
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
File: UtXW_72oj1ReUbr5n32s4ZPAblc.mft (raw, json)
Hash identifier: rZTsl+LvxfV1SuSSXv3KWscYGjFNEqnhyJLmBde0/es=
Subject key identifier: A3:24:7A:84:B5:BE:1E:E4:43:44:90:A4:C7:4F:3B:83:68:2C:EA:AC
Authority key identifier: 52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57
Certificate issuer: /CN=A91F17F6/serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57
Certificate serial: 0897
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
Manifest number: 088E
Signing time: Thu 28 May 2026 20:29:03 +0000
Manifest this update: Thu 28 May 2026 20:29:02 +0000
Manifest next update: Thu 04 Jun 2026 20:29:02 +0000
Files and hashes: 1: UtXW_72oj1ReUbr5n32s4ZPAblc.crl (hash: o/RVSdNZ0uCK2NWpMqbT4m7rfXuXsDrWLyc/lB529HA=)
2: AF95E6D8F2B711EAA1C01744C4F9AE02.roa (hash: gn4KKIjx+cVov8CUqaUqG9obpblSjgg6mNoakxKefS0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl
rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 20:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2199 (0x897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17F6, serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57
Validity
Not Before: May 28 20:29:02 2026 GMT
Not After : Jun 4 20:29:02 2026 GMT
Subject: CN=6a18a58f-95fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:56:e1:7d:e1:13:52:e8:5c:c6:f7:2f:f2:
49:b0:73:1f:24:ce:c7:3e:ad:1f:c3:71:26:38:f4:
9e:da:10:b0:9e:83:ff:4f:54:78:67:19:86:a5:87:
7c:0c:23:98:fd:c0:02:d7:67:f2:4a:79:cc:bd:06:
3b:aa:da:87:ef:00:2d:f8:35:81:e8:93:a2:6d:c9:
17:76:6f:a2:90:f2:14:40:c3:0a:54:8b:08:68:a2:
45:97:9c:6a:4b:eb:9e:2f:eb:bb:76:29:f5:2e:51:
a9:32:c1:82:e7:2d:88:18:fa:11:c2:eb:c0:d6:ea:
49:6a:05:af:a2:31:e5:0d:50:3c:bb:b8:93:cb:f5:
8b:23:d3:63:b6:b9:86:ea:9f:76:68:1c:d3:4f:f2:
54:d4:c5:5a:23:6b:82:e6:ef:5c:b5:f1:7a:41:06:
3d:b9:ab:20:b3:21:54:be:aa:b5:59:4c:7d:a3:1b:
4e:8a:b5:ad:1f:5a:42:86:cf:c1:07:58:da:26:3c:
57:36:74:b7:2f:63:d4:9f:84:3c:e6:c4:47:8a:8b:
26:72:fb:d1:6e:2f:2d:a0:18:de:16:f7:9b:9a:12:
dd:88:52:cf:eb:77:ab:91:3c:f7:45:b4:9b:a5:cc:
b8:33:42:81:f9:bb:e6:21:02:11:e5:42:e7:50:91:
05:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:24:7A:84:B5:BE:1E:E4:43:44:90:A4:C7:4F:3B:83:68:2C:EA:AC
X509v3 Authority Key Identifier:
keyid:52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:bc:86:0d:cd:b7:e2:af:b9:85:b5:e1:91:ca:17:60:a2:a7:
59:62:46:96:0b:0a:c1:a4:ba:d8:aa:f6:33:11:d7:b7:3d:9f:
70:79:ce:fc:a0:47:7b:76:da:4e:bd:af:c7:75:09:54:ef:66:
0e:14:9a:48:46:da:7f:c4:88:6b:1b:34:26:3c:89:6a:89:83:
dc:23:41:8f:16:8b:cf:73:f5:19:4c:ac:87:4a:dc:6d:3f:ec:
01:89:d3:cb:1b:d1:e2:be:4a:ee:8a:21:c6:d7:15:07:5a:55:
c2:25:45:c7:fd:f6:4a:75:c3:ca:5a:87:d3:e4:1f:19:cc:69:
5a:0e:08:d4:a7:0e:45:cb:98:47:7b:0a:d6:c5:55:8a:4c:19:
1f:5b:ba:28:32:38:89:87:1e:6c:72:da:55:fa:d2:0f:d8:53:
40:e4:0b:98:79:05:20:8c:71:0d:70:02:a3:84:c9:0a:17:f1:
2c:5a:48:7f:35:eb:7f:8b:98:e5:e4:6d:23:1b:1a:0d:d7:7a:
05:a2:c5:3c:f8:5a:4a:d2:17:9e:ca:13:79:3c:36:e4:6b:c2:
0a:6a:4b:8f:d8:83:97:e9:f4:a9:60:c2:cd:f8:7d:82:64:04:
30:0a:a9:be:37:42:36:f8:db:5c:db:f9:67:bb:9d:97:d7:8d:
f4:eb:02:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 17:08:25 2026 by rpki-client