
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
File: UT3TCM11FCJ69R2AXlVApqn10zk.mft (raw, json)
Hash identifier: bPCW/z7xzKEK1LOznkJsEDddbIyE/kdXyO9B8zDtWk4=
Subject key identifier: CE:A3:DF:9E:B0:2B:52:AB:26:EA:78:18:D0:85:91:3F:3C:3A:85:20
Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
Certificate issuer: /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Certificate serial: 10BF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
Manifest number: 10B5
Signing time: Wed 22 Jul 2026 15:46:28 +0000
Manifest this update: Wed 22 Jul 2026 15:46:28 +0000
Manifest next update: Wed 29 Jul 2026 15:46:28 +0000
Files and hashes: 1: UT3TCM11FCJ69R2AXlVApqn10zk.crl (hash: MmjBp6wcjcoyzyT/C+XeptQvKwINvXNdTtFrwlSKE7k=)
2: 8BCB105015EA11EC86834E2FC4F9AE02.roa (hash: mHPPM3GX+02Dm30uq1wseLE1/5qkA4HH/6sTSHF4ag8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4287 (0x10bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8119, serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Validity
Not Before: Jul 22 15:46:28 2026 GMT
Not After : Jul 29 15:46:28 2026 GMT
Subject: CN=6a60e5d4-ea10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:a8:07:c2:b4:e1:07:a1:e4:43:05:23:bd:
aa:70:11:7a:8a:29:67:fa:31:5a:09:cd:27:4a:9e:
b9:34:87:b6:b1:a5:fb:1c:a9:a6:1f:fb:5a:a1:75:
e8:4b:eb:89:fd:da:d9:c2:29:14:2b:c6:6a:e1:ec:
f8:26:91:ae:9a:6b:ee:49:fd:60:ff:b7:fb:0c:94:
e4:be:95:51:58:4c:26:1a:54:d6:92:db:10:a5:b9:
8e:30:b6:2b:fb:8a:89:58:6c:82:21:38:8e:81:2a:
d3:cf:58:12:1a:8b:7d:21:01:6e:e4:97:4d:c7:6d:
64:95:a3:a6:62:f3:ad:ea:54:fd:e6:61:45:b2:7e:
33:6e:d7:48:40:6f:0f:25:f3:74:45:51:44:52:d7:
da:a4:c9:46:2f:45:44:23:6c:56:e2:d8:2a:43:c9:
26:b9:34:14:bf:da:e8:e4:9a:59:32:8e:e8:14:4a:
28:3f:88:85:e2:23:cc:7e:85:65:85:2f:18:90:a4:
29:de:0c:b1:11:b3:e0:15:65:b4:74:3d:ec:32:2d:
ce:9c:87:39:41:e1:48:21:74:b4:bc:fc:22:71:38:
82:35:70:9b:a3:13:bf:30:26:a7:c4:60:6a:6b:41:
15:d6:af:76:2b:99:78:40:84:6b:1d:0c:a3:b5:fb:
1e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A3:DF:9E:B0:2B:52:AB:26:EA:78:18:D0:85:91:3F:3C:3A:85:20
X509v3 Authority Key Identifier:
keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:05:7c:c6:d0:0b:07:cd:8d:52:10:cd:0b:2a:ef:b2:94:7a:
6f:17:40:d5:68:f6:d3:40:c9:f2:29:e8:ef:5f:a6:b4:8f:79:
38:ce:04:98:ec:fa:ea:d7:44:b1:8a:43:46:71:7c:32:aa:38:
d5:e2:bf:d3:8a:67:bf:81:17:1c:01:93:9e:c3:de:01:ce:92:
b9:4c:d2:5a:88:b5:9e:0e:9d:74:0e:59:5d:65:11:08:5b:88:
aa:f5:66:dd:c9:dc:6d:46:e5:df:40:44:b8:c6:b6:72:63:f0:
29:9b:fe:3b:ab:c0:ab:6c:c6:fa:55:4d:c9:9d:81:25:47:3d:
ab:26:91:cb:66:d5:eb:c2:52:a3:a6:db:aa:e4:ea:39:c8:6a:
ae:b8:f5:f7:7d:6e:43:26:e2:dc:8c:88:85:37:0f:bc:9a:c4:
6b:5a:cb:93:73:91:e3:77:2b:43:7d:cd:59:66:9d:b8:bd:48:
47:b4:d9:a4:3d:33:9b:fb:e1:0d:c4:81:6a:40:b3:dd:94:56:
db:55:2e:61:e3:62:a7:be:3d:a6:a0:d2:13:20:3f:19:23:7d:
32:34:fc:87:6b:5d:f9:f5:7e:32:6a:b0:ac:c8:32:be:61:31:
a2:50:2f:a9:47:41:e1:fa:a1:75:d9:5f:99:42:86:cc:81:58:
d3:96:09:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:54 2026 by rpki-client