
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
File: As_3eY8FPpyB_czteWLsu3bB0ho.mft (raw, json)
Hash identifier: Y6CvXNUEC45iW4xQMnnQjbyZNUIqQGMBuwZ0TgkxdJo=
Subject key identifier: 6E:86:0F:B9:2A:50:9D:36:75:64:3C:34:7F:E2:FC:09:AF:1C:E2:73
Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A
Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
Manifest number: 0135
Signing time: Wed 25 Mar 2026 04:42:49 +0000
Manifest this update: Wed 25 Mar 2026 04:42:48 +0000
Manifest next update: Wed 01 Apr 2026 04:42:48 +0000
Files and hashes: 1: As_3eY8FPpyB_czteWLsu3bB0ho.crl (hash: jGYqw6nteDy+F/fVixq96FvxOf4arVN3x90DorYA0dc=)
2: A8F5426250E311F09F3F2B1BC4F9AE02.roa (hash: /ylmPLoqNPkXI0WwNkgwXyjpwWePDXl4PjOB+BkYIxc=)
3: 18C1AED0ABD111F0A1D84812C4F9AE02.roa (hash: onsHSEw2gBQvyT6GIE8r+szJ0Eco/4I+9evLtNgxa0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl
rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:42:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A
Validity
Not Before: Mar 25 04:42:48 2026 GMT
Not After : Apr 1 04:42:48 2026 GMT
Subject: CN=69c367c8-4f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:64:89:f9:30:e8:be:90:45:53:6a:ab:2a:07:
96:1b:fe:8d:88:e5:03:76:4f:36:f7:22:2f:f9:5d:
94:3f:49:62:8c:69:cf:58:ea:a7:4d:15:a6:77:f2:
d2:2a:d9:b9:bc:44:96:d0:f0:f5:45:4c:7c:8b:16:
82:32:8d:31:f7:57:4d:94:f0:af:62:82:e1:30:5e:
b0:80:12:39:58:b5:72:bf:f4:fc:7a:8a:e5:69:ba:
9a:bf:90:26:26:00:1c:15:57:8f:d9:18:0c:ac:35:
51:10:79:7a:95:fd:19:bb:77:0e:d2:2d:fe:bb:90:
e2:3d:83:de:f1:46:ec:c1:0d:b6:5e:06:e3:40:38:
ad:45:03:fe:b3:9e:be:c7:2d:40:1a:d7:43:0f:08:
c3:37:78:73:d6:25:06:ba:7f:b4:ec:f7:7d:76:20:
e3:50:5b:0d:cd:cc:1d:be:f6:2e:99:e0:1e:ae:de:
38:5d:3c:ea:b5:fa:0e:ca:c0:52:0e:48:0e:5d:0b:
73:85:cb:d3:df:82:3a:68:cc:a1:4f:6d:44:ff:9e:
65:3b:c2:84:2d:52:9a:8f:61:12:0b:f6:96:ad:7d:
19:3b:a2:55:d9:ff:e3:40:0a:36:58:18:3a:77:9a:
30:8d:42:0c:4a:ae:85:66:73:ab:e0:87:90:22:9f:
4f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:86:0F:B9:2A:50:9D:36:75:64:3C:34:7F:E2:FC:09:AF:1C:E2:73
X509v3 Authority Key Identifier:
keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:28:46:dd:e2:c1:63:06:fc:b0:60:be:12:4d:0b:8e:a6:36:
0c:3d:cd:ff:00:04:19:4a:6b:17:0f:90:1e:76:bd:18:6d:ba:
aa:9d:9a:1c:b3:a5:fe:6a:e9:f1:2d:92:b9:e0:07:44:b9:c9:
34:5b:85:f0:a4:41:91:93:ec:ef:b0:a1:df:a4:14:02:a1:b2:
39:82:d6:f2:f3:8e:a3:17:70:78:c0:aa:89:67:f4:38:37:bb:
b8:63:bc:00:90:46:dc:8f:01:01:c6:a4:b9:81:2e:b1:56:13:
9b:6a:3b:f0:56:35:69:3a:44:dc:b4:6b:5d:35:30:fe:64:46:
aa:25:b3:e6:c6:4c:f1:a8:c4:fc:4c:87:5b:9b:a5:91:e9:8b:
5f:6a:13:14:5c:15:63:1e:fa:b7:3b:b4:9e:41:76:f3:9d:e7:
8e:25:76:5f:00:90:6c:2a:90:c4:99:d6:4b:33:0b:44:ed:f4:
73:d2:8a:3c:00:1b:3f:2b:3c:a7:cb:80:55:89:06:52:67:06:
3c:39:5a:c3:41:e0:ab:8b:f0:5f:ef:dd:0b:40:8b:35:8e:be:
0b:bf:55:55:4d:65:ce:f0:9f:65:6a:60:35:bd:47:dd:4b:e3:
0b:9d:8c:9b:ff:76:2c:df:4c:a7:99:a9:25:ae:20:f5:c8:fe:
83:75:b7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:11:13 2026 by rpki-client