
$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
File: 3yS01RxnhB3WAN0qYXhrzpiHhmc.mft (raw, json)
Hash identifier: /pGLxDdU6umQfJCVvkNWXPcrqyCnfQeWqNJQdbaowI0=
Subject key identifier: B0:70:14:F7:75:D6:92:79:94:A5:4F:E6:19:EC:5A:DC:C4:27:EA:CA
Authority key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
Certificate issuer: /CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
Manifest number: 0168
Signing time: Thu 23 Jul 2026 06:24:02 +0000
Manifest this update: Thu 23 Jul 2026 06:24:01 +0000
Manifest next update: Thu 30 Jul 2026 06:24:01 +0000
Files and hashes: 1: 3yS01RxnhB3WAN0qYXhrzpiHhmc.crl (hash: sMF7GByfhh1uxXogJ61wEuS47bswdEfCcVzz9zseIQM=)
2: B21985725F3711EFA108CA0CC4F9AE02.roa (hash: qCZfH+xJ2p/8mTPa4y8ptTvD/J5HFYkwYWe+Fplo+JE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl
rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91813ED, serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
Validity
Not Before: Jul 23 06:24:01 2026 GMT
Not After : Jul 30 06:24:01 2026 GMT
Subject: CN=6a61b382-9909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:00:68:e6:58:3c:20:91:aa:2e:fc:13:37:
c8:f4:41:58:18:d3:28:69:bc:a4:23:39:e3:a1:3c:
51:48:4f:67:53:e3:b8:21:17:51:51:c3:9f:26:c0:
b9:b4:05:75:a0:7d:71:94:06:d5:66:1b:48:81:4d:
87:2b:c1:4a:47:27:47:e9:a8:f6:55:45:92:28:65:
86:ac:51:98:99:73:b0:ec:d8:50:9a:d9:df:e0:c9:
51:00:0c:cf:38:39:b3:27:df:d3:f5:a0:72:a8:99:
54:bd:3c:19:2b:12:6c:4e:5e:85:33:55:7d:7c:ae:
69:fe:37:d4:72:9b:21:7e:ce:a8:52:08:1c:6c:a3:
db:de:1d:ec:3a:24:be:c7:4c:12:8f:68:8a:66:0d:
18:21:e6:89:00:ad:b5:10:ee:40:87:b0:0f:92:fe:
9b:d3:36:ab:e2:4b:fa:31:31:e5:71:04:92:01:50:
54:e6:7f:bd:82:ce:93:68:a1:90:71:5a:32:b6:1e:
1d:c2:fa:93:bd:ec:8a:e1:15:79:10:b9:b0:b3:e6:
eb:4c:32:e5:c6:b6:0f:a2:48:dc:b7:34:d0:37:ea:
58:dc:9f:5b:fd:fe:2f:dd:4c:dd:d6:8f:05:65:80:
85:0c:0f:ee:8a:ad:be:09:81:ba:8c:8d:41:3b:4a:
0f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:70:14:F7:75:D6:92:79:94:A5:4F:E6:19:EC:5A:DC:C4:27:EA:CA
X509v3 Authority Key Identifier:
keyid:DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:b4:65:ab:3c:04:a2:a7:db:0c:39:75:93:58:0a:b5:ce:cc:
37:b5:5f:53:11:ee:4e:1e:7d:b9:59:d2:eb:53:63:eb:48:e5:
eb:68:d9:ca:79:da:7b:42:06:d0:e7:68:a0:53:e7:5e:7e:6a:
5b:fb:e8:98:ae:da:0f:38:bb:2c:ff:37:a4:df:e4:ff:59:7a:
c4:13:23:8b:27:22:38:ae:1b:c7:46:4a:fd:51:5a:8c:bd:7e:
d1:2e:29:35:32:72:02:bb:a8:b6:3d:ec:76:13:3d:cf:16:01:
7f:0b:4f:fc:29:37:c2:32:b2:97:69:05:0f:ff:0e:07:30:60:
f0:ac:d9:b7:17:01:c3:30:96:f1:e6:02:73:04:80:e6:e5:ce:
85:8e:f9:98:02:ef:0f:40:38:04:65:25:5b:3f:a3:85:0f:1a:
b3:35:cf:48:05:1f:a6:fb:5e:2c:04:5e:c5:c9:a0:b6:a9:7c:
ef:c8:08:8b:16:a6:4c:4b:99:e7:ff:28:0c:4a:1e:6d:c1:45:
2f:93:39:7b:fb:32:a3:48:89:9c:55:6f:2d:cf:cc:f4:1e:c4:
93:d6:40:1e:23:ca:ea:a3:f7:9c:8e:dd:5c:32:5c:65:63:85:
16:72:6b:3d:02:66:29:1a:4d:a8:fd:27:30:e9:58:01:d2:26:
a7:d7:79:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:31:45 2026 by rpki-client