
$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
File: 3JAYFdyRlzyvoZqLV2-GjphBPjk.mft (raw, json)
Hash identifier: df3SMHOYeSQUgfjWczF9GbPQQZdd7K2B3mxSnRGB7ZU=
Subject key identifier: B9:DA:39:DB:F0:F3:3A:35:81:2B:67:AD:FE:46:5F:30:26:EE:9A:BE
Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39
Certificate issuer: /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39
Certificate serial: 1C86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
Manifest number: 1C84
Signing time: Tue 12 May 2026 16:10:57 +0000
Manifest this update: Tue 12 May 2026 16:10:57 +0000
Manifest next update: Tue 19 May 2026 16:10:57 +0000
Files and hashes: 1: 3JAYFdyRlzyvoZqLV2-GjphBPjk.crl (hash: aTm/rWdJ2HIVa+IMqL+8SypW1SX2o/Hznshk/fDDdfc=)
2: 947F9724B93411F0909C206FC4F9AE02.roa (hash: 0EFTU/dv0CDsv/1McWF5wFSfQbHyynwC/0ZL4k27h+4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl
rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:10:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7302 (0x1c86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91168B5, serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39
Validity
Not Before: May 12 16:10:57 2026 GMT
Not After : May 19 16:10:57 2026 GMT
Subject: CN=6a035111-c582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:8c:6e:e4:d2:67:e7:26:7d:c7:06:84:51:
24:c1:e3:38:49:44:70:15:90:9e:9b:64:10:db:93:
d2:4b:cf:ca:9b:94:19:54:67:43:e3:e9:4d:9b:bb:
06:48:f2:86:b7:50:84:04:a6:f9:fd:e2:38:cc:e2:
8d:53:44:ee:e7:b1:2a:bb:ef:bb:33:95:ef:83:0a:
48:91:4b:aa:ec:35:b5:ac:e9:c0:b8:8c:0e:5c:f0:
e3:73:68:e7:d6:0e:67:f6:e3:e0:db:af:07:e0:0c:
14:6b:6d:36:2e:21:3d:9e:65:18:67:97:c1:95:e0:
6c:b0:f2:7b:0d:03:1a:30:ca:72:4a:8b:0e:a6:8d:
ae:8b:59:ec:72:b3:a3:cf:4f:b1:d3:3c:e1:22:d3:
0b:89:fa:ef:3c:f5:cd:26:98:60:cb:45:3a:4e:e6:
b8:24:e2:cb:6c:1f:34:42:58:b0:f8:6c:cc:20:9f:
a6:1d:ce:89:80:4c:8c:58:34:d8:6e:ee:e7:05:01:
38:b3:11:e0:f4:62:6b:ce:a4:e7:f1:6e:51:2e:3b:
e3:49:0b:b3:13:83:25:24:dc:6c:87:a8:03:75:6b:
84:5e:3f:86:ec:7f:54:a8:d8:24:ae:80:ea:17:d8:
e0:3e:9b:d7:36:1f:ff:c7:8d:00:8b:25:c7:f9:f6:
c7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DA:39:DB:F0:F3:3A:35:81:2B:67:AD:FE:46:5F:30:26:EE:9A:BE
X509v3 Authority Key Identifier:
keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:04:dd:a1:b6:54:fa:f8:f4:1c:57:ae:72:6a:aa:1e:14:ec:
23:88:92:ee:02:cd:e7:ae:7d:12:7e:cd:27:87:56:fd:ec:6c:
14:d3:3f:46:8c:21:3d:a0:20:01:96:8b:1b:61:8b:86:da:5f:
36:2f:25:6c:92:a6:d6:c8:8f:7e:ab:bd:05:4a:31:27:e2:be:
99:14:5d:83:ce:bd:a9:0a:f5:05:d3:b0:37:00:e7:40:a8:b2:
ff:3d:36:6c:e9:93:54:4b:e3:5f:a2:ae:dd:7c:9c:9c:7c:d6:
a6:bf:79:da:2a:b4:04:6f:48:e9:cc:ba:3f:a9:e4:ef:47:d1:
66:7a:d6:70:44:f6:9a:70:70:c3:80:47:b9:8c:4f:23:e0:f9:
33:2e:df:cc:a5:ef:96:76:e7:19:4e:46:56:74:43:80:ef:25:
6f:ca:6f:b6:84:39:22:36:0e:be:c2:65:78:ab:2e:86:d1:12:
2c:9e:a0:93:58:88:d2:1f:61:8a:5f:33:99:fe:4f:5d:20:54:
f1:df:15:66:d8:f8:2b:1e:5a:39:90:63:72:b1:59:83:36:85:
b0:62:88:42:b6:ba:d6:ce:c5:2c:32:88:31:c6:d5:84:c7:af:
69:37:ea:34:93:0f:90:b7:b8:3f:c0:6c:42:b9:7d:3e:1d:46:
b5:12:b8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:42:30 2026 by rpki-client