
$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
File: 3JAYFdyRlzyvoZqLV2-GjphBPjk.mft (raw, json)
Hash identifier: L6M4TS+Zjlsc3QiS/u9XkWVmfFviZs3cvEyr9S/RpZY=
Subject key identifier: 86:78:EF:D3:F6:A8:FA:B7:F7:1F:6F:68:A3:08:19:1D:29:5B:4F:1E
Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39
Certificate issuer: /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39
Certificate serial: 1CAA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
Manifest number: 1CA8
Signing time: Wed 22 Jul 2026 16:14:59 +0000
Manifest this update: Wed 22 Jul 2026 16:14:59 +0000
Manifest next update: Wed 29 Jul 2026 16:14:59 +0000
Files and hashes: 1: 3JAYFdyRlzyvoZqLV2-GjphBPjk.crl (hash: 9e0t+ynvo+CKzmWgojsKL3qMx5NrYyvAzKh3FQqD+lE=)
2: 947F9724B93411F0909C206FC4F9AE02.roa (hash: 0EFTU/dv0CDsv/1McWF5wFSfQbHyynwC/0ZL4k27h+4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl
rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7338 (0x1caa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91168B5, serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39
Validity
Not Before: Jul 22 16:14:59 2026 GMT
Not After : Jul 29 16:14:59 2026 GMT
Subject: CN=6a60ec83-a4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:60:2d:66:81:a8:b7:c9:b9:3c:38:08:87:
2e:19:a1:54:88:e3:94:7a:0a:6e:5f:18:a4:52:56:
b2:a2:ea:1e:c0:79:69:5d:3e:0d:15:67:82:3f:bf:
79:2b:54:d6:26:18:88:0f:98:db:c4:5c:09:82:fd:
52:3f:23:f9:75:08:62:19:85:59:d9:43:3f:43:45:
28:36:83:1a:5c:1d:6d:07:12:b8:81:5d:e1:3f:e8:
09:00:60:41:a6:aa:a5:d5:b4:30:4f:c9:1c:f5:aa:
9c:22:29:57:74:d3:d6:41:5a:bb:ab:95:05:5e:07:
82:bb:88:a9:19:84:a0:c6:ad:01:30:21:95:c4:d7:
89:46:48:ea:3d:20:9f:f6:99:9b:ad:6b:05:df:d1:
8a:4f:da:6c:30:1e:86:2c:14:da:d5:46:61:0a:1c:
6c:39:19:0a:2b:1e:0e:12:8a:cc:70:5f:90:7c:31:
71:bd:0c:c5:d2:96:92:e6:f6:e5:c6:c4:b3:f8:2f:
13:14:43:61:99:10:6e:1d:27:f0:0e:3d:91:d4:b8:
bb:92:00:51:07:55:71:f5:92:d4:f4:77:74:0d:0d:
c1:cc:27:c5:df:35:65:a0:81:e8:ac:67:2f:2f:ef:
ae:16:ef:61:48:4a:60:1d:24:e2:bf:33:a7:91:f6:
10:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:78:EF:D3:F6:A8:FA:B7:F7:1F:6F:68:A3:08:19:1D:29:5B:4F:1E
X509v3 Authority Key Identifier:
keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:7c:e1:db:e9:0a:1c:66:ac:26:df:bf:52:4d:5c:64:f5:8e:
3c:14:8a:83:59:a6:ca:41:8c:d2:7d:a1:fb:49:77:8d:11:3c:
05:7c:f3:d8:03:17:db:c6:71:48:fd:c9:c1:53:82:25:dd:c8:
ff:23:c2:e7:bf:3a:ec:1c:89:c2:58:0f:96:de:10:e2:69:98:
46:2c:ed:cd:7c:da:6d:21:91:ac:d5:cd:61:42:a2:d7:f3:0a:
89:a3:a8:06:a4:02:a2:be:bd:dd:8c:e8:a4:59:1a:f7:6d:4c:
5a:fe:6d:16:b2:e5:7d:14:9f:e3:a1:8c:ed:b8:de:17:51:61:
64:2e:6e:cb:9e:ed:c1:3c:d3:65:cb:35:71:04:5f:6d:41:25:
0f:8e:e3:ae:2b:46:da:e1:a5:8c:fe:28:ed:6d:55:6f:04:6c:
93:1c:f6:cc:71:34:79:b0:62:6c:26:63:28:86:b0:cf:62:76:
f5:77:89:46:fc:c1:09:8e:80:7a:ca:63:20:ef:7b:49:ab:a9:
c0:cb:53:97:a8:d7:a2:4e:a6:13:8b:6b:33:2e:18:77:f5:49:
c2:81:39:82:ba:f5:d8:4e:f1:a6:08:c9:ea:bf:9d:85:aa:c1:
88:58:88:6b:af:d5:52:70:12:87:0a:aa:e7:86:7c:64:c4:b1:
7f:24:8a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:23:55 2026 by rpki-client