
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
File: UT3TCM11FCJ69R2AXlVApqn10zk.mft (raw, json)
Hash identifier: JiFU3RI8XnXPufjmzZLZrg9f4RK5FztDEaRmAFV0Qbg=
Subject key identifier: D5:F3:DD:3E:73:50:28:88:A6:6E:34:B5:C9:F2:29:40:21:D2:4C:2B
Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
Certificate issuer: /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Certificate serial: 10E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
Manifest number: 10D8
Signing time: Thu 24 Sep 2026 15:39:55 +0000
Manifest this update: Thu 24 Sep 2026 15:39:54 +0000
Manifest next update: Thu 01 Oct 2026 15:39:54 +0000
Files and hashes: 1: UT3TCM11FCJ69R2AXlVApqn10zk.crl (hash: /ccvmZbXWV3MtSuB9aSO9/Nvh8bsxDkdClHhRv/rg4I=)
2: 8BCB105015EA11EC86834E2FC4F9AE02.roa (hash: mDSdFAda1UgtQqeGInQfSpAqXmZ+NIepQJMYXkdE8Hc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:39:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4323 (0x10e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8119, serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Validity
Not Before: Sep 24 15:39:54 2026 GMT
Not After : Oct 1 15:39:54 2026 GMT
Subject: CN=6ab5444b-01e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c2:b3:57:67:f2:df:15:cc:20:e4:94:f9:fa:
8c:d6:01:92:22:7b:54:d6:eb:da:f9:b5:60:8a:5a:
62:72:09:aa:4b:36:22:a4:c7:3f:b5:24:0f:d8:4c:
ae:7e:7c:c5:6e:9d:b6:68:1d:26:c8:a3:62:1a:0d:
6b:2b:f6:9e:3e:83:f1:da:d3:7c:a1:ca:49:37:33:
21:94:7b:ff:80:95:2a:7d:1a:ad:a4:71:58:83:12:
f1:56:44:a8:44:54:0a:b5:7c:db:26:9a:26:2e:bc:
48:16:c8:d9:df:25:05:2e:0c:92:3b:5d:af:be:88:
f4:8b:c9:78:c8:93:75:3b:16:1b:e4:e9:dd:96:9e:
2f:88:3f:a8:9c:28:2b:e0:a6:3a:e4:bb:fb:11:39:
a0:2f:53:e0:57:c6:01:98:ed:20:ef:93:cd:8c:c4:
a0:c4:2f:98:e0:08:4a:ec:cd:7b:35:65:f5:31:34:
b4:da:77:ae:1a:a3:2c:42:3a:41:dd:62:24:39:85:
51:17:cd:f3:f8:2d:32:74:dd:8f:77:a4:64:b6:81:
7c:c6:66:09:4f:b5:e2:7d:42:fe:5e:8c:61:06:93:
cc:1b:52:f6:2c:3c:3f:3c:7d:74:99:7b:3e:b9:ae:
22:70:1f:51:4b:c7:95:47:b6:35:a4:bb:16:bc:f8:
a3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F3:DD:3E:73:50:28:88:A6:6E:34:B5:C9:F2:29:40:21:D2:4C:2B
X509v3 Authority Key Identifier:
keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:89:b0:dc:39:45:81:0d:8a:c8:2c:c1:32:0e:92:b2:89:e5:
43:6c:fe:2f:3b:02:a1:00:aa:d6:54:1e:b7:d9:a0:f0:db:aa:
15:9a:e3:74:85:0b:15:6c:65:27:91:f8:ae:9d:54:b6:da:0c:
1a:88:ec:66:25:3a:92:97:f6:c5:ab:69:9e:47:4c:45:7b:9d:
5e:da:db:8d:c3:95:ce:aa:b6:37:c6:cd:84:b5:2a:2a:22:ee:
3b:a1:ed:8c:02:65:73:5b:39:cd:3b:2d:2b:e5:46:f5:bb:d1:
33:08:d0:e5:e9:9c:7a:05:a6:4a:3f:c4:93:86:7d:2f:67:97:
e3:1b:0d:c4:dc:db:c1:e0:00:9d:66:72:fd:6e:9b:3e:47:25:
76:01:45:33:02:93:71:2a:2c:42:d4:10:10:1a:74:7e:9a:72:
3b:9a:5e:cf:64:bb:d5:20:00:81:2a:01:6a:5c:c9:76:f7:71:
64:77:8c:7c:75:e7:50:fc:cf:01:f2:17:a9:b3:3d:ba:c1:25:
d6:08:4f:40:d5:04:54:3a:48:31:bb:57:51:53:f3:32:bb:8f:
ca:64:53:47:6a:bc:db:66:3d:fc:52:52:e6:4e:ee:65:d8:d8:
d1:71:c7:3e:03:32:75:14:41:34:e1:24:da:d6:b2:9d:f1:2b:
b5:04:9d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:02:02 2026 by rpki-client