
$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
File: 3VdGDwwSvgVGE6L0KWewfaVoe_A.mft (raw, json)
Hash identifier: 9IifcX7rakL9rGIHoOu2Ev8xD0Apgvup+mPtoSoPdIk=
Subject key identifier: 17:B6:1C:28:5E:18:33:80:2E:71:62:80:6E:18:4C:9F:90:B7:EB:98
Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0
Certificate issuer: /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
Certificate serial: 0135
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
Manifest number: 012D
Signing time: Mon 11 May 2026 05:39:15 +0000
Manifest this update: Mon 11 May 2026 05:39:14 +0000
Manifest next update: Mon 18 May 2026 05:39:14 +0000
Files and hashes: 1: 3VdGDwwSvgVGE6L0KWewfaVoe_A.crl (hash: ZQ3WHnBpzRI5neAZo2sHxrPmQ/hsVotnFXY1xOQhoio=)
2: ABF1FAF2860211EF8D8AD011C4F9AE02.roa (hash: QzecNRiadvNS3uXz4puDDg8aeFgkZFgzMCT4KbxjYQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl
rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:39:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91566DC, serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
Validity
Not Before: May 11 05:39:14 2026 GMT
Not After : May 18 05:39:14 2026 GMT
Subject: CN=6a016b83-7848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:a2:8d:13:52:53:9c:72:92:83:91:64:a6:
fc:d5:70:8e:77:57:a9:63:dc:1e:09:78:56:f0:9c:
99:db:7b:20:07:79:9a:8c:da:79:be:4f:c6:52:66:
75:fb:c8:aa:ad:9c:39:f4:f9:45:13:a9:b4:3b:1f:
34:1c:44:6d:4b:16:4d:93:43:79:a8:ac:2c:0d:4f:
21:9c:40:3b:49:62:0a:a7:5d:f9:04:36:ae:f7:c7:
39:8a:b3:b7:8b:cf:c2:b2:b5:85:61:9f:b4:a7:c9:
fa:9b:8f:1a:e1:ef:25:24:2c:3c:3d:07:58:82:66:
f6:51:e8:9d:f6:ed:7b:fb:37:aa:08:b7:89:ce:42:
db:2b:fe:18:2e:ed:58:09:03:2a:1d:cd:77:8a:4f:
45:2e:d8:ac:44:c8:36:96:49:6f:f7:6e:92:db:16:
58:fd:8b:a5:47:a4:96:c2:3b:de:c3:a1:df:33:5c:
1a:8e:b3:14:df:55:4c:9c:bf:6c:99:ee:ca:d3:51:
45:34:e0:5b:01:6e:d4:7a:53:41:a7:cd:d3:53:99:
cc:82:f5:c3:32:72:80:81:2b:25:c1:82:71:01:af:
78:a0:68:cd:a0:b9:81:90:22:2f:b1:7f:b9:7a:dd:
e1:ae:79:2d:f7:60:aa:a9:f9:6d:a8:20:e6:1d:fa:
85:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B6:1C:28:5E:18:33:80:2E:71:62:80:6E:18:4C:9F:90:B7:EB:98
X509v3 Authority Key Identifier:
keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:91:36:cc:5d:fe:f4:76:f8:c6:6b:60:d8:99:ea:e1:3a:ef:
cd:ef:3e:d9:a4:57:7f:58:a6:95:30:4a:c1:9a:4e:8a:fb:2c:
81:7b:54:2d:e7:7e:23:44:4a:ad:93:16:a9:19:66:f0:40:0f:
b5:58:68:73:f3:1d:c4:5e:55:7d:ab:92:46:ac:34:b0:72:4b:
74:13:5a:f5:c6:b8:8b:0b:c1:33:1a:02:89:f9:e7:98:aa:43:
82:53:e4:4c:c2:96:ab:1e:a0:c7:d7:f7:e6:fc:e9:b2:00:f6:
ac:4b:35:b3:f4:69:63:de:42:e7:ad:c9:b0:35:70:5f:dc:d3:
d5:83:c3:1d:b5:88:41:1a:bb:c8:5e:96:f7:96:a2:45:de:8d:
f4:7a:42:8a:1c:ba:3e:00:21:e1:82:fe:f2:2c:ad:2f:84:56:
e8:85:0e:15:4f:28:21:15:b4:1d:23:68:75:53:e8:51:25:59:
6c:bd:be:82:f9:02:57:90:72:92:05:eb:e0:6e:5f:72:ea:56:
98:83:9d:d6:71:61:69:59:7b:c3:c6:da:5d:90:5c:61:16:59:
ee:18:92:4a:26:ed:1a:3f:e6:fe:f1:c0:ef:8d:18:ef:9f:42:
23:45:22:18:8c:50:fe:28:86:2c:5b:8d:02:1f:6d:79:b6:20:
af:6d:1f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:12 2026 by rpki-client