
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft
File: 3aSfQfYYpV-cp8_FW66nthbZV2I.mft (raw, json)
Hash identifier: IDzYA75+AYExxdXKmJJKRIMZ1t3dhxvx/BjiT1FMnPU=
Subject key identifier: F3:1A:3F:ED:80:D1:08:2B:89:4F:27:64:02:CB:38:D5:4A:07:4F:A9
Authority key identifier: DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62
Certificate issuer: /CN=A91A7273/serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft
Manifest number: EF
Signing time: Mon 11 May 2026 06:30:50 +0000
Manifest this update: Mon 11 May 2026 06:30:49 +0000
Manifest next update: Mon 18 May 2026 06:30:49 +0000
Files and hashes: 1: 3aSfQfYYpV-cp8_FW66nthbZV2I.crl (hash: 3tJFwQ1LnI8NQd4nTexFnC0FCm3YnliT+hvPAb7Ctbg=)
2: 3958EEC642BB11F0B449BB81C4F9AE02.roa (hash: xBMqZvhUayr3U1URgwrl8EIqJ+zMDOpes797KaEjYwY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl
rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7273, serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762
Validity
Not Before: May 11 06:30:49 2026 GMT
Not After : May 18 06:30:49 2026 GMT
Subject: CN=6a017799-553f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:a3:fb:4c:6b:aa:58:16:8b:cf:ef:d5:b5:
e8:7b:af:9e:c5:4c:9d:3b:4e:a8:61:1d:27:59:78:
00:8f:13:c1:36:07:1a:d2:a9:94:5d:88:9a:5c:97:
40:98:3a:fc:86:4c:bd:f9:f3:de:6a:26:29:77:46:
9f:f5:dc:30:28:0a:80:ef:ca:40:0d:35:1b:4a:43:
97:46:c7:df:7b:48:28:3c:cb:bb:22:4c:f2:cd:e2:
b7:e6:60:b5:5d:78:ce:9f:2e:c0:02:f6:38:da:7c:
37:b7:f9:f9:47:54:de:16:08:d7:58:cd:5c:fd:c5:
02:31:be:fb:83:92:7a:aa:43:b6:89:78:2c:28:60:
dc:50:e5:f2:a7:84:88:70:4a:dc:f2:0d:26:97:1e:
d5:bb:37:ff:d8:65:58:b6:95:dd:c4:18:3e:32:f8:
d1:b0:19:b6:28:36:f7:ad:83:1c:ed:b0:24:d0:7d:
d4:b0:3a:fd:74:fa:a8:18:ea:75:69:36:74:bf:e7:
15:3c:a9:90:ba:ef:57:f8:16:83:db:6b:5d:9a:67:
71:22:8c:88:d9:62:08:ef:61:ad:a7:bf:44:30:7c:
20:b0:d6:6c:ec:2d:bb:1b:24:d7:e5:13:15:42:11:
21:de:71:df:5a:03:b2:ec:9b:a2:8d:26:76:f0:f7:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1A:3F:ED:80:D1:08:2B:89:4F:27:64:02:CB:38:D5:4A:07:4F:A9
X509v3 Authority Key Identifier:
keyid:DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:fb:c7:01:d7:53:25:37:3f:a5:b7:12:95:61:80:f1:f6:ef:
f0:75:c0:b1:fe:54:f5:61:e0:85:33:1d:74:84:ee:6d:bc:b4:
be:37:54:ea:93:01:9b:b5:23:d9:27:2b:0b:ca:5b:8f:68:29:
f6:8d:51:47:fb:6d:bc:50:64:76:e3:9d:81:b4:77:9b:e9:25:
da:30:92:0a:ff:84:07:cf:01:9d:d9:c4:2f:73:31:57:7b:87:
8f:74:22:c9:3e:3c:a0:10:48:b1:c2:77:75:34:91:09:80:0c:
b0:29:53:38:ba:79:6f:a0:28:f6:67:ee:e3:6e:9b:3c:10:ab:
9d:b1:f8:26:c9:cc:30:b4:46:2a:55:3f:b5:4d:92:ad:66:1f:
24:93:c3:b6:cd:3b:25:93:42:b9:85:fa:72:30:52:87:a3:73:
b4:47:ae:8b:b2:f5:b2:24:59:97:bc:9e:7f:30:7c:9f:9b:e9:
43:b9:32:c1:dd:47:9f:e9:08:9a:4d:58:3e:fa:34:9b:f3:25:
53:61:0c:39:8c:35:61:81:7d:fa:fd:41:eb:cd:1d:88:88:bb:
b4:c3:8c:fb:68:f0:22:d8:c8:58:6e:2b:86:6c:96:fb:1a:7c:
25:ad:e0:f0:c7:20:1a:af:9b:b1:d9:ff:71:b5:2f:27:bd:a6:
a9:2e:49:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:06 2026 by rpki-client