:f7:f6:43:c0:f4:20:ce:b8:4c:65:ed:ce:bf:fd:c9:7f:
55:f5:cc:2f:6f:7b:c4:ea:e0:5a:b3:16:92:d7:4a:95:9b:47:
e8:b6:8d:09:68:8c:b7:13:64:be:8e:86:70:d5:a8:a6:52:1f:
80:cf:1b:bd:fb:ad:fd:75:15:54:da:3a:50:2c:b7:5e:4a:e2:
08:4f:5d:4e:9c:8f:94:8b:20:c3:ef:cd:dd:16:f7:c1:ee:ba:
ae:a2:a6:da:03:06:5f:84:a9:99:19:e1:a8:94:0b:9a:7e:8f:
07:ee:d4:8b:f0:08:c6:26:91:10:5d:78:d7:e4:e8:18:1e:1e:
1a:b1:a7:06:ff:b8:79:8f:b4:3e:cb:56:5c:67:88:d0:ff:9d:
90:e5:c1:05:b4:3f:21:eb:dd:54:18:ae:4f:89:f6:ef:33:b6:
ac:f5:cd:d5:5b:db:f8:47:d4:6f:9f:ba:c6:ec:01:9a:ea:c9:
45:a7:02:1b:69:63:ff:5f:70:48:3a:69:e7:4d:d3:88:f9:cf:
06:d2:81:67:45:3d:3d:5b:1d:1e:ab:5d:10:7c:bb:b0:45:7a:
02:64:9b:59:f0:0b:71:83:69:09:09:df:31:71:40:d5:ff:c1:
ee:65:81:79:27:09:f3:be:bf:3a:c0:e2:e3:51:0d:38:ed:be:
c4:7e:b1:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgxMTkxMTAvBgNVBAUTKDUxM0REMzA4Q0Q3NTE0MjI3QUY1MUQ4MDVFNTU0MEE2
QTlGNUQzMzkwHhcNMjYwNTEyMTU0MjQxWhcNMjYwNTE5MTU0MjQxWjAYMRYwFAYD
VQQDEw02YTAzNGE3MS0xMzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7Kf+drpBBAuBQvufsrIPh0fGMSQmxVB3Ca0n5ACZ5jGaJsTSTgyPu/LzJbM3
RePSsWnEdaj7GkuQWY4+R52tAt3ycL6K5ZUPo+NRhCExGT+h3qhJH5nUz8CDQkoG
G2P/QSQx081enz3D1VtssMtfTLiJ9pWt1Or6Jkg6U2meRJeXuaE/FR+sHMeW4f0K
INc+r1mIzcPJ45ntd2/lZENPte3t3uYOfkcO7+nMFr2Ek9ZHY4TQ7hZI0qhaRF4J
75faMToW+1bz+DdVpT6A8XKSACZhC2lSoqxcqhzys2SkCSj3Uv4EzWW9AsFi5Nsq
BKGH02e4M2x4N3TKmn1CvQ9GfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJZnROlG
59V0ebOjTMhemscOQ99lMB8GA1UdIwQYMBaAFFE90wjNdRQievUdgF5VQKap9dM5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS80RTJEN0EzODUx
NDAxMUU5OEQ5ODNCNjFDNEY5QUUwMi9VVDNUQ00xMUZDSjY5UjJBWGxWQXBxbjEw
emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VUM1RDTTExRkNKNjlSMkFYbFZBcHFuMTB6ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODExOS80RTJEN0EzODUxNDAxMUU5OEQ5ODNCNjFDNEY5QUUwMi9VVDNUQ00xMUZD
SjY5UjJBWGxWQXBxbjEwemsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEvr39kPA9CDOuExl7c6//cl/VfXML297xOrgWrMWktdKlZtH6LaNCWiMtxNk
vo6GcNWoplIfgM8bvfut/XUVVNo6UCy3XkriCE9dTpyPlIsgw+/N3Rb3we66rqKm
2gMGX4SpmRnhqJQLmn6PB+7Ui/AIxiaREF141+ToGB4eGrGnBv+4eY+0PstWXGeI
0P+dkOXBBbQ/IevdVBiuT4n27zO2rPXN1Vvb+EfUb5+6xuwBmurJRacCG2lj/19w
SDpp503TiPnPBtKBZ0U9PVsdHqtdEHy7sEV6AmSbWfALcYNpCQnfMXFA1f/B7mWB
eScJ876/OsDi41ENOO2+xH6xpw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:13:38 2026 by rpki-client