
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
File: UTbgDQPR84UAq2cpty7T1yzWoQU.mft (raw, json)
Hash identifier: rsObGjmP3NLj9peO0W6THwfM+w6ZuOWQsU9w+MpjEgs=
Subject key identifier: D0:03:DA:32:21:EC:96:05:A1:15:44:93:82:E2:9F:7D:69:5B:3B:CB
Authority key identifier: 51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05
Certificate issuer: /CN=A919B3BC/serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
Certificate serial: 1EA5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
Manifest number: 1E8D
Signing time: Mon 02 Mar 2026 01:40:32 +0000
Manifest this update: Mon 02 Mar 2026 01:40:31 +0000
Manifest next update: Mon 09 Mar 2026 01:40:31 +0000
Files and hashes: 1: UTbgDQPR84UAq2cpty7T1yzWoQU.crl (hash: q9i6AY1sDgtpB39IxAPawq5I+YaBp5aZyCtQZNxyuPw=)
2: 03D29A521AD611F0BC67FC1CC4F9AE02.roa (hash: +XTRUVrSV5075aMr9L+PWUwss00Y7Wsa3jtDnMwf+RQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl
rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7845 (0x1ea5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B3BC, serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
Validity
Not Before: Mar 2 01:40:31 2026 GMT
Not After : Mar 9 01:40:31 2026 GMT
Subject: CN=69a4ea90-8985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:ff:8d:c2:f3:b5:a6:44:3c:24:a3:25:a2:
47:a2:4b:6d:62:60:7b:16:cd:e3:eb:9c:25:fa:7e:
78:01:ff:2b:b6:fd:3e:e3:45:3c:b3:ff:85:0d:ed:
98:bf:32:00:81:c6:1b:a2:9e:9f:d9:3f:c5:98:66:
c0:8d:dd:75:0b:ce:6b:2d:c1:e8:25:70:44:2c:4b:
ee:bd:77:ca:f6:37:7b:ff:5f:76:90:2a:e9:e4:c2:
d0:cb:26:26:d8:72:ed:54:d7:99:12:36:1b:6c:f8:
21:85:0e:d5:23:0e:2c:bd:a6:be:a0:90:9f:82:55:
ad:e5:9b:2d:a7:1e:4c:fc:3a:5c:a2:97:48:41:0b:
cc:08:99:d4:0e:43:fa:91:51:9b:b3:ba:e1:1b:e8:
6b:65:e2:bd:9d:db:20:33:82:92:6d:81:c5:c1:cf:
e1:30:a3:ce:48:6e:3c:d6:69:fd:51:4e:bc:26:24:
a6:cc:d4:7b:d1:77:ea:b0:12:fa:1d:65:a8:20:7b:
69:41:61:15:92:cb:e1:b9:d6:c5:d8:f8:4a:d5:ec:
3c:24:7c:f3:2d:f8:13:22:e7:17:6b:c8:fa:fd:1a:
f0:d2:9b:eb:18:73:b3:12:a5:52:a8:c7:ba:5e:fd:
35:5a:8e:bc:b8:83:3a:f6:41:23:b8:c4:48:19:5f:
3c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:03:DA:32:21:EC:96:05:A1:15:44:93:82:E2:9F:7D:69:5B:3B:CB
X509v3 Authority Key Identifier:
keyid:51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7b:71:bf:0d:cb:c2:b2:64:41:68:b4:62:81:a9:1c:15:10:
