
$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
File: 3dU_UiXtL42o0J56rZgsgLbOrag.mft (raw, json)
Hash identifier: Vaw4thkXjUXNZAfi07uZmnedVUkjpHrDz0yziFMshZ0=
Subject key identifier: D0:95:2E:F2:33:47:5A:AF:83:A1:28:67:29:76:94:EE:0F:BE:9F:22
Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
Certificate issuer: /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
Certificate serial: 0881
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
Manifest number: 2E21
Signing time: Wed 22 Jul 2026 16:49:38 +0000
Manifest this update: Wed 22 Jul 2026 16:49:38 +0000
Manifest next update: Wed 29 Jul 2026 16:49:38 +0000
Files and hashes: 1: 3dU_UiXtL42o0J56rZgsgLbOrag.crl (hash: 9BYIKn+CnoBfp9AQ/0nznf/DS/3jUrUGtydfBVPy93c=)
2: CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa (hash: yofMdWFa6G+5IWdYK6Mk2y69/fwGAZwVAxMNAxb1xeg=)
3: 10C418C4D40011F083CDC127C4F9AE02.roa (hash: trEW3l3BfddlaJ5NOXeTcUWfTHS4ZdqJFRp+g2C/O5Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl
rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2177 (0x881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
Validity
Not Before: Jul 22 16:49:38 2026 GMT
Not After : Jul 29 16:49:38 2026 GMT
Subject: CN=6a60f4a2-e122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:60:04:e3:c2:ab:12:61:fc:6c:60:ce:07:
f8:48:37:ed:9f:f9:50:68:60:81:a1:f8:f1:db:50:
20:46:b2:48:27:83:26:79:87:82:33:e9:2d:80:4d:
37:94:6c:a6:8f:b5:99:17:87:2b:bf:ed:9c:42:8a:
2b:20:52:52:95:f9:51:8c:5e:ba:4a:a9:98:04:9e:
9b:79:70:f7:75:5e:83:6d:d2:d2:81:e1:e3:76:0e:
70:50:d0:f1:53:9f:6e:34:15:f9:5f:b1:3f:90:f7:
76:97:b2:3b:70:cc:2a:66:26:65:0a:fe:df:a9:f5:
a5:a5:a9:68:4c:fa:e2:81:56:64:7a:4e:0d:25:7e:
ce:d4:85:57:06:2d:3c:fe:86:43:b1:a8:37:b2:66:
43:6c:89:5b:c2:90:1b:e2:de:6f:4c:05:8e:a7:5d:
ec:d5:d1:2e:3a:c4:76:34:a4:79:15:a1:23:cd:56:
15:90:b5:e2:92:43:61:5b:65:a1:4c:2f:0d:76:de:
52:e3:86:12:e4:42:94:e9:01:9b:2b:fc:cc:fd:74:
58:5b:31:fa:14:e3:c1:e3:d8:72:54:59:58:6c:62:
ab:69:86:76:90:8d:d5:a6:42:25:41:c7:40:0d:92:
dc:ec:41:a4:06:2a:19:49:ff:7c:31:6a:39:51:c7:
b5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:95:2E:F2:33:47:5A:AF:83:A1:28:67:29:76:94:EE:0F:BE:9F:22
X509v3 Authority Key Identifier:
keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6c:74:8f:90:c8:8f:71:40:a9:05:1d:35:ee:c1:33:fe:ae:
f1:f0:41:12:71:b0:10:68:3c:8f:ed:4a:b3:16:aa:6d:1e:3c:
38:7f:8f:5c:9c:f3:67:28:5f:ba:fa:7a:47:a9:0f:9e:6e:99:
48:06:ec:27:45:f8:97:cf:40:59:58:f2:a5:58:07:68:ec:bc:
6c:09:f1:d5:c7:1b:3d:58:3b:3a:06:7b:57:41:4b:c1:46:b6:
7f:56:0e:88:e0:b3:86:7b:03:b6:ec:a8:0d:9e:25:88:e8:d2:
14:05:1e:67:82:ee:e7:ea:88:ef:d2:8c:2b:5e:d1:44:18:b3:
ef:1a:88:9a:98:c5:75:4a:4d:a4:1f:d3:f4:cb:4d:d2:e6:0d:
5e:15:0a:0f:f9:29:a9:ae:2f:58:a0:49:0a:47:8d:77:84:2c:
b0:b1:cb:b7:86:84:b0:24:6d:45:82:f0:fa:09:62:81:4a:b2:
70:af:5f:fd:46:a0:3b:63:d0:63:0e:f1:bc:c8:09:00:68:12:
9d:0d:fd:37:71:65:72:0d:85:f8:cc:95:cd:6a:46:e7:0d:a0:
dc:8a:3b:a8:3e:24:a0:e3:44:0a:d0:c4:4e:bc:7a:b1:06:45:
cb:ad:ad:01:ff:d7:e3:23:ff:c4:bf:c7:52:98:22:4e:c2:24:
71:85:0d:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU4RUYxMTAvBgNVBAUTKERERDUzRjUyMjVFRDJGOERBOEQwOUU3QUFEOTgyQzgw
QjZDRUFEQTgwHhcNMjYwNzIyMTY0OTM4WhcNMjYwNzI5MTY0OTM4WjAYMRYwFAYD
VQQDEw02YTYwZjRhMi1lMTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApa5gBOPCqxJh/Gxgzgf4SDftn/lQaGCBofjx21AgRrJIJ4MmeYeCM+ktgE03
lGymj7WZF4crv+2cQoorIFJSlflRjF66SqmYBJ6beXD3dV6DbdLSgeHjdg5wUNDx
U59uNBX5X7E/kPd2l7I7cMwqZiZlCv7fqfWlpaloTPrigVZkek4NJX7O1IVXBi08
/oZDsag3smZDbIlbwpAb4t5vTAWOp13s1dEuOsR2NKR5FaEjzVYVkLXikkNhW2Wh
TC8Ndt5S44YS5EKU6QGbK/zM/XRYWzH6FOPB49hyVFlYbGKraYZ2kI3VpkIlQcdA
DZLc7EGkBioZSf98MWo5Uce1vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNCVLvIz
R1qvg6EoZyl2lO4Pvp8iMB8GA1UdIwQYMBaAFN3VP1Il7S+NqNCeeq2YLIC2zq2o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB
RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0Mm8wSjU2clpnc2dMYk9y
YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNkVV9VaVh0TDQybzBKNTZyWmdzZ0xiT3JhZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NThFRi9EMjQzMzc5NjRBRUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0
Mm8wSjU2clpnc2dMYk9yYWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATWx0j5DIj3FAqQUdNe7BM/6u8fBBEnGwEGg8j+1KsxaqbR48OH+PXJzzZyhf
uvp6R6kPnm6ZSAbsJ0X4l89AWVjypVgHaOy8bAnx1ccbPVg7OgZ7V0FLwUa2f1YO
iOCzhnsDtuyoDZ4liOjSFAUeZ4Lu5+qI79KMK17RRBiz7xqImpjFdUpNpB/T9MtN
0uYNXhUKD/kpqa4vWKBJCkeNd4QssLHLt4aEsCRtRYLw+gligUqycK9f/UagO2PQ
Yw7xvMgJAGgSnQ39N3Flcg2F+MyVzWpG5w2g3Io7qD4koONECtDETrx6sQZFy62t
Af/X4yP/xL/HUpgiTsIkcYUNhw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:48:49 2026 by rpki-client