
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
File: UT3TCM11FCJ69R2AXlVApqn10zk.mft (raw, json)
Hash identifier: 9U9Of5q/iCAPQXGXZin7tq8ywyUiM6JbRoaj7HtJ5c8=
Subject key identifier: 96:90:7D:FA:84:F0:89:81:F2:8B:45:B3:BF:FD:16:2F:E8:01:E1:6F
Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
Certificate issuer: /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Certificate serial: 1082
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
Manifest number: 1078
Signing time: Tue 24 Mar 2026 15:39:08 +0000
Manifest this update: Tue 24 Mar 2026 15:39:08 +0000
Manifest next update: Tue 31 Mar 2026 15:39:08 +0000
Files and hashes: 1: UT3TCM11FCJ69R2AXlVApqn10zk.crl (hash: 7n0OomLd/jWyqy3JTtDBMAMIPQNCi9sI7+YQCGeT0+w=)
2: 8BCB105015EA11EC86834E2FC4F9AE02.roa (hash: mHPPM3GX+02Dm30uq1wseLE1/5qkA4HH/6sTSHF4ag8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:39:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4226 (0x1082)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8119, serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Validity
Not Before: Mar 24 15:39:08 2026 GMT
Not After : Mar 31 15:39:08 2026 GMT
Subject: CN=69c2b01c-f3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:30:5f:48:a8:42:c4:c8:e6:ff:07:02:8f:
91:ae:65:e9:ec:3c:c7:b5:19:a8:11:74:db:fb:9d:
1f:9c:57:69:72:7d:7a:e6:59:5e:fe:b6:cc:06:93:
8e:a1:d2:93:51:88:65:f6:06:c6:7e:08:f4:5e:fd:
e0:19:f1:41:c6:30:55:f5:38:33:90:02:02:ab:ec:
a7:9c:f9:1a:c2:87:35:11:5a:ce:6c:3a:84:fd:43:
9f:e7:88:de:66:06:b8:d5:0b:e2:24:67:a9:ef:ff:
10:3e:ba:62:16:ad:76:4e:16:b1:79:69:8a:ed:f9:
b0:37:ff:1f:67:78:f1:64:a9:7a:93:cb:20:ec:fc:
9f:be:ca:01:e3:e6:1b:bf:d2:8c:b2:7d:1b:c4:ca:
db:34:47:49:0f:72:85:f5:2a:17:7e:41:85:b2:c8:
04:cc:9a:4c:52:0c:14:66:b6:06:4f:01:c7:4e:c2:
e0:a7:a5:52:f9:5c:8c:35:b7:f2:8e:f7:b8:d9:cb:
c5:84:5b:c7:0a:02:48:14:1a:2d:87:08:90:88:88:
be:90:2c:06:a4:af:57:73:17:b9:3a:01:e7:61:fd:
2b:79:3d:ab:81:8c:bb:f4:7c:23:78:e5:09:04:ff:
ed:12:71:16:88:48:8e:16:0e:c4:9c:74:68:e7:15:
19:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:90:7D:FA:84:F0:89:81:F2:8B:45:B3:BF:FD:16:2F:E8:01:E1:6F
X509v3 Authority Key Identifier:
keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:05:c8:9f:20:75:a4:ae:0d:9f:4f:33:3e:fd:d0:d6:31:10:
80:a4:eb:a3:a8:3f:9a:2a:47:71:3c:26:2a:07:0e:5b:5d:c4:
e6:3a:45:eb:49:4a:b6:b5:b3:43:9a:1e:81:90:fd:73:6d:e4:
25:4f:0d:a6:73:0e:a0:d8:2d:bc:1b:b0:81:f0:25:08:b3:31:
83:24:26:b2:01:13:aa:c1:a8:09:08:4a:09:62:f9:9c:20:bd:
6c:2a:6e:3a:71:56:58:5a:3f:20:2c:fe:8d:2c:9b:df:ef:78:
8b:39:e6:0b:38:1f:4b:d5:43:76:97:01:de:74:50:d5:1b:85:
cb:b6:23:21:50:eb:95:b5:e0:74:7f:6b:6e:40:d3:fe:54:22:
10:b0:b0:9d:85:b6:64:2d:cf:22:db:5b:5b:5d:a4:7d:e7:14:
bb:da:1a:4d:c5:4c:96:9f:d8:f7:a3:8c:16:19:5e:7b:47:c1:
cb:07:cd:82:32:cc:d8:54:c0:4f:71:18:0c:de:f1:c7:18:c1:
ea:09:41:dc:d1:4b:d1:12:dd:a6:23:09:3b:0d:0b:f9:47:bf:
8e:b0:f5:c2:42:da:f0:b4:89:bd:97:28:40:03:c3:a2:77:7d:
85:be:df:35:5f:b3:2f:d4:c7:5b:5f:c3:2f:9f:24:f3:0c:72:
bf:b1:d8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:56 2026 by rpki-client