
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
File: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft (raw, json)
Hash identifier: tr79fv+mGmAmaVg02UaUtPZx0EmXu8kHnw2Gl3EsKVg=
Subject key identifier: 6C:D4:8F:E1:73:46:86:43:11:99:85:17:03:F9:F5:79:4E:2A:B6:5A
Authority key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
Certificate issuer: /CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
Certificate serial: 0C1A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
Manifest number: 0C0F
Signing time: Fri 04 Sep 2026 18:44:42 +0000
Manifest this update: Fri 04 Sep 2026 18:44:42 +0000
Manifest next update: Fri 11 Sep 2026 18:44:42 +0000
Files and hashes: 1: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl (hash: DLpQiZ9Dq6JHMzjlL1lR2yoNuNvxlOEej93lt6H2r0s=)
2: BC60BC2A63F711EA8CBEB029C4F9AE02.roa (hash: cA+0IoAyCHHDkjIL9MPmk5AdVUHzu0n7NznpD3I+o6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl
rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3098 (0xc1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EF51, serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
Validity
Not Before: Sep 4 18:44:42 2026 GMT
Not After : Sep 11 18:44:42 2026 GMT
Subject: CN=6a9b119a-8732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d4:b0:90:f1:6c:63:e6:52:e3:50:e5:e2:b9:
39:90:32:7e:20:cb:3d:06:99:43:9b:03:68:2f:cb:
5f:4f:c5:8b:23:d9:f9:b9:62:f3:b5:ae:ef:36:c4:
93:34:0c:41:2f:9b:5f:95:bc:33:fe:a2:78:56:11:
c1:dc:b2:93:54:ea:80:66:72:b9:9a:98:50:c8:59:
95:d3:1a:1f:71:04:df:22:d7:52:57:5b:36:88:94:
d0:a5:fc:9e:b4:7e:49:a3:51:80:a3:cb:cb:6f:0d:
c8:5f:56:cb:6b:42:e5:d0:0f:9e:6e:5d:1d:e5:01:
ce:1a:7c:f6:5a:4a:98:3a:2e:ed:d9:25:c8:35:1f:
5a:ad:62:00:fa:8a:1f:17:01:6d:f1:9f:bc:f3:c9:
33:35:5e:4e:a1:d0:ce:3e:f6:c2:05:63:d8:12:e8:
ce:1d:12:17:53:16:ea:c4:2b:e8:7f:e6:44:a4:85:
c3:5e:8c:d2:6c:ed:97:38:87:fa:8e:48:2c:5c:06:
6f:99:31:c2:e0:5a:79:c8:7d:d8:3c:0d:4b:57:ae:
d7:fa:88:59:71:13:fa:46:ed:f7:93:cd:2e:fc:3c:
ed:72:dd:46:f9:7e:37:d1:19:83:20:42:98:8d:77:
20:bb:cd:73:f6:79:4e:4e:7f:4f:45:8f:ea:31:a3:
03:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D4:8F:E1:73:46:86:43:11:99:85:17:03:F9:F5:79:4E:2A:B6:5A
X509v3 Authority Key Identifier:
keyid:52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:c3:21:77:b3:9d:1f:c8:ef:92:19:03:45:b1:17:29:09:bb:
94:50:3a:92:a4:13:e9:c5:c3:80:ff:dc:e9:b8:8c:66:90:38:
1c:eb:6f:2a:51:22:00:7d:48:60:c3:e3:2c:5e:c9:89:c4:b6:
90:8d:6f:a2:77:a7:d3:40:04:a2:36:06:54:42:4d:c1:e9:ad:
39:d6:ed:3f:64:f7:3c:1d:c9:57:89:f0:1b:7f:fe:c8:b9:00:
4a:c1:a4:6d:59:38:b7:2e:17:34:5c:eb:3f:20:44:0a:cf:98:
42:68:86:72:a8:2d:69:56:1d:17:39:63:b4:36:03:4c:36:5a:
ab:12:42:44:c8:3d:60:3d:da:27:5d:7f:c0:cc:d1:0b:82:30:
cb:22:59:7b:1a:74:e5:9a:a0:85:6b:b9:82:06:43:29:e4:82:
9c:cf:50:91:14:b6:a4:c8:0e:60:1e:b0:ac:81:df:83:c7:55:
f3:20:d4:9a:cd:1c:99:8c:7e:d6:af:89:72:b2:7f:c7:7c:d8:
08:a0:63:29:72:88:5c:c6:51:2b:be:3d:83:bd:4e:94:16:4a:
59:0e:99:57:3f:ed:63:3d:a6:48:22:c2:6f:9d:d0:57:3a:69:
3c:d7:d0:a1:6f:2b:d7:d4:19:eb:92:e6:e0:cd:fb:b9:b9:53:
89:b7:e8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:07:03 2026 by rpki-client