
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
File: utY-wFoDGPl_MVby4gWcYZPOOAo.mft (raw, json)
Hash identifier: AEqZc+NB3P4J8ZoYc9t6UX3k03xEdJs8NhyBekrPPUQ=
Subject key identifier: 95:5D:34:83:70:07:3F:F7:42:F3:FD:E6:BB:02:F1:3A:8F:48:00:BC
Authority key identifier: BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A
Certificate issuer: /CN=A91D5A49/serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A
Certificate serial: 02B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
Manifest number: 02B9
Signing time: Mon 27 Jul 2026 02:37:45 +0000
Manifest this update: Mon 27 Jul 2026 02:37:44 +0000
Manifest next update: Mon 03 Aug 2026 02:37:44 +0000
Files and hashes: 1: utY-wFoDGPl_MVby4gWcYZPOOAo.crl (hash: nLcAHf5drXHRB8SE3zZf1a68+y8vb0UGAl91pGFU1I8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl
rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697 (0x2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5A49, serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A
Validity
Not Before: Jul 27 02:37:44 2026 GMT
Not After : Aug 3 02:37:44 2026 GMT
Subject: CN=6a66c479-3157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:b7:a5:05:fc:03:df:85:a8:7e:95:d9:1c:
a6:99:3b:aa:9a:3b:16:fd:4f:1e:6a:00:f3:15:29:
15:b2:41:a8:93:57:01:b6:46:66:a9:89:57:5d:81:
36:ee:05:85:70:7b:d7:82:f0:8d:86:a4:85:e7:48:
e1:2f:b8:a1:5e:a3:9a:39:a9:dd:85:02:63:a0:a5:
5d:c8:f0:ef:3f:41:6b:95:e1:24:4f:c0:24:61:55:
6e:c1:bc:35:8b:ec:cd:fb:d0:1b:dd:51:df:d3:42:
3f:f4:38:91:c0:3d:c5:9f:16:b6:f2:89:5d:4c:89:
04:b7:5c:a8:e3:e0:29:aa:a5:81:2c:88:8e:28:1c:
4c:6b:ec:e6:e8:af:7d:4c:7b:6b:37:de:0c:08:19:
2a:43:f0:dd:69:2f:29:c1:8b:f6:c0:00:24:c2:79:
7d:d2:7f:44:1d:f3:8a:5a:4f:b6:8b:ce:b1:e1:0e:
4e:60:20:fd:66:e2:f3:f4:df:d3:91:7e:5c:87:bc:
2c:4b:e1:df:5c:de:b2:6d:10:be:25:eb:82:01:d1:
83:62:82:cf:9f:dc:65:75:15:9f:90:64:77:16:55:
9e:20:eb:2f:79:52:bb:3f:7c:d4:c0:3b:66:e6:4b:
75:74:fd:cd:05:80:06:9d:d2:35:dd:24:5f:01:93:
13:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5D:34:83:70:07:3F:F7:42:F3:FD:E6:BB:02:F1:3A:8F:48:00:BC
X509v3 Authority Key Identifier:
keyid:BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:99:28:f6:1e:21:d5:f6:a8:86:b8:f6:29:30:cc:d6:1a:94:
46:73:77:91:0e:0e:41:c9:34:53:f0:86:d0:88:7b:16:61:1e:
af:b6:c8:0d:8e:6f:7d:44:0c:7b:13:87:78:fa:53:c5:11:c4:
45:65:4b:3b:59:4c:32:40:02:fb:43:dd:74:d7:7f:fa:31:f2:
1d:8d:f0:98:46:18:e2:56:36:6c:aa:2a:4e:57:ac:95:62:b2:
fb:fc:98:8f:d0:17:67:e7:a3:7b:9c:45:95:84:02:6b:ea:eb:
fb:61:a2:57:36:ea:58:6d:0e:2e:12:b2:c4:dd:10:6c:15:d0:
66:bb:9e:37:ef:47:36:5f:02:e1:d6:ad:ec:31:4a:bf:f6:fa:
2c:6b:20:90:43:8a:1c:78:bd:02:e0:1f:b8:43:48:5a:51:ab:
5c:e8:c9:e7:48:a2:d0:c1:0a:fd:0a:08:8d:01:b0:6b:40:b8:
b6:2a:74:35:2a:aa:6d:17:53:26:23:71:ae:39:b7:06:d5:88:
1c:6b:21:de:81:c6:4c:8e:3c:d6:62:2e:66:c1:96:ec:77:ee:
11:f8:25:bf:04:df:18:7e:7c:f4:a4:ab:18:e9:47:47:22:8e:
4b:4b:19:0e:27:a9:e0:41:aa:1c:69:e7:9a:29:76:03:05:94:
d6:64:ce:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDVBNDkxMTAvBgNVBAUTKEJBRDYzRUMwNUEwMzE4Rjk3RjMxNTZGMkUyMDU5QzYx
OTNDRTM4MEEwHhcNMjYwNzI3MDIzNzQ0WhcNMjYwODAzMDIzNzQ0WjAYMRYwFAYD
VQQDEw02YTY2YzQ3OS0zMTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAunK3pQX8A9+FqH6V2RymmTuqmjsW/U8eagDzFSkVskGok1cBtkZmqYlXXYE2
7gWFcHvXgvCNhqSF50jhL7ihXqOaOandhQJjoKVdyPDvP0FrleEkT8AkYVVuwbw1
i+zN+9Ab3VHf00I/9DiRwD3Fnxa28oldTIkEt1yo4+ApqqWBLIiOKBxMa+zm6K99
THtrN94MCBkqQ/DdaS8pwYv2wAAkwnl90n9EHfOKWk+2i86x4Q5OYCD9ZuLz9N/T
kX5ch7wsS+HfXN6ybRC+JeuCAdGDYoLPn9xldRWfkGR3FlWeIOsveVK7P3zUwDtm
5kt1dP3NBYAGndI13SRfAZMT1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJVdNINw
Bz/3QvP95rsC8TqPSAC8MB8GA1UdIwQYMBaAFLrWPsBaAxj5fzFW8uIFnGGTzjgK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUE0OS9GOTEzMURBNjU4
QTYxMUVEQTJCQjIwNjBDNEY5QUUwMi91dFktd0ZvREdQbF9NVmJ5NGdXY1laUE9P
QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V0WS13Rm9ER1BsX01WYnk0Z1djWVpQT09Bby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NUE0OS9GOTEzMURBNjU4QTYxMUVEQTJCQjIwNjBDNEY5QUUwMi91dFktd0ZvREdQ
bF9NVmJ5NGdXY1laUE9PQW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOJko9h4h1faohrj2KTDM1hqURnN3kQ4OQck0U/CG0Ih7FmEer7bIDY5vfUQM
exOHePpTxRHERWVLO1lMMkAC+0PddNd/+jHyHY3wmEYY4lY2bKoqTleslWKy+/yY
j9AXZ+eje5xFlYQCa+rr+2GiVzbqWG0OLhKyxN0QbBXQZrueN+9HNl8C4dat7DFK
v/b6LGsgkEOKHHi9AuAfuENIWlGrXOjJ50ii0MEK/QoIjQGwa0C4tip0NSqqbRdT
JiNxrjm3BtWIHGsh3oHGTI481mIuZsGW7HfuEfglvwTfGH589KSrGOlHRyKOS0sZ
Diep4EGqHGnnmil2AwWU1mTOqA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:14 2026 by rpki-client