
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
File: UtXW_72oj1ReUbr5n32s4ZPAblc.mft (raw, json)
Hash identifier: MND75aOVMx0rDznf44nIqwwa9pl81FmD3gDP/acn1GU=
Subject key identifier: C3:E7:A7:85:F1:B7:B4:2E:C4:FB:AD:6D:2A:9B:19:D6:36:B5:18:86
Authority key identifier: 52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57
Certificate issuer: /CN=A91F17F6/serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57
Certificate serial: 08E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
Manifest number: 08DA
Signing time: Sat 24 Oct 2026 20:26:07 +0000
Manifest this update: Sat 24 Oct 2026 20:26:07 +0000
Manifest next update: Sat 31 Oct 2026 20:26:07 +0000
Files and hashes: 1: UtXW_72oj1ReUbr5n32s4ZPAblc.crl (hash: xmBnUJisGh+6f0HHdUL2O34mGK1Zk80JrbKHZ5cZYbk=)
2: AF95E6D8F2B711EAA1C01744C4F9AE02.roa (hash: gn4KKIjx+cVov8CUqaUqG9obpblSjgg6mNoakxKefS0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl
rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 20:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2275 (0x8e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17F6, serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57
Validity
Not Before: Oct 24 20:26:07 2026 GMT
Not After : Oct 31 20:26:07 2026 GMT
Subject: CN=6add145f-0a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:43:89:09:d3:4a:cf:41:ef:ce:46:df:7e:
47:71:4c:35:6e:57:cc:48:f3:d4:14:c0:94:c6:33:
1d:96:1a:39:37:54:22:35:ef:72:42:5f:0e:58:e3:
37:40:bc:54:66:11:bf:cc:d8:87:ac:26:00:21:6c:
b1:fb:bd:71:55:1a:af:88:c1:0a:2e:da:ef:4e:32:
ad:4d:16:c1:c2:c7:96:e5:e2:c8:ed:66:a3:fb:4d:
ac:f3:c2:1b:3c:07:cd:16:1e:a2:75:75:fe:e4:60:
99:e0:ff:2b:33:c4:b8:c1:55:3e:1f:55:cf:ae:f6:
00:93:f3:f1:fa:58:6f:aa:6e:19:9b:a3:94:74:9f:
b3:99:61:8f:9f:c7:6a:bc:5c:0a:ad:a4:fe:08:2a:
08:8c:77:07:3f:69:ee:de:f6:bc:63:2f:b6:b9:36:
d3:a7:d5:2f:38:3e:e8:1b:a3:8f:23:26:3d:30:f8:
e8:01:8e:34:05:2c:0f:0c:83:3b:cc:05:66:90:09:
36:a1:74:61:72:b8:be:92:2d:d4:59:65:c1:08:c4:
3d:8e:6b:a1:5e:33:58:38:ef:03:8b:95:4f:12:df:
2a:37:23:cb:fc:d1:38:59:0b:11:3c:b0:c3:11:9b:
28:5f:3c:d8:46:0d:7f:95:e9:ab:1f:9a:5c:b4:04:
97:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E7:A7:85:F1:B7:B4:2E:C4:FB:AD:6D:2A:9B:19:D6:36:B5:18:86
X509v3 Authority Key Identifier:
keyid:52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:bf:3c:de:b5:af:09:f5:d2:e8:8c:ca:c1:74:0a:5f:6f:87:
55:5d:1a:f1:65:b8:d3:e2:ed:58:3d:75:6e:30:b7:82:6c:bb:
5e:a2:24:ea:44:90:a1:a4:ab:a4:2c:39:9f:c1:ef:8d:33:01:
c5:c4:13:8b:b6:e5:2a:5c:fc:16:0f:0e:c8:bd:82:c9:f7:77:
46:2f:00:63:a6:11:5e:96:dd:45:c5:1c:2a:af:7b:9b:95:f4:
83:d9:99:fa:ef:2c:a5:b9:3b:e2:33:e8:ae:cf:e6:75:e6:d5:
1f:ff:34:55:aa:f2:b5:f4:b1:31:7c:2a:9b:da:7e:2c:e2:d5:
5b:a3:5c:91:ac:b5:c7:2a:f5:9f:17:24:82:fb:5a:19:90:ac:
00:03:21:23:db:9c:d2:e8:0a:be:79:99:86:f5:74:ae:4a:57:
a8:fa:0c:5c:8c:99:ec:4a:49:9c:5a:2f:1c:e9:59:3a:ca:c4:
ae:4f:f7:ce:6c:9e:52:19:06:a6:04:72:7e:93:91:aa:d3:23:
06:dc:d2:b9:dc:52:04:08:09:2e:fa:76:04:ab:1f:49:33:62:
71:ff:e9:95:7e:83:78:54:d2:1f:10:70:49:69:8a:19:52:0a:
4a:12:4a:50:84:b1:dd:0c:f3:7d:9f:5b:d7:8d:a3:cf:9c:44:
86:d3:2a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:03:40 2026 by rpki-client