
$ rpki-client -vvf rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft
File: v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft (raw, json)
Hash identifier: 5t0FE0E7Zhztekkm+rJKpTUbMfoaC/xFQNnmrtFDt6Q=
Subject key identifier: 40:E6:D3:99:83:A9:89:6A:8E:37:DF:09:F5:08:45:0C:17:C7:25:1C
Authority key identifier: BF:7B:CA:F1:90:9C:10:BC:FE:A0:D8:E7:D4:5D:82:54:F2:69:C6:BF
Certificate issuer: /CN=A91401C4/serialNumber=BF7BCAF1909C10BCFEA0D8E7D45D8254F269C6BF
Certificate serial: 35CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft
Manifest number: 3596
Signing time: Wed 22 Jul 2026 14:16:01 +0000
Manifest this update: Wed 22 Jul 2026 14:16:00 +0000
Manifest next update: Wed 29 Jul 2026 14:16:00 +0000
Files and hashes: 1: v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl (hash: vD0DHJ4TnHQQpIOUoJOBCtCZ899AFCPQ9j7Wv2+bLME=)
2: 13773D180C8111EB9BD25070C4F9AE02.roa (hash: 3iV0EKq4wQfXSWe2KfpZNIU6xJqtVDMzninH5z6wDn8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl
rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13772 (0x35cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91401C4, serialNumber=BF7BCAF1909C10BCFEA0D8E7D45D8254F269C6BF
Validity
Not Before: Jul 22 14:16:00 2026 GMT
Not After : Jul 29 14:16:00 2026 GMT
Subject: CN=6a60d0a0-db09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:1b:6e:25:11:a0:d4:26:58:ec:97:39:89:
40:c4:a5:d5:ad:fb:e7:6d:61:78:a0:7b:fe:a4:39:
f1:3f:b9:22:77:93:bb:ac:26:6f:fa:15:99:c3:67:
d0:c0:49:c9:42:5b:eb:4c:ac:e8:22:3f:9b:68:c7:
82:4d:4a:2b:e7:10:da:1a:9c:5f:9a:95:b1:52:94:
3f:58:19:a1:4b:5c:71:b9:cd:68:a9:88:38:cc:c5:
ed:00:83:d3:dc:a1:36:1e:f5:f0:72:9f:35:15:c8:
0c:b0:33:8a:4b:9b:53:61:c9:99:f9:02:e4:01:42:
97:15:51:0f:a7:33:97:1b:14:9f:6e:57:c7:21:da:
d4:38:93:00:9d:9f:f8:63:31:e3:67:f3:16:96:d5:
10:c1:54:25:4d:af:0a:81:8c:1c:4b:e1:2c:63:eb:
9e:fd:b7:81:c6:6c:9a:0b:3b:a4:6d:be:12:9a:e2:
f8:57:52:0a:9b:45:ea:f3:93:6e:b6:a7:66:1b:b9:
89:2d:00:da:68:01:f8:0f:b6:35:9f:95:f9:af:9b:
86:b4:fa:58:b9:9d:9e:31:68:0e:7c:fd:6e:36:99:
3b:7f:cf:7b:bb:5c:6e:80:97:39:d3:1e:24:bf:15:
65:e6:69:5f:de:f1:20:20:c5:83:66:54:25:39:46:
41:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E6:D3:99:83:A9:89:6A:8E:37:DF:09:F5:08:45:0C:17:C7:25:1C
X509v3 Authority Key Identifier:
keyid:BF:7B:CA:F1:90:9C:10:BC:FE:A0:D8:E7:D4:5D:82:54:F2:69:C6:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1c:ab:3e:73:c0:21:ee:2f:c8:8f:07:a1:1c:74:8b:53:85:
4e:92:b4:0d:21:41:b0:eb:4c:57:05:6f:59:3e:60:62:ad:6c:
89:f4:d7:57:e0:d9:6d:e9:ef:7c:19:31:48:8e:8f:b2:18:ef:
c2:48:9b:3f:04:6d:63:79:f6:0f:20:d0:3c:80:49:a5:df:cf:
8b:79:7f:2a:1c:03:71:99:e5:5a:fc:d1:d3:eb:c5:19:81:e2:
00:7b:f5:15:43:9f:81:4a:1c:e7:2f:54:02:85:03:78:a9:02:
fa:5c:32:a7:39:7f:18:5d:ae:e1:f2:06:05:34:e1:9e:06:06:
fb:91:76:4f:8a:38:4f:94:ce:54:e4:12:5a:d0:f2:b0:5a:80:
05:70:eb:25:92:f2:46:56:88:24:0e:31:77:09:e3:70:c3:75:
bf:e2:9f:d1:58:aa:43:90:c1:f4:c2:1a:b7:58:b1:26:d7:00:
4a:59:54:e0:23:0c:0a:18:1b:ae:d2:83:53:fb:d0:0f:80:2d:
fa:59:ba:52:cb:68:b1:41:cb:9f:73:0c:d7:39:ec:c8:86:1b:
92:89:67:34:ba:58:07:43:88:ff:a0:ba:69:df:52:b1:85:87:
25:4a:06:c2:6d:28:92:ea:9d:c1:37:ea:e9:c1:3b:63:69:4a:
0e:9a:37:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:45:53 2026 by rpki-client