
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
File: UT3TCM11FCJ69R2AXlVApqn10zk.mft (raw, json)
Hash identifier: AyO9IlPaDSH6s+9BaMaPsLKsCCKLTk6sECnQKs8VRzA=
Subject key identifier: FF:77:98:3D:F9:49:7A:86:05:B4:D4:BC:9B:53:89:81:B2:08:06:FE
Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
Certificate issuer: /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Certificate serial: 108E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
Manifest number: 1084
Signing time: Thu 16 Apr 2026 15:40:32 +0000
Manifest this update: Thu 16 Apr 2026 15:40:32 +0000
Manifest next update: Thu 23 Apr 2026 15:40:32 +0000
Files and hashes: 1: UT3TCM11FCJ69R2AXlVApqn10zk.crl (hash: Xx0tm0pJCtGntqE2/1Qju1PGOTTl1CWlui6S08C3PVU=)
2: 8BCB105015EA11EC86834E2FC4F9AE02.roa (hash: mHPPM3GX+02Dm30uq1wseLE1/5qkA4HH/6sTSHF4ag8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:40:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4238 (0x108e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8119, serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Validity
Not Before: Apr 16 15:40:32 2026 GMT
Not After : Apr 23 15:40:32 2026 GMT
Subject: CN=69e102f0-d4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:9d:97:2c:2c:2f:17:d0:51:14:f8:7d:f0:
ed:16:65:62:6d:f4:e5:da:8c:3f:64:ed:ec:6c:72:
8d:24:a6:25:56:8f:0f:a6:93:e5:1a:41:6d:c6:9d:
bd:43:95:5d:65:73:ab:63:2c:b5:af:c5:59:de:c4:
bc:1a:44:fd:71:bb:37:87:f2:8a:93:24:ec:de:c7:
91:a2:49:de:65:22:59:b9:f7:45:cb:fe:dc:5c:ac:
8e:64:39:02:15:9a:57:38:c3:cc:78:4d:c4:b6:55:
41:50:de:47:8b:d7:ca:72:9b:d9:9c:86:09:c9:e5:
4f:91:9b:da:df:67:11:c5:2e:be:0d:7b:29:53:6b:
22:34:06:2f:be:76:47:0a:96:88:a2:52:eb:3b:c6:
a3:52:36:47:e6:49:64:fb:cc:d1:bd:af:fb:31:35:
e7:c3:38:0c:b1:69:ef:fe:28:6c:e5:39:c0:c0:c0:
6e:13:b8:cd:f6:30:21:8e:86:de:ce:cb:66:82:47:
c1:b0:2a:eb:8a:70:b5:0f:36:a8:e6:f5:87:cc:ef:
46:fd:a3:c1:dc:b7:b4:dc:27:a8:c1:1c:6c:a1:fa:
80:2b:38:e8:95:c8:d6:94:83:9c:8c:4a:f6:a2:a6:
50:fe:1d:fe:6f:2a:9d:75:ed:56:b8:e7:c5:13:c4:
6a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:77:98:3D:F9:49:7A:86:05:B4:D4:BC:9B:53:89:81:B2:08:06:FE
X509v3 Authority Key Identifier:
keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:bc:13:cd:cc:81:d4:46:6d:e8:ab:68:bd:69:85:83:68:27:
02:c4:b2:e3:3a:5a:68:3a:3c:60:4e:84:ba:63:9c:03:b7:63:
9a:c2:26:16:2e:a7:82:c2:1f:d4:21:55:4d:39:28:53:21:05:
73:5f:68:de:c8:f0:78:de:45:3e:90:2d:97:34:e9:68:52:3d:
53:b0:ba:01:c2:6b:9e:18:9a:35:f2:a5:3f:81:6d:28:86:e3:
e1:3c:9a:c3:0f:a6:02:66:da:92:e7:c3:9f:bb:13:a2:7b:91:
a4:33:fd:0a:4f:66:a0:5e:91:a1:68:e0:a3:7a:79:b0:58:de:
b2:d0:96:23:9d:6a:83:6f:02:dd:bc:8c:13:f4:34:03:40:69:
12:c5:5c:91:05:55:45:e6:20:f8:d1:09:1a:f5:b8:43:3a:96:
98:b3:39:ff:6d:5d:92:0a:bc:d5:3e:ce:87:4b:3c:51:1e:e9:
55:82:bc:95:b8:1b:1e:1e:aa:1d:23:a5:74:6f:0c:d7:17:a1:
99:12:52:e8:55:b6:ad:1c:72:99:e5:89:26:66:92:69:cf:86:
ef:c6:f8:1e:22:e0:f3:f7:33:17:7c:7c:40:62:00:17:32:0f:
9f:c1:32:2f:31:b0:f1:3c:03:77:4c:5a:af:d7:79:c3:94:96:
69:5e:f1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:28 2026 by rpki-client