
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
File: 3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft (raw, json)
Hash identifier: xH8hUXTRWjg0vTwtGiIjNE4lQdVU+wQg2ElT2wuqKMo=
Subject key identifier: 84:16:45:CA:3F:38:5A:44:AD:C8:10:4D:D1:FC:C0:30:EB:EE:AF:2D
Authority key identifier: DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0
Certificate issuer: /CN=A91A5201/serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
Manifest number: F1
Signing time: Thu 23 Jul 2026 08:08:22 +0000
Manifest this update: Thu 23 Jul 2026 08:08:22 +0000
Manifest next update: Thu 30 Jul 2026 08:08:22 +0000
Files and hashes: 1: 3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl (hash: 1DVwmGaWrV/9wFv0yjhttC5kTIxurS/LMZ5gENwLPQM=)
2: D0CA23541BC611F09FDAC047C4F9AE02.roa (hash: T6VpKK0GSgbr7FyO43J42BuxmDs3Uod/nZfdKOm/b7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl
rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5201, serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
Validity
Not Before: Jul 23 08:08:22 2026 GMT
Not After : Jul 30 08:08:22 2026 GMT
Subject: CN=6a61cbf6-11e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:31:81:e9:fd:b6:c6:08:d3:7e:48:57:59:
db:1c:7d:62:d0:89:a9:1c:67:b6:de:a6:14:d3:a5:
63:0e:0c:0a:d9:17:b6:4a:c1:8b:d7:0d:c4:6e:a8:
4c:9d:60:37:12:a1:97:71:57:ef:a1:e2:4a:b8:c1:
05:9a:41:24:bb:a4:bc:79:63:f4:82:11:73:af:95:
08:ff:36:ef:48:58:2b:87:5d:45:f1:85:2b:d4:42:
b7:0a:95:e7:84:02:5c:9b:9b:26:52:e6:66:43:67:
42:24:c2:bf:22:fd:cf:66:09:ab:a3:b8:9b:76:79:
86:90:84:74:d8:9e:12:98:9b:35:3d:a6:d7:f5:9d:
e5:0e:92:2c:f7:92:6e:88:6e:99:71:a7:5b:91:76:
d0:cd:f3:10:c4:d6:d4:af:d0:be:7b:b0:b3:1e:11:
ec:f0:d9:e6:76:bf:4b:41:cd:bd:64:17:7c:21:71:
a2:85:3d:bf:f0:3f:f3:1c:f1:39:41:5b:09:c7:c9:
35:a5:93:d3:8d:9b:70:2f:01:a0:3b:a9:47:5d:1b:
f6:43:e3:c0:31:31:29:fa:0b:c9:19:be:a6:07:0f:
fc:c0:22:82:aa:53:0b:15:c3:db:21:d7:f7:ba:78:
ef:ff:ad:cb:97:d6:e9:42:fd:48:45:fd:32:80:96:
29:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:16:45:CA:3F:38:5A:44:AD:C8:10:4D:D1:FC:C0:30:EB:EE:AF:2D
X509v3 Authority Key Identifier:
keyid:DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:40:e2:14:cd:bf:51:95:93:52:5b:78:5d:5a:1d:42:fb:22:
f7:82:c1:cc:46:ff:df:8b:5e:2d:07:8c:64:3a:5f:60:40:25:
2b:6c:d7:39:ff:ee:88:a5:81:dc:9f:82:32:e3:83:bd:52:5e:
54:9b:fc:fd:57:31:92:24:86:d8:31:16:c0:39:42:6d:11:db:
4d:0c:f8:0b:4d:61:97:f9:a8:7e:8c:a1:12:ad:9d:b3:9b:c9:
13:03:2c:d3:af:06:2b:17:af:5c:3c:c3:0e:d8:8f:b6:52:95:
cb:25:62:d0:4e:08:65:3b:09:58:1e:04:a7:f1:81:92:c1:76:
bc:74:c2:fb:8f:df:87:a8:a2:f0:29:ff:4c:77:8a:36:70:7e:
dd:54:b6:00:3c:13:29:7c:c7:c0:e0:1f:c9:ce:4b:90:06:da:
2b:88:a7:a0:f4:87:d3:01:9a:38:12:92:ad:bc:61:d4:4c:d3:
e1:00:eb:8c:33:03:7a:2a:6e:9b:1e:ad:97:4a:83:06:64:65:
0a:43:21:3e:99:bd:86:71:57:79:52:a5:10:e8:05:3e:a0:e7:
7d:35:09:20:4c:db:5b:73:8f:a6:3e:eb:28:61:db:ea:a3:37:
98:de:7c:c5:f6:39:79:7d:14:36:5a:e8:2f:e7:d3:b6:f2:cc:
17:ba:69:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:07:28 2026 by rpki-client