
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
File: UT3TCM11FCJ69R2AXlVApqn10zk.mft (raw, json)
Hash identifier: 8wafLLgVif9mPZ1Pb86bk6IXJliEc/tnzjm6hoMdvWs=
Subject key identifier: 46:BE:43:FE:31:87:25:E6:E9:E2:CA:6E:72:70:BF:F1:05:13:B5:8A
Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
Certificate issuer: /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Certificate serial: 1072
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
Manifest number: 106A
Signing time: Sat 28 Feb 2026 15:44:09 +0000
Manifest this update: Sat 28 Feb 2026 15:44:09 +0000
Manifest next update: Sat 07 Mar 2026 15:44:09 +0000
Files and hashes: 1: UT3TCM11FCJ69R2AXlVApqn10zk.crl (hash: Y8TtEmCN+pAvpZC5KPMo4Add5nTP4Hfzdt/renpcvZA=)
2: 8BCB105015EA11EC86834E2FC4F9AE02.roa (hash: IX9d9TIKewpWNDigl1ZdHd+4/uZo37EA6gD3nX3eWyM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:44:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4210 (0x1072)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8119, serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Validity
Not Before: Feb 28 15:44:09 2026 GMT
Not After : Mar 7 15:44:09 2026 GMT
Subject: CN=69a30d49-fb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:71:3c:8f:62:25:da:4f:a9:09:4f:46:af:
51:aa:34:ce:51:3c:e8:a8:92:ba:f1:d0:ab:3b:d1:
90:91:cf:d7:c1:31:3b:18:59:c1:38:f9:1b:00:57:
6c:78:c0:d2:9e:61:9c:45:70:67:fd:f1:be:cd:ef:
19:76:5b:d5:a8:1d:84:d2:9e:81:61:f2:f2:7d:1c:
80:3b:f1:88:2d:97:91:ef:fd:48:cc:f1:00:29:61:
1c:df:47:e9:17:ed:4b:3f:6a:71:5e:64:1b:5a:55:
5b:a8:71:4a:f5:19:09:38:fe:83:84:a1:b0:d8:c6:
cf:0f:e4:8a:6e:ae:c2:cc:34:19:f8:08:6d:be:06:
8f:78:2c:31:f7:45:7c:8e:ea:b8:7e:3d:22:b4:1c:
74:3b:ff:01:50:9f:e1:02:7e:3b:67:ed:71:f1:60:
c6:e8:ae:5b:92:a9:d6:38:a9:70:52:26:15:24:37:
56:1e:3a:2b:4b:43:cb:01:dc:5a:3b:a2:cd:d3:90:
0d:71:cb:cc:90:4d:d9:71:b1:5f:f4:ef:90:a7:85:
1f:8b:88:06:ef:d4:9d:aa:3d:02:08:83:b4:3a:79:
4f:f0:e3:4d:d8:8e:8a:27:03:d2:bb:37:50:43:d1:
60:47:6e:bd:57:39:64:cf:68:a0:db:6c:11:c3:c4:
37:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BE:43:FE:31:87:25:E6:E9:E2:CA:6E:72:70:BF:F1:05:13:B5:8A
X509v3 Authority Key Identifier:
keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:76:f4:f8:7e:28:fe:7b:c7:51:9c:1f:80:98:c4:46:ca:65:
76:97:10:f9:54:b8:61:98:8b:8c:38:a3:c9:bf:8d:97:9e:31:
87:08:ce:dc:81:ac:c0:38:b1:e7:b1:03:ea:00:76:da:84:54:
a4:e7:16:e0:f8:44:49:b1:98:cf:98:5a:3c:57:f9:e7:2f:af:
57:ad:37:50:7b:5a:1b:bb:91:df:99:13:13:ce:00:83:80:86:
bd:9e:55:d6:54:d4:fd:85:a4:42:86:74:40:8b:be:7a:69:de:
e8:42:16:e5:81:41:d4:92:da:07:56:d9:b4:ff:0a:32:87:19:
78:12:77:06:03:dd:30:a8:7e:c8:b1:16:93:12:90:0e:96:76:
92:f8:de:92:4b:30:10:27:66:70:43:68:7b:08:dd:5f:cf:d3:
bd:6d:70:de:db:24:f7:e8:bf:f3:6b:00:aa:2b:14:b3:33:2a:
55:a2:b2:88:2c:39:c4:a4:2e:ee:d6:81:60:04:ec:75:cf:17:
5b:5a:6c:d1:6c:e4:ed:c0:18:3e:15:ad:66:52:f7:d9:15:19:
59:5a:0c:6c:34:81:c9:7d:24:49:7e:25:fe:27:c1:9e:0a:91:
46:48:e7:f0:6a:b1:94:8d:ce:d9:3b:c5:95:d2:f7:1d:65:62:
68:44:cc:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgxMTkxMTAvBgNVBAUTKDUxM0REMzA4Q0Q3NTE0MjI3QUY1MUQ4MDVFNTU0MEE2
QTlGNUQzMzkwHhcNMjYwMjI4MTU0NDA5WhcNMjYwMzA3MTU0NDA5WjAYMRYwFAYD
VQQDDA02OWEzMGQ0OS1mYjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsG1xPI9iJdpPqQlPRq9RqjTOUTzoqJK68dCrO9GQkc/XwTE7GFnBOPkbAFds
eMDSnmGcRXBn/fG+ze8ZdlvVqB2E0p6BYfLyfRyAO/GILZeR7/1IzPEAKWEc30fp
F+1LP2pxXmQbWlVbqHFK9RkJOP6DhKGw2MbPD+SKbq7CzDQZ+AhtvgaPeCwx90V8
juq4fj0itBx0O/8BUJ/hAn47Z+1x8WDG6K5bkqnWOKlwUiYVJDdWHjorS0PLAdxa
O6LN05ANccvMkE3ZcbFf9O+Qp4Ufi4gG79Sdqj0CCIO0OnlP8ONN2I6KJwPSuzdQ
Q9FgR269Vzlkz2ig22wRw8Q3VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEa+Q/4x
hyXm6eLKbnJwv/EFE7WKMB8GA1UdIwQYMBaAFFE90wjNdRQievUdgF5VQKap9dM5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS80RTJEN0EzODUx
NDAxMUU5OEQ5ODNCNjFDNEY5QUUwMi9VVDNUQ00xMUZDSjY5UjJBWGxWQXBxbjEw
emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VUM1RDTTExRkNKNjlSMkFYbFZBcHFuMTB6ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODExOS80RTJEN0EzODUxNDAxMUU5OEQ5ODNCNjFDNEY5QUUwMi9VVDNUQ00xMUZD
SjY5UjJBWGxWQXBxbjEwemsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASnb0+H4o/nvHUZwfgJjERspldpcQ+VS4YZiLjDijyb+Nl54xhwjO3IGswDix
57ED6gB22oRUpOcW4PhESbGYz5haPFf55y+vV603UHtaG7uR35kTE84Ag4CGvZ5V
1lTU/YWkQoZ0QIu+emne6EIW5YFB1JLaB1bZtP8KMocZeBJ3BgPdMKh+yLEWkxKQ
DpZ2kvjekkswECdmcENoewjdX8/TvW1w3tsk9+i/82sAqisUszMqVaKyiCw5xKQu
7taBYATsdc8XW1ps0Wzk7cAYPhWtZlL32RUZWVoMbDSByX0kSX4l/ifBngqRRkjn
8GqxlI3O2TvFldL3HWViaETMGQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:01 2026 by rpki-client