31:90:d2:74:69:14:e5:be:0f:3e:3f:08:93:8d:6f:4d:0d:0d:
68:58:30:b1:c0:0a:e3:b0:93:eb:73:87:24:4c:1f:02:db:74:
8a:52:b6:36:31:38:3c:50:6c:a4:4e:30:50:e6:6b:ed:c6:b1:
13:80:44:6b:a2:41:99:27:5e:0a:f2:ea:7f:ca:e1:d8:f7:2b:
4a:9b:c8:17:a9:18:ab:b8:c4:af:70:38:ac:50:80:e8:97:5d:
9b:12:88:89:4b:d1:89:99:b8:94:9c:52:5c:ff:0b:2e:58:f9:
e8:c5:d7:f4:f1:22:35:d4:fe:7d:c8:d4:24:24:fc:73:99:22:
8d:d4:9d:03:55:0f:db:35:05:77:05:1c:f9:9b:20:2f:f2:a5:
82:5e:ff:eb:a9:94:fa:fe:ac:80:96:2e:27:83:74:d6:80:09:
15:8a:d3:c6:59:59:d9:e7:e2:df:da:31:59:02:e0:da:94:59:
b8:bf:26:90:0f:91:ca:cb:38:4c:84:ff:ac:a0:23:53:34:c1:
94:22:b4:12:b1:29:29:1b:ea:b7:f9:ce:17:74:ad:c3:85:32:
0d:97:5b:b4:2e:7b:0d:fa:fd:bc:b8:95:35:50:d6:b2:c1:90:
32:5e:64:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUIzQkMxMTAvBgNVBAUTKDUxMzZFMDBEMDNEMUYzODUwMEFCNjcyOUI3MkVEM0Q3
MkNENkExMDUwHhcNMjYwMzAyMDE0MDMxWhcNMjYwMzA5MDE0MDMxWjAYMRYwFAYD
VQQDEw02OWE0ZWE5MC04OTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzm3/jcLztaZEPCSjJaJHokttYmB7Fs3j65wl+n54Af8rtv0+40U8s/+FDe2Y
vzIAgcYbop6f2T/FmGbAjd11C85rLcHoJXBELEvuvXfK9jd7/192kCrp5MLQyyYm
2HLtVNeZEjYbbPghhQ7VIw4svaa+oJCfglWt5Zstpx5M/DpcopdIQQvMCJnUDkP6
kVGbs7rhG+hrZeK9ndsgM4KSbYHFwc/hMKPOSG481mn9UU68JiSmzNR70XfqsBL6
HWWoIHtpQWEVksvhudbF2PhK1ew8JHzzLfgTIucXa8j6/Rrw0pvrGHOzEqVSqMe6
Xv01Wo68uIM69kEjuMRIGV88DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNAD2jIh
7JYFoRVEk4Lin31pWzvLMB8GA1UdIwQYMBaAFFE24A0D0fOFAKtnKbcu09cs1qEF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjNCQy8zMDQxOTdFODhG
OUIxMUU2QkVDNUNCMjVDNEY5QUUwMi9VVGJnRFFQUjg0VUFxMmNwdHk3VDF5eldv
UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VUYmdEUVBSODRVQXEyY3B0eTdUMXl6V29RVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QjNCQy8zMDQxOTdFODhGOUIxMUU2QkVDNUNCMjVDNEY5QUUwMi9VVGJnRFFQUjg0
VUFxMmNwdHk3VDF5eldvUVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArXtxvw3LwrJkQWi0YoGpHBUQMZDSdGkU5b4PPj8Ik41vTQ0NaFgwscAK47CT
63OHJEwfAtt0ilK2NjE4PFBspE4wUOZr7caxE4BEa6JBmSdeCvLqf8rh2PcrSpvI
F6kYq7jEr3A4rFCA6JddmxKIiUvRiZm4lJxSXP8LLlj56MXX9PEiNdT+fcjUJCT8
c5kijdSdA1UP2zUFdwUc+ZsgL/Klgl7/66mU+v6sgJYuJ4N01oAJFYrTxllZ2efi
39oxWQLg2pRZuL8mkA+Ryss4TIT/rKAjUzTBlCK0ErEpKRvqt/nOF3Stw4UyDZdb
tC57Dfr9vLiVNVDWssGQMl5kAA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:44 2026 by rpki-client