
$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
File: 3K6HG3xct5vH7PZ5s7LTyVan2eM.mft (raw, json)
Hash identifier: WRPsnwqRD4MEFiLLpb96vu2YYfc9JGHRxxvmweRKRGc=
Subject key identifier: 1C:12:61:C9:16:27:49:2D:25:4E:D9:69:23:B9:46:71:A3:D4:DE:CE
Authority key identifier: DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
Certificate issuer: /CN=A91604AC/serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
Certificate serial: 0736
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
Manifest number: 0728
Signing time: Tue 12 May 2026 22:01:20 +0000
Manifest this update: Tue 12 May 2026 22:01:20 +0000
Manifest next update: Tue 19 May 2026 22:01:20 +0000
Files and hashes: 1: 3K6HG3xct5vH7PZ5s7LTyVan2eM.crl (hash: phq2BKeO1qNllYJx/Lg62Rr7smGw6JGKUWcVOEm69co=)
2: 0081F3D6F22111EE8EEC070EC4F9AE02.roa (hash: gt5MzzOyMRjHAQJ1OB2Ov2agdEJbjl0iI4HuG5lS+Fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl
rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1846 (0x736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91604AC, serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
Validity
Not Before: May 12 22:01:20 2026 GMT
Not After : May 19 22:01:20 2026 GMT
Subject: CN=6a03a330-240a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:d3:11:6e:13:c6:21:2a:10:33:ef:61:18:
2f:4e:b9:67:c8:31:30:ee:26:9d:c8:d1:09:f6:e0:
a7:b4:9b:c1:19:0b:a0:c3:72:25:97:6a:63:49:ff:
2f:72:d6:82:10:56:15:55:ef:05:f5:c3:06:3f:01:
7a:ef:39:80:af:8c:de:7f:53:29:3d:fe:92:eb:9c:
0f:d4:69:9e:89:f7:1e:bc:02:65:51:83:b7:90:cf:
99:02:33:e0:80:e9:1a:95:cf:33:d8:de:6b:06:53:
f1:2a:b0:69:f8:26:01:56:f8:a4:6b:af:2a:3d:af:
d1:bb:e6:fb:e1:6b:7c:e5:54:9a:84:07:6a:9f:73:
6c:3c:f6:8a:98:f1:5b:3f:b9:87:79:67:29:27:20:
8b:46:5a:8a:9d:fb:60:ea:cf:af:84:c9:63:5f:0e:
00:68:22:a9:d8:6b:18:bf:a3:b4:e9:2d:45:fb:44:
c0:0e:06:b4:ab:71:45:5f:3a:ed:3a:07:cf:52:29:
cf:e0:31:1f:f5:49:7d:2e:c3:e6:91:ab:fb:10:bb:
a3:e2:f7:4d:92:18:e1:78:52:ab:8f:24:e1:b7:80:
00:0a:69:6d:d2:4a:b7:1f:ea:cb:17:97:bb:65:0a:
d4:42:11:fb:ae:dc:1f:7e:5c:fe:d1:ae:91:b9:59:
59:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:12:61:C9:16:27:49:2D:25:4E:D9:69:23:B9:46:71:A3:D4:DE:CE
X509v3 Authority Key Identifier:
keyid:DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:0e:32:3c:f7:e1:4f:eb:e4:59:52:d9:4a:05:e7:88:a7:d0:
3e:09:b8:91:a7:c5:60:83:6a:02:15:28:8c:4b:c5:96:9a:19:
bc:5e:f4:bf:47:09:1b:39:bd:e3:81:18:0d:77:27:92:fa:66:
8c:72:9e:0a:1d:a3:97:5e:84:ff:69:03:60:99:98:1a:2a:91:
d0:d2:84:4f:66:a3:38:52:50:61:26:81:f9:de:51:27:24:46:
ca:ef:b3:55:5e:68:92:62:b9:16:e4:fd:6e:88:53:66:a6:8c:
37:33:76:1f:f1:12:d5:ed:d0:6e:fd:bd:1c:cf:89:01:b9:4e:
91:1f:b6:8a:f4:d0:20:07:4c:d9:26:51:0d:9a:93:69:51:2b:
bc:fc:db:c0:3c:2f:86:c3:b7:dc:70:fd:cb:94:09:f9:f5:bb:
30:d3:56:5e:e3:ca:f3:77:a1:2f:6c:8c:74:4a:f6:a1:1d:4e:
d4:7c:b0:8c:a8:82:6e:ba:1f:8d:6c:7d:04:11:d1:75:d3:f6:
18:0d:56:8f:1d:76:51:fb:02:62:6c:3f:fc:e3:e5:99:c8:ae:
2f:11:93:59:81:e4:b3:45:c0:23:b5:c0:6a:e8:7d:bd:07:4b:
46:50:72:0c:c5:ba:a7:6d:47:24:45:74:f0:e9:1e:c0:04:48:
9a:fd:dd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:09:08 2026 by rpki-client