
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
File: UTbgDQPR84UAq2cpty7T1yzWoQU.mft (raw, json)
Hash identifier: Nc9JjULeo9ydaecvCRwSkogXGbXMCTScIO+0Ns+ozBo=
Subject key identifier: AC:FB:B2:B8:D7:9C:63:B3:9F:AA:F4:D5:D5:1F:B2:C6:91:F1:86:95
Authority key identifier: 51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05
Certificate issuer: /CN=A919B3BC/serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
Certificate serial: 1EBE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
Manifest number: 1EA6
Signing time: Sat 18 Apr 2026 15:59:36 +0000
Manifest this update: Sat 18 Apr 2026 15:59:35 +0000
Manifest next update: Sat 25 Apr 2026 15:59:35 +0000
Files and hashes: 1: UTbgDQPR84UAq2cpty7T1yzWoQU.crl (hash: v8JRr7ORr3jYCoMUAo8TxuQ0jfGcKI4HDPMoKwfWgMc=)
2: 03D29A521AD611F0BC67FC1CC4F9AE02.roa (hash: +XTRUVrSV5075aMr9L+PWUwss00Y7Wsa3jtDnMwf+RQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl
rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7870 (0x1ebe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B3BC, serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
Validity
Not Before: Apr 18 15:59:35 2026 GMT
Not After : Apr 25 15:59:35 2026 GMT
Subject: CN=69e3aa68-752c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:28:70:52:f9:97:35:80:4b:c0:40:be:ab:70:
1a:86:df:4a:0a:b9:c4:ed:f3:cf:15:6c:69:60:ca:
19:45:6b:bd:cc:6e:0f:f9:25:e8:fe:24:ea:62:4c:
8b:91:86:c3:d7:e5:78:df:41:ce:0c:76:cf:4c:96:
35:13:80:77:1b:ff:56:18:06:cc:b9:4b:77:c0:26:
df:31:da:e3:14:fc:cc:23:23:f1:3f:18:94:d7:0a:
44:f5:29:c1:48:06:05:82:5c:38:49:e4:6d:a2:cc:
92:25:6d:88:0d:d0:b8:43:e8:e2:c0:76:a4:2e:06:
47:eb:87:60:d8:5a:70:f6:17:20:cf:a1:ef:9d:ec:
e4:6a:88:bf:ee:6e:4c:c7:87:ef:7e:69:45:cf:ca:
e9:a0:77:bc:af:ea:2e:fc:72:86:c9:4f:3d:1a:de:
9e:dc:45:99:b2:67:4e:89:10:89:4f:d6:b3:74:59:
fc:e2:6c:00:b9:1a:93:19:b4:49:6f:b3:30:89:53:
1f:dd:2d:73:3b:f6:bd:b1:8a:d7:1c:e9:22:18:d9:
c1:45:57:4c:53:79:57:53:e0:d4:cc:d0:86:b3:51:
96:83:77:37:69:6b:20:d8:d5:8d:20:90:97:98:bb:
01:04:5b:0a:46:68:60:0f:5c:bb:2e:34:89:8c:57:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FB:B2:B8:D7:9C:63:B3:9F:AA:F4:D5:D5:1F:B2:C6:91:F1:86:95
X509v3 Authority Key Identifier:
keyid:51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:b2:f9:f2:7f:32:db:78:fa:ff:1e:47:05:40:4a:c7:9e:85:
f4:28:c5:87:63:c2:82:56:bd:a2:88:14:f8:44:aa:92:ad:77:
9c:e4:bf:47:56:9b:f3:94:a3:44:0f:b1:6b:fd:34:38:7b:11:
d0:d6:30:48:64:a6:33:ab:c5:fb:f8:1e:a1:a1:63:e0:53:61:
e3:e2:08:2c:49:a0:01:dc:20:38:18:ba:a8:54:e9:94:8a:8f:
65:18:87:f4:6d:52:ce:13:a6:4c:9c:85:69:ac:7a:ac:f7:54:
4d:59:6a:2b:d7:c2:d8:a1:e7:b8:9e:68:e7:7d:e1:47:60:98:
ea:03:aa:7a:4f:ba:80:37:55:a9:f0:a1:8f:5c:53:d7:0c:b0:
cf:c7:fc:4c:be:31:03:c8:ca:e7:3d:40:67:3c:b9:8f:68:52:
5a:59:fa:fe:41:c8:a3:1a:8a:49:fe:e6:68:b3:63:b0:71:2f:
e7:bf:c5:00:84:79:30:ff:3e:e1:f3:18:18:e3:31:77:b7:78:
4d:93:38:f9:5b:b3:0e:68:ee:76:aa:c9:40:82:82:6c:6c:15:
bc:0e:0a:e6:76:bf:0e:63:39:9e:dd:44:2e:69:42:0b:1c:67:
b6:0d:04:40:85:8d:85:14:65:80:2c:4c:21:65:68:27:08:ee:
1d:19:17:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:07:40 2026 by rpki-client