
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
File: UT3TCM11FCJ69R2AXlVApqn10zk.mft (raw, json)
Hash identifier: qXWE/Lut6X3qEI2SzkrXASR+KpJDN8mR0M3t7rg6NNY=
Subject key identifier: 6A:EE:12:84:D1:A0:2B:76:2D:C8:DB:29:26:14:93:E9:34:56:53:3C
Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
Certificate issuer: /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Certificate serial: 1076
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
Manifest number: 106C
Signing time: Mon 02 Mar 2026 00:54:08 +0000
Manifest this update: Mon 02 Mar 2026 00:54:07 +0000
Manifest next update: Mon 09 Mar 2026 00:54:07 +0000
Files and hashes: 1: UT3TCM11FCJ69R2AXlVApqn10zk.crl (hash: CJTjco44OrZKdPQl++v48r3QpU0CiSilHrjxx1+L8n0=)
2: 8BCB105015EA11EC86834E2FC4F9AE02.roa (hash: mHPPM3GX+02Dm30uq1wseLE1/5qkA4HH/6sTSHF4ag8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4214 (0x1076)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8119, serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Validity
Not Before: Mar 2 00:54:07 2026 GMT
Not After : Mar 9 00:54:07 2026 GMT
Subject: CN=69a4dfb0-1442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:26:e4:3d:26:5e:f0:cc:47:48:88:df:65:
c5:4b:59:d4:0c:ce:57:5b:55:c5:cc:ba:0b:fe:3b:
30:58:8d:01:fb:ef:4c:72:f9:6f:7c:eb:d6:38:e0:
15:b6:d6:ac:65:f5:da:67:0b:28:32:82:7e:bb:27:
1b:1c:69:4e:39:77:79:1b:94:f6:77:7e:cb:bb:6d:
6e:91:f5:6b:ef:bb:36:ec:ce:72:8b:1f:1b:5c:b2:
1f:65:91:16:2b:35:4e:2f:37:cc:c9:21:74:56:6a:
a9:aa:d4:46:66:3c:4f:0b:85:52:8c:f5:43:59:e8:
8f:7d:68:07:b5:6e:a7:e1:69:9d:79:8b:cc:4c:a2:
a7:9c:32:98:84:b8:a0:e0:d5:fa:e2:98:9d:1a:b5:
f6:bf:e7:71:a8:34:25:a8:ca:0d:a1:83:f2:b9:cc:
48:58:dc:74:ab:8a:e7:6b:af:e8:b3:10:1c:81:8d:
60:37:6f:7f:ab:9e:07:e8:cd:a3:ec:cd:8f:46:6d:
47:a4:4e:2d:c2:d0:56:0b:f2:9c:83:94:1e:8b:9d:
ca:76:00:2f:a3:89:88:37:41:eb:72:8c:96:49:d0:
7a:4a:28:f0:5e:14:90:49:65:3e:5f:53:b5:a8:a3:
01:42:01:65:f3:98:a1:b2:c1:71:9a:1c:c6:a5:40:
fd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EE:12:84:D1:A0:2B:76:2D:C8:DB:29:26:14:93:E9:34:56:53:3C
X509v3 Authority Key Identifier:
keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:d0:81:f7:88:78:71:af:cc:ec:24:4c:b3:85:e1:a3:87:e1:
43:a2:64:8d:79:43:14:e5:0b:e4:4b:44:39:82:e1:44:3a:91:
97:9a:2d:fa:34:2a:6d:3e:82:92:9f:f4:a5:52:f1:d7:76:ee:
75:61:a1:0c:df:9e:ca:1d:de:0c:4f:ae:97:8d:a9:c1:87:e7:
f5:1d:15:64:d9:e3:48:42:f1:07:da:e1:a5:22:e9:c6:36:7d:
eb:cd:1a:fa:06:b1:c7:94:56:61:4f:b7:ac:93:33:3a:58:30:
f9:aa:26:26:f9:d5:ba:da:91:66:fc:ff:9a:50:aa:4f:21:5e:
c1:f2:28:b3:59:25:7c:f5:b4:d7:85:39:1f:64:d6:5f:72:86:
10:30:dc:79:f3:4e:76:d8:8f:cc:6f:26:94:cf:a7:a1:f3:6f:
de:5e:db:c3:02:d2:a5:16:d6:3d:2d:da:df:03:8d:3c:3a:fe:
bd:81:ba:70:ff:4f:ca:df:48:45:77:e5:6a:52:44:19:82:7d:
8c:9a:04:3f:33:6a:bc:51:27:55:8b:96:a8:b9:91:a3:40:f5:
7d:76:5b:3e:e3:cd:ab:7b:34:be:69:f9:30:91:08:c4:ef:13:
5a:d3:a9:cb:9f:90:a8:f4:a4:93:49:f4:ac:25:f1:15:03:77:
ba:e1:06:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgxMTkxMTAvBgNVBAUTKDUxM0REMzA4Q0Q3NTE0MjI3QUY1MUQ4MDVFNTU0MEE2
QTlGNUQzMzkwHhcNMjYwMzAyMDA1NDA3WhcNMjYwMzA5MDA1NDA3WjAYMRYwFAYD
VQQDEw02OWE0ZGZiMC0xNDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwjkm5D0mXvDMR0iI32XFS1nUDM5XW1XFzLoL/jswWI0B++9McvlvfOvWOOAV
ttasZfXaZwsoMoJ+uycbHGlOOXd5G5T2d37Lu21ukfVr77s27M5yix8bXLIfZZEW
KzVOLzfMySF0VmqpqtRGZjxPC4VSjPVDWeiPfWgHtW6n4WmdeYvMTKKnnDKYhLig
4NX64pidGrX2v+dxqDQlqMoNoYPyucxIWNx0q4rna6/osxAcgY1gN29/q54H6M2j
7M2PRm1HpE4twtBWC/Kcg5Qei53KdgAvo4mIN0HrcoyWSdB6SijwXhSQSWU+X1O1
qKMBQgFl85ihssFxmhzGpUD91QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGruEoTR
oCt2LcjbKSYUk+k0VlM8MB8GA1UdIwQYMBaAFFE90wjNdRQievUdgF5VQKap9dM5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS80RTJEN0EzODUx
NDAxMUU5OEQ5ODNCNjFDNEY5QUUwMi9VVDNUQ00xMUZDSjY5UjJBWGxWQXBxbjEw
emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VUM1RDTTExRkNKNjlSMkFYbFZBcHFuMTB6ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODExOS80RTJEN0EzODUxNDAxMUU5OEQ5ODNCNjFDNEY5QUUwMi9VVDNUQ00xMUZD
SjY5UjJBWGxWQXBxbjEwemsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ9CB94h4ca/M7CRMs4Xho4fhQ6JkjXlDFOUL5EtEOYLhRDqRl5ot+jQqbT6C
kp/0pVLx13budWGhDN+eyh3eDE+ul42pwYfn9R0VZNnjSELxB9rhpSLpxjZ9680a
+gaxx5RWYU+3rJMzOlgw+aomJvnVutqRZvz/mlCqTyFewfIos1klfPW014U5H2TW
X3KGEDDcefNOdtiPzG8mlM+nofNv3l7bwwLSpRbWPS3a3wONPDr+vYG6cP9Pyt9I
RXflalJEGYJ9jJoEPzNqvFEnVYuWqLmRo0D1fXZbPuPNq3s0vmn5MJEIxO8TWtOp
y5+QqPSkk0n0rCXxFQN3uuEGqg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:17 2026 by rpki-client