
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
File: utY-wFoDGPl_MVby4gWcYZPOOAo.mft (raw, json)
Hash identifier: +V0Q6iTRd7DQsQbRmvTNEImaaK7YVwL/+aaMLDQcsy0=
Subject key identifier: FF:23:AC:B3:1A:80:34:20:3D:BF:D3:61:89:33:1D:37:B2:54:2C:4A
Authority key identifier: BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A
Certificate issuer: /CN=A91D5A49/serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A
Certificate serial: 02DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
Manifest number: 02DE
Signing time: Mon 05 Oct 2026 01:17:54 +0000
Manifest this update: Mon 05 Oct 2026 01:17:54 +0000
Manifest next update: Mon 12 Oct 2026 01:17:54 +0000
Files and hashes: 1: utY-wFoDGPl_MVby4gWcYZPOOAo.crl (hash: CMt1Gk403H2KppBCElYEEZFWI3p9bJkJJUnZ8gD1I5Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl
rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 01:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 734 (0x2de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5A49, serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A
Validity
Not Before: Oct 5 01:17:54 2026 GMT
Not After : Oct 12 01:17:54 2026 GMT
Subject: CN=6ac2fac2-f3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8f:6a:d4:5b:e9:58:ad:a4:f5:78:9b:af:49:
e6:6b:b5:f5:c2:ea:f7:8c:56:7d:d4:d3:e1:70:57:
6b:ee:bc:64:f7:bd:7f:06:ea:3e:7f:04:fb:31:6d:
1c:a2:e3:6d:0c:9f:32:f9:c5:d2:ea:30:92:f5:cc:
20:7f:03:8a:33:17:10:6d:af:fc:e8:00:ae:19:27:
71:6d:65:a2:fb:71:a4:d8:07:65:5b:80:69:f2:48:
ed:b3:82:be:9a:19:ab:f1:a8:7e:5a:72:ce:c4:68:
2f:d6:ce:f8:7c:5a:bd:5d:a0:fb:eb:ff:1c:70:e4:
ff:11:e5:1f:ad:3a:fe:9f:fc:22:51:38:cb:50:1d:
65:3e:76:24:00:25:22:60:ea:4c:ce:f9:77:a6:40:
3f:c8:77:d9:7d:23:85:a2:89:01:36:b9:d7:8b:2d:
48:43:8b:11:2f:d1:c4:c7:0b:73:8d:46:ec:90:6b:
62:e9:d0:d9:15:f9:0c:ce:00:f5:6f:dd:be:c4:c9:
f7:e4:91:b0:6b:cf:69:c1:42:dd:eb:d4:a3:57:1e:
4a:07:27:6f:cc:01:97:76:c7:d6:43:45:e7:62:90:
d4:e9:b5:21:7d:b2:13:6b:00:cd:9e:e3:bf:f1:d9:
28:e4:b7:0f:97:90:5c:3f:cc:a9:c8:01:c4:14:1f:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:23:AC:B3:1A:80:34:20:3D:BF:D3:61:89:33:1D:37:B2:54:2C:4A
X509v3 Authority Key Identifier:
keyid:BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:6c:5f:93:7b:af:ef:b3:41:8c:ac:a6:0f:3c:97:d5:64:df:
18:45:d8:1d:d4:a5:21:be:c0:b0:f2:71:bd:da:e7:3b:a5:45:
be:80:fc:89:ea:29:d4:2b:9e:2f:03:2b:c1:a0:ac:60:46:7e:
57:07:ee:a9:72:15:e0:f8:94:35:46:c7:3f:a1:72:07:3b:81:
46:69:b4:06:2e:bf:99:04:54:55:07:b6:2b:08:92:4b:f2:b9:
84:61:1a:05:d3:85:9b:d2:2c:9a:ee:ff:0c:c2:2c:f3:ce:85:
95:a9:4c:2f:ae:64:a6:c2:4a:02:3e:f5:78:c1:67:53:56:c2:
06:95:f0:18:19:2d:7c:85:8e:70:03:80:71:9a:fe:ad:ff:80:
05:d3:a0:15:b6:ba:1b:0b:5a:ad:eb:f7:80:bf:60:5d:50:c2:
a2:53:20:67:5e:8e:88:3c:6c:90:92:c4:82:0c:bf:42:f8:23:
37:06:db:9c:46:c6:31:6f:57:59:80:25:27:f2:68:a7:98:cc:
18:c4:b9:2e:eb:b2:8f:9d:3a:fa:37:a0:cc:15:8d:82:59:7a:
5d:e0:fb:b2:68:f5:3d:4f:2f:f2:96:06:98:ad:a2:d4:c3:b1:
ed:a8:49:a8:a8:67:6f:52:33:2f:a3:37:06:80:d5:8b:33:5d:
11:e8:cc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:14:29 2026 by rpki-client