
$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
File: 3VdGDwwSvgVGE6L0KWewfaVoe_A.mft (raw, json)
Hash identifier: FnGAlWJ7ZZgmbhTiodOUv7pg9yP85dXjoVciP61h7bE=
Subject key identifier: 50:3E:83:35:A2:69:00:51:34:80:C2:FB:4C:89:F7:FC:3A:25:45:F4
Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0
Certificate issuer: /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
Certificate serial: 0159
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
Manifest number: 0151
Signing time: Thu 23 Jul 2026 06:43:42 +0000
Manifest this update: Thu 23 Jul 2026 06:43:42 +0000
Manifest next update: Thu 30 Jul 2026 06:43:42 +0000
Files and hashes: 1: 3VdGDwwSvgVGE6L0KWewfaVoe_A.crl (hash: rUpdH4dZf/VWbU02JuO4sdYvTRmdGpHvPWBhv4auiCI=)
2: ABF1FAF2860211EF8D8AD011C4F9AE02.roa (hash: QzecNRiadvNS3uXz4puDDg8aeFgkZFgzMCT4KbxjYQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl
rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91566DC, serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
Validity
Not Before: Jul 23 06:43:42 2026 GMT
Not After : Jul 30 06:43:42 2026 GMT
Subject: CN=6a61b81e-be1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:15:64:e0:fa:b8:a0:08:f5:27:61:28:ab:70:
a1:0c:15:1f:71:03:d4:99:c9:7b:0c:15:7c:93:9d:
11:d4:88:0d:23:58:56:09:61:f6:ed:7a:f5:17:16:
17:f8:38:7c:b7:47:c1:68:02:13:82:86:f1:86:ed:
a5:ea:18:ff:93:63:34:3b:28:c7:cb:00:44:46:32:
59:6a:6f:aa:f5:c2:79:7c:91:d8:d3:54:d2:24:07:
cb:74:41:e1:27:80:3f:2b:49:56:90:8d:e9:cc:d1:
e4:17:58:84:cf:ae:f8:d1:17:ea:1f:cd:4d:74:47:
8f:d1:9c:8b:5e:0e:5f:7b:1e:1d:34:76:8b:4c:a0:
f0:d4:5a:e2:89:63:6e:65:36:51:4a:8d:1e:1f:03:
4b:76:ef:c2:36:d7:77:93:86:39:f5:a8:04:59:cd:
9a:8c:56:48:65:10:83:d9:35:7e:96:d6:9c:98:9a:
50:ff:32:dc:c3:e3:83:6b:63:f0:54:85:9a:44:15:
8b:e5:41:0a:f9:6d:eb:58:53:04:2a:ab:26:ba:06:
6f:d1:31:9c:6d:9f:dc:fa:fa:b7:50:c1:f3:ed:05:
26:01:8a:00:bd:d0:5e:b4:9e:8d:93:1a:0d:9e:3a:
48:66:79:4c:ec:e2:a7:0d:f6:e4:d9:1b:87:fe:3c:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3E:83:35:A2:69:00:51:34:80:C2:FB:4C:89:F7:FC:3A:25:45:F4
X509v3 Authority Key Identifier:
keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:36:20:ff:fc:8a:a7:01:d3:63:30:6c:43:e0:8a:db:a3:94:
b4:3f:ef:d4:2c:b0:ca:bc:42:c8:02:09:2d:06:7e:de:7d:b1:
23:f7:6e:26:57:79:28:f8:8f:6e:11:f6:03:51:c4:14:15:e2:
f1:c8:fd:a8:93:2e:d1:51:5b:e0:40:c0:9a:90:6a:8a:1e:8c:
c7:ca:22:22:fc:a5:a4:2d:9e:4e:51:8e:c4:94:67:2c:f5:f9:
bc:ee:1f:f1:f4:22:e8:7c:cf:33:fe:99:1c:5e:17:7f:47:f7:
fa:4e:3a:31:ff:ff:2f:6e:0b:1f:ff:94:0c:a2:a2:4b:ed:33:
f6:5c:cb:dc:a3:ba:0e:f0:00:ab:a7:58:3f:85:b9:7d:b0:f7:
43:a1:90:5e:44:a8:01:49:b7:cc:b2:a8:71:11:8a:1a:e5:da:
d4:3a:5d:64:ef:a1:d9:74:21:31:53:c6:13:aa:4b:7f:79:3b:
ea:0f:ab:d5:bb:d9:37:59:e7:b6:8b:f4:57:3c:dd:9c:c3:fb:
fd:73:e1:62:79:cc:f4:dd:03:47:15:ab:9c:91:01:92:2c:b0:
09:53:7b:bd:49:45:44:dd:3d:7c:6b:86:0f:47:e5:ee:dc:64:
7e:07:e7:67:1c:a1:ce:c2:20:98:03:4d:9e:1e:1a:bf:af:2f:
3f:d6:3a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:51:16 2026 by rpki-client