
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
File: utY-wFoDGPl_MVby4gWcYZPOOAo.mft (raw, json)
Hash identifier: HIp4dosDfSuAyqoptv3f0ceLdoLtcy3Kj3IK0+mgaHc=
Subject key identifier: 87:72:A1:A7:EB:3C:28:C7:41:E9:A2:7E:D0:E4:1D:5D:89:2E:58:AB
Authority key identifier: BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A
Certificate issuer: /CN=A91D5A49/serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A
Certificate serial: 0287
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
Manifest number: 0287
Signing time: Fri 17 Apr 2026 01:32:11 +0000
Manifest this update: Fri 17 Apr 2026 01:32:10 +0000
Manifest next update: Fri 24 Apr 2026 01:32:10 +0000
Files and hashes: 1: utY-wFoDGPl_MVby4gWcYZPOOAo.crl (hash: 1cmqk0TxPPfJBWG7Dg70rbZ7677O3xVoaRENGFAL/u4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl
rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 647 (0x287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5A49, serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A
Validity
Not Before: Apr 17 01:32:10 2026 GMT
Not After : Apr 24 01:32:10 2026 GMT
Subject: CN=69e18d9a-58b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:6d:0d:70:29:cf:06:a3:5f:23:7d:fd:d1:
2e:0c:c3:40:fa:80:bb:67:2d:1e:dd:de:d7:db:1b:
f0:e6:ff:30:17:4f:4b:e5:47:8e:41:b2:51:e9:bb:
c4:fb:e0:f2:fb:a5:69:73:d9:84:ad:d2:f0:fd:3e:
1c:f5:b1:65:8c:5f:c2:3b:e4:49:41:e6:3e:24:ec:
9b:61:bf:03:a6:16:fa:77:fa:01:59:47:1e:d3:f9:
61:bb:82:21:88:e8:ea:37:75:26:cd:18:05:4f:b0:
ed:56:a2:ef:57:28:c7:a2:73:d9:e2:9b:49:87:58:
75:87:ed:8a:34:e2:f0:a4:d2:70:27:5a:e0:d9:b2:
05:09:9d:ba:b5:83:e3:25:df:47:db:4d:cc:4d:21:
9b:3d:d3:a1:52:5d:ad:eb:24:75:d5:ec:a2:bc:1e:
f1:cd:19:dd:bc:f0:ac:86:55:ba:43:2c:84:c2:8d:
8c:d2:73:f1:2c:ee:14:41:23:5b:09:2f:92:52:1c:
3f:ea:64:44:bc:b5:85:1f:eb:3a:e8:3d:c1:48:99:
96:ad:14:fa:71:23:27:53:7c:17:d1:da:b6:e4:95:
4a:6e:4d:55:53:8d:f1:29:dd:26:59:75:b9:de:6e:
4d:9d:8a:0d:ce:95:e2:26:c8:c2:e3:7b:7e:f7:8f:
ad:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:72:A1:A7:EB:3C:28:C7:41:E9:A2:7E:D0:E4:1D:5D:89:2E:58:AB
X509v3 Authority Key Identifier:
keyid:BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:29:50:45:ce:e8:c4:38:41:dd:6d:97:d5:67:da:95:fe:33:
ac:4e:fc:30:c0:65:43:bb:44:67:bd:6e:9f:63:50:1b:4a:f8:
41:67:76:a6:f4:4c:7a:7b:43:4b:17:9d:cc:16:7e:72:cb:c0:
af:88:0c:f4:9e:af:23:21:e1:e9:59:0d:75:41:a0:df:c5:e0:
92:6c:42:9a:a1:81:87:f6:ae:da:75:b1:3e:81:52:8f:ed:43:
4e:f2:6d:47:76:b0:c4:ac:2c:ea:70:fe:f2:95:38:50:99:95:
2c:a4:0e:ba:cd:e1:3c:da:d1:8f:e9:64:8e:a6:f5:73:96:0e:
05:1a:64:06:c0:c5:c4:03:5f:66:58:2e:86:4e:cd:8a:2c:8f:
2e:78:b9:cf:9d:63:fd:07:ee:56:89:f2:1a:8c:3e:56:26:1b:
a6:63:cb:08:b5:1b:48:a1:7e:e3:ab:3b:4f:e2:cf:12:1f:54:
dc:ec:7d:82:87:7e:b7:2c:22:9d:2d:5d:70:d7:fb:41:55:66:
eb:ed:02:46:0e:47:e5:c6:d3:87:c6:4b:26:2e:2b:10:e2:a0:
8d:1a:40:4e:41:5f:27:2a:a5:4b:9f:94:c1:0d:ef:87:36:a1:
fa:22:77:24:92:64:af:be:d0:be:53:44:57:60:27:62:93:81:
a4:75:a4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:44 2026 by rpki-client