
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
File: uttpn6AqlXLm70n0-Rof4Kc8LI0.mft (raw, json)
Hash identifier: ceS8VSakRK8kntXSeiFTD2/MDCW9u9epEknhbQAcHDE=
Subject key identifier: 58:79:D9:35:0D:9D:40:63:3F:A6:D6:4F:10:2D:85:33:38:70:21:6E
Authority key identifier: BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D
Certificate issuer: /CN=A91E27B9/serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D
Certificate serial: 08AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
Manifest number: 0897
Signing time: Sat 04 Apr 2026 20:24:55 +0000
Manifest this update: Sat 04 Apr 2026 20:24:55 +0000
Manifest next update: Sat 11 Apr 2026 20:24:55 +0000
Files and hashes: 1: uttpn6AqlXLm70n0-Rof4Kc8LI0.crl (hash: 5fC2FGLtWcpayG77oACyfPcSmKcYzTk4Qz51x9esF/4=)
2: C8BD376C3ADF11EC85EB255FC4F9AE02.roa (hash: Hp4zWKni3ZG5s7a7I6JrXD6v+vCWtd+NXlSrK9iVhUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl
rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2223 (0x8af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E27B9, serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D
Validity
Not Before: Apr 4 20:24:55 2026 GMT
Not After : Apr 11 20:24:55 2026 GMT
Subject: CN=69d17397-1799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:72:ee:0d:ba:a1:24:aa:1b:b2:e3:2e:4e:62:
f0:be:0b:39:eb:55:7c:27:56:49:59:cc:5e:ec:12:
4e:1d:ff:63:4d:be:0a:6c:9b:d4:27:9e:01:7e:9f:
28:4c:ad:2f:36:f8:52:70:a5:54:80:b3:dd:a0:6f:
ba:0a:d9:23:11:2a:3d:89:b6:2f:b7:2c:9e:58:a0:
42:a9:04:ef:9d:41:bd:4f:51:0b:e6:bd:55:fc:72:
67:74:56:9a:55:54:69:74:ad:df:62:50:c3:b5:a7:
09:b0:d4:c9:33:98:7f:25:5d:0c:e8:95:75:2a:2a:
cb:5c:c1:19:7c:52:2c:33:fc:dd:ac:2b:78:44:1d:
e0:08:5f:69:1c:5f:c7:23:94:f0:44:5c:b9:ea:fe:
83:13:dc:b3:c3:6a:ce:30:77:60:ba:fd:ed:f0:78:
b9:33:b9:fe:7b:d4:50:e7:8c:b9:e8:f8:e0:23:e4:
02:6f:f7:ea:00:b4:de:9c:fc:5d:f8:58:61:9a:26:
01:33:0a:36:9f:16:39:78:9d:0f:b6:93:fb:10:b1:
b4:f2:ff:13:2b:5b:c5:04:18:9a:81:b0:30:0d:b4:
b8:c9:4c:a1:10:39:b9:80:73:b2:f9:ba:a7:79:55:
d1:13:ae:85:3d:8b:5d:44:8e:eb:04:78:68:38:ec:
8a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:79:D9:35:0D:9D:40:63:3F:A6:D6:4F:10:2D:85:33:38:70:21:6E
X509v3 Authority Key Identifier:
keyid:BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:08:da:ad:d3:94:6c:c3:60:b4:b0:1a:6d:ea:68:6f:e3:00:
49:45:4f:f8:82:ba:cd:c1:6e:e1:13:b1:bc:22:09:7a:c1:4a:
4f:e8:67:70:90:13:23:9c:19:21:fd:66:31:25:ec:35:19:1f:
b7:75:96:4c:bd:f5:28:4f:9a:b4:64:bc:41:20:5f:88:a1:a5:
ca:f8:76:74:fd:e6:52:58:2a:bf:f4:c4:3f:1e:30:d7:3d:e2:
0c:30:e7:58:ad:3d:74:ff:50:3e:3f:fe:d9:0c:da:19:6a:b8:
07:c5:13:19:e9:26:82:9c:c4:5b:22:2d:fc:9f:99:19:e9:50:
f5:ef:41:d7:93:dd:53:77:c5:25:79:9a:01:2f:ea:2f:05:3b:
20:23:48:3e:71:09:9d:ca:26:33:1d:c5:a1:86:91:ae:de:41:
77:24:15:6b:1c:ea:8e:40:53:e6:c0:cd:74:06:23:ee:a6:bd:
d8:89:5c:69:3c:29:46:4f:27:e2:8e:26:6b:f4:40:24:d8:bd:
12:6f:bc:fa:25:08:06:f5:bf:a7:e4:54:13:fc:f5:dc:8d:5d:
43:3d:85:48:86:ed:43:97:76:99:7d:6e:98:4b:44:0d:dc:62:
c3:ed:18:b4:b2:6d:97:54:59:37:17:34:ed:f3:2b:a1:8a:8c:
4c:fe:b1:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI3QjkxMTAvBgNVBAUTKEJBREI2OTlGQTAyQTk1NzJFNkVGNDlGNEY5MUExRkUw
QTczQzJDOEQwHhcNMjYwNDA0MjAyNDU1WhcNMjYwNDExMjAyNDU1WjAYMRYwFAYD
VQQDEw02OWQxNzM5Ny0xNzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4HLuDbqhJKobsuMuTmLwvgs561V8J1ZJWcxe7BJOHf9jTb4KbJvUJ54Bfp8o
TK0vNvhScKVUgLPdoG+6CtkjESo9ibYvtyyeWKBCqQTvnUG9T1EL5r1V/HJndFaa
VVRpdK3fYlDDtacJsNTJM5h/JV0M6JV1KirLXMEZfFIsM/zdrCt4RB3gCF9pHF/H
I5TwRFy56v6DE9yzw2rOMHdguv3t8Hi5M7n+e9RQ54y56PjgI+QCb/fqALTenPxd
+FhhmiYBMwo2nxY5eJ0PtpP7ELG08v8TK1vFBBiagbAwDbS4yUyhEDm5gHOy+bqn
eVXRE66FPYtdRI7rBHhoOOyK3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFh52TUN
nUBjP6bWTxAthTM4cCFuMB8GA1UdIwQYMBaAFLrbaZ+gKpVy5u9J9PkaH+CnPCyN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjdCOS84NEJBNzQ4MkYw
Q0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZBcWxYTG03MG4wLVJvZjRLYzhM
STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V0dHBuNkFxbFhMbTcwbjAtUm9mNEtjOExJMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjdCOS84NEJBNzQ4MkYwQ0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZBcWxY
TG03MG4wLVJvZjRLYzhMSTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFgjardOUbMNgtLAabepob+MASUVP+IK6zcFu4ROxvCIJesFKT+hncJATI5wZ
If1mMSXsNRkft3WWTL31KE+atGS8QSBfiKGlyvh2dP3mUlgqv/TEPx4w1z3iDDDn
WK09dP9QPj/+2QzaGWq4B8UTGekmgpzEWyIt/J+ZGelQ9e9B15PdU3fFJXmaAS/q
LwU7ICNIPnEJncomMx3FoYaRrt5BdyQVaxzqjkBT5sDNdAYj7qa92IlcaTwpRk8n
4o4ma/RAJNi9Em+8+iUIBvW/p+RUE/z13I1dQz2FSIbtQ5d2mX1umEtEDdxiw+0Y
tLJtl1RZNxc07fMroYqMTP6xKg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 10:23:56 2026 by rpki-client