
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
File: UT3TCM11FCJ69R2AXlVApqn10zk.mft (raw, json)
Hash identifier: EcAF6IEdrjc8kwuBDIX0ocUn7gvIF0STQqZrd881YU4=
Subject key identifier: 34:09:C5:F4:3E:71:D6:84:75:3A:5F:F5:3A:4D:25:F1:61:68:C1:5C
Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
Certificate issuer: /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Certificate serial: 10E9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
Manifest number: 10DE
Signing time: Tue 06 Oct 2026 15:42:29 +0000
Manifest this update: Tue 06 Oct 2026 15:42:28 +0000
Manifest next update: Tue 13 Oct 2026 15:42:28 +0000
Files and hashes: 1: UT3TCM11FCJ69R2AXlVApqn10zk.crl (hash: uKhW56/U+cWf/OFBtbqkRUQwGr0fVtAWn1+Hwnmw+Hk=)
2: 8BCB105015EA11EC86834E2FC4F9AE02.roa (hash: mDSdFAda1UgtQqeGInQfSpAqXmZ+NIepQJMYXkdE8Hc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 15:42:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4329 (0x10e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8119, serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Validity
Not Before: Oct 6 15:42:28 2026 GMT
Not After : Oct 13 15:42:28 2026 GMT
Subject: CN=6ac516e5-b8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:65:9c:ff:4e:8d:94:d3:82:a4:fc:ec:22:fc:
52:ac:b8:dd:68:af:f8:ed:1a:fb:c1:49:3a:c5:9b:
fe:62:ff:81:78:88:74:f9:b7:57:2d:0d:70:0a:cc:
02:35:b7:e2:73:75:93:b2:ae:ca:69:d5:40:11:08:
6d:c0:45:fb:65:68:69:30:cc:d1:fe:e9:e6:88:93:
28:c2:70:5c:86:a5:1b:cb:2a:58:66:ae:73:8b:9e:
de:21:9e:eb:af:70:12:b1:bb:84:6d:9c:79:7b:09:
8e:94:26:f1:7c:21:15:15:6e:db:5f:75:99:a0:20:
a4:46:a9:dc:0e:95:3f:43:a3:f5:e3:9f:8d:63:f0:
f9:29:d9:bd:a7:62:6b:60:e1:4b:eb:06:f2:af:88:
80:0b:bd:50:e8:6d:eb:ba:e4:b6:fb:c5:6d:ab:d5:
3e:9d:46:e0:9b:c2:2d:c5:0c:8f:48:fa:20:25:6b:
53:13:3b:78:ba:b8:1e:7d:40:80:4b:f2:5e:eb:2b:
6f:71:11:15:1b:7d:05:fa:20:62:d5:30:7e:a1:9d:
01:46:d6:ea:3f:19:cc:82:32:35:7d:69:7b:bf:ea:
94:66:9a:da:eb:8d:41:63:3d:33:ad:db:65:42:cc:
d4:6b:f3:ad:fa:e5:70:66:c3:1d:0f:24:a9:19:56:
dd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:09:C5:F4:3E:71:D6:84:75:3A:5F:F5:3A:4D:25:F1:61:68:C1:5C
X509v3 Authority Key Identifier:
keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:86:17:38:92:8c:39:cb:7d:02:a5:a5:6d:ad:8a:e6:68:1c:
88:8a:53:8d:4c:fb:fb:9a:91:67:42:ad:bb:47:28:c8:9d:22:
a6:f7:ca:88:90:0e:a5:b2:44:2b:8d:88:ea:34:4d:f6:b8:c2:
53:2a:93:3c:a8:f2:b0:19:77:90:87:91:47:15:12:95:aa:a9:
17:49:fb:ad:1c:28:0e:a8:ef:d9:0b:9c:fb:a0:84:f6:f5:32:
1c:74:4c:36:92:0a:0c:62:26:df:78:a5:88:ab:06:af:66:59:
38:61:88:7c:bb:b9:0b:d1:8c:75:4e:50:18:e0:27:76:b4:82:
26:78:b5:93:d6:8f:da:a3:bd:50:74:3c:f2:0c:13:f3:23:91:
61:88:82:f2:21:d8:58:c3:d9:51:87:14:15:45:1d:6b:8e:05:
0a:31:60:08:69:77:11:07:b1:9b:c4:bc:87:62:fd:45:48:31:
f0:2a:69:23:4e:8d:a9:51:1d:b5:f5:10:94:27:14:da:b9:5a:
8e:bf:ec:fe:88:c8:24:37:88:86:fd:4a:ed:b5:2d:fb:41:6f:
1b:03:28:6f:0d:03:d4:94:a1:76:58:aa:56:2d:ec:16:33:ea:
6f:af:6e:1b:88:e1:8a:34:f7:d3:d1:eb:3b:ee:1f:69:62:92:
cb:2f:91:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgxMTkxMTAvBgNVBAUTKDUxM0REMzA4Q0Q3NTE0MjI3QUY1MUQ4MDVFNTU0MEE2
QTlGNUQzMzkwHhcNMjYxMDA2MTU0MjI4WhcNMjYxMDEzMTU0MjI4WjAYMRYwFAYD
VQQDEw02YWM1MTZlNS1iOGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3mWc/06NlNOCpPzsIvxSrLjdaK/47Rr7wUk6xZv+Yv+BeIh0+bdXLQ1wCswC
Nbfic3WTsq7KadVAEQhtwEX7ZWhpMMzR/unmiJMownBchqUbyypYZq5zi57eIZ7r
r3ASsbuEbZx5ewmOlCbxfCEVFW7bX3WZoCCkRqncDpU/Q6P145+NY/D5Kdm9p2Jr
YOFL6wbyr4iAC71Q6G3ruuS2+8Vtq9U+nUbgm8ItxQyPSPogJWtTEzt4urgefUCA
S/Je6ytvcREVG30F+iBi1TB+oZ0BRtbqPxnMgjI1fWl7v+qUZpra641BYz0zrdtl
QszUa/Ot+uVwZsMdDySpGVbdEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQJxfQ+
cdaEdTpf9TpNJfFhaMFcMB8GA1UdIwQYMBaAFFE90wjNdRQievUdgF5VQKap9dM5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS80RTJEN0EzODUx
NDAxMUU5OEQ5ODNCNjFDNEY5QUUwMi9VVDNUQ00xMUZDSjY5UjJBWGxWQXBxbjEw
emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VUM1RDTTExRkNKNjlSMkFYbFZBcHFuMTB6ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODExOS80RTJEN0EzODUxNDAxMUU5OEQ5ODNCNjFDNEY5QUUwMi9VVDNUQ00xMUZD
SjY5UjJBWGxWQXBxbjEwemsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL4YXOJKMOct9AqWlba2K5mgciIpTjUz7+5qRZ0Ktu0coyJ0ipvfKiJAOpbJE
K42I6jRN9rjCUyqTPKjysBl3kIeRRxUSlaqpF0n7rRwoDqjv2Quc+6CE9vUyHHRM
NpIKDGIm33iliKsGr2ZZOGGIfLu5C9GMdU5QGOAndrSCJni1k9aP2qO9UHQ88gwT
8yORYYiC8iHYWMPZUYcUFUUda44FCjFgCGl3EQexm8S8h2L9RUgx8CppI06NqVEd
tfUQlCcU2rlajr/s/ojIJDeIhv1K7bUt+0FvGwMobw0D1JShdliqVi3sFjPqb69u
G4jhijT309HrO+4faWKSyy+RDA==
-----END CERTIFICATE-----
Generated at Wed Oct 7 13:18:00 2026 by rpki-client