
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
File: UT3TCM11FCJ69R2AXlVApqn10zk.mft (raw, json)
Hash identifier: yjYZr7Sg5QYhOj6J16BfGxrMSSLgiCWuzbntzytn1+s=
Subject key identifier: C7:E1:C9:5E:CF:24:CF:58:5E:5B:EF:AA:38:EB:57:9D:1B:79:06:14
Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
Certificate issuer: /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Certificate serial: 10C2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
Manifest number: 10B8
Signing time: Tue 28 Jul 2026 15:47:39 +0000
Manifest this update: Tue 28 Jul 2026 15:47:38 +0000
Manifest next update: Tue 04 Aug 2026 15:47:38 +0000
Files and hashes: 1: UT3TCM11FCJ69R2AXlVApqn10zk.crl (hash: llbtz9T17TyzFaHYa7v13yOM3kgPIqTUHRBMzS3G0dw=)
2: 8BCB105015EA11EC86834E2FC4F9AE02.roa (hash: mHPPM3GX+02Dm30uq1wseLE1/5qkA4HH/6sTSHF4ag8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4290 (0x10c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8119, serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Validity
Not Before: Jul 28 15:47:38 2026 GMT
Not After : Aug 4 15:47:38 2026 GMT
Subject: CN=6a68cf1b-6423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:2d:09:39:ac:44:39:c3:83:d2:bf:85:eb:
94:c2:7e:d1:7d:c1:da:f3:09:6c:82:7d:3f:57:5b:
5f:82:42:5c:10:2e:f9:c4:7b:dd:46:b5:24:9b:cc:
27:26:e0:50:4a:c0:ab:0a:86:84:76:11:f0:2a:eb:
f1:2b:12:ab:54:17:69:b8:6b:42:ab:3f:78:a5:65:
cb:7e:a9:e1:78:84:25:9c:ca:43:3f:2e:0d:dc:67:
3e:27:7e:90:88:91:2c:00:a5:3e:4e:77:39:e3:75:
32:a4:3b:59:0f:69:6e:2c:ea:db:70:50:06:49:77:
b1:d0:2d:8f:b2:86:82:82:70:b3:7d:1d:c7:e1:c8:
da:50:41:4f:b0:b4:94:d4:4e:bb:66:54:ea:28:4f:
c4:ba:e4:66:e3:b4:4b:89:b3:28:d6:86:36:75:0e:
ec:39:bd:e1:e8:d2:3c:66:fd:ca:51:70:5a:18:fa:
00:32:2e:09:48:3e:bc:c0:f3:cd:4c:40:a2:d7:b2:
8c:63:93:71:67:fa:03:06:1f:ba:b4:af:ed:68:6b:
37:bf:8c:70:5b:33:b9:5b:1e:86:95:07:6a:1b:ee:
af:6a:3d:c8:a5:83:e2:1c:3c:74:bf:23:94:49:9b:
92:71:03:f5:21:2a:04:0b:99:f4:ce:d3:b7:3f:a8:
f6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E1:C9:5E:CF:24:CF:58:5E:5B:EF:AA:38:EB:57:9D:1B:79:06:14
X509v3 Authority Key Identifier:
keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2c:9d:af:89:09:0b:96:c5:71:89:5d:3b:cb:16:85:f6:d8:
97:e6:74:6a:01:0e:e7:e9:c1:e8:ec:63:eb:3a:76:91:75:cb:
aa:1c:b0:9e:98:ab:43:ea:2a:f1:3d:83:be:79:b9:d9:30:12:
fd:d8:02:34:05:53:71:7e:13:e4:f5:95:75:a4:7e:c6:b8:19:
53:c1:ac:1c:7a:5b:a4:fd:95:2a:25:01:61:d0:0d:79:43:2c:
91:31:8f:69:f4:76:a1:e6:06:aa:e2:a1:cb:98:db:6b:86:d6:
23:38:a5:67:a3:d1:5c:a6:9c:f2:0f:c8:0d:84:27:0c:ce:e1:
a5:80:b8:55:f6:f7:96:24:60:3a:3f:23:89:2f:44:7d:47:71:
7e:53:9e:db:e1:79:66:35:cf:d0:b1:1d:9d:61:a4:22:4c:25:
90:d0:d2:a4:97:36:33:66:3d:36:1d:3f:65:87:c2:14:03:ce:
30:2b:5c:1a:c1:3b:01:2d:f3:52:a1:5d:7c:9a:62:5f:ac:37:
ab:e2:98:9c:0d:40:d5:c5:e0:db:e2:e8:31:b2:7e:78:ae:d5:
16:df:92:71:e7:98:a3:ab:e7:00:b8:5b:9a:fb:57:a0:af:69:
34:58:04:1a:97:19:01:40:a7:b3:d5:62:c9:61:6d:ec:9a:80:
b5:81:49:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:15 2026 by rpki-client