
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
File: _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json)
Hash identifier: l2suKz4r4EXhfp00rPVEBffEZJM//TK/BwePPCUt96I=
Subject key identifier: BD:E5:32:84:E4:12:0A:7D:8E:B1:6E:DD:4A:07:D8:FF:38:D3:F3:F6
Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5
Certificate issuer: /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
Certificate serial: 02B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
Manifest number: 02AC
Signing time: Mon 11 May 2026 01:34:18 +0000
Manifest this update: Mon 11 May 2026 01:34:18 +0000
Manifest next update: Mon 18 May 2026 01:34:18 +0000
Files and hashes: 1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: yuQncwZM/hY3NP3NovT9Msc1sKLehrGLyGXlgygwpZQ=)
2: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: rO0tDNcttMplae7nIOvYG1R1bdxFHJg9RWvc/5wp/yQ=)
3: 41669A1AFA7111EFBBC5374BC4F9AE02.roa (hash: olDCuTzSXRa+4yuV9e6OJTjYDQDslUZvSPW/HYSoqc0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl
rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 01:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697 (0x2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
Validity
Not Before: May 11 01:34:18 2026 GMT
Not After : May 18 01:34:18 2026 GMT
Subject: CN=6a01321a-3915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:ac:30:5d:1c:06:9f:a9:d7:c1:fb:e8:ad:
a4:8f:55:19:7a:1c:3b:d0:eb:8c:90:8b:2e:92:e0:
13:54:b4:2c:06:31:96:a0:dd:83:91:f1:13:a6:3c:
fc:80:05:d4:50:3d:20:1b:bd:bc:d7:ac:f5:19:c1:
25:7a:97:b4:38:c2:53:4c:bf:f5:14:47:6a:f2:86:
59:a4:8d:df:2e:0b:3f:5c:ae:64:76:95:7b:2d:41:
bf:af:3a:26:7e:02:07:eb:fc:74:18:f7:66:ae:08:
62:22:1a:ba:86:45:59:a1:5f:d3:2b:80:d4:46:6b:
fd:62:a8:b1:d7:80:d2:3d:75:eb:9d:c2:40:13:2e:
4d:1b:31:d9:bc:30:35:99:cf:fe:e5:e6:19:83:5b:
fe:bd:6e:d8:65:60:9a:15:b2:c3:01:57:bf:44:66:
c9:81:65:29:42:70:1c:e3:83:2b:56:bc:23:12:1d:
7a:c7:06:0b:3b:c3:e9:37:66:d9:e6:a4:9f:ba:11:
ac:2a:e5:bc:e7:7c:d2:50:05:87:cb:26:95:0e:09:
53:0a:ea:aa:ac:ca:4e:34:d7:6a:65:bc:3c:56:62:
ee:3a:e2:71:b3:03:7f:2f:63:c3:dc:63:13:47:47:
63:ad:98:cd:8b:48:b5:1f:32:6a:6e:a6:5b:47:ff:
dd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E5:32:84:E4:12:0A:7D:8E:B1:6E:DD:4A:07:D8:FF:38:D3:F3:F6
X509v3 Authority Key Identifier:
keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:7b:cd:4a:39:83:7e:dc:b6:e4:4a:ed:7f:8b:91:89:e6:3a:
31:96:d1:d5:3a:a6:5e:2f:44:47:de:ba:b3:68:f6:9c:79:a9:
d8:2a:c7:67:55:f3:c4:99:dc:8b:f6:14:8d:fb:3b:eb:48:a0:
1e:2b:8b:f3:1d:3d:f3:27:c3:e0:02:4c:3e:35:be:4a:31:88:
db:c4:95:40:13:65:24:ae:5d:eb:b7:2c:f7:17:41:e9:f9:53:
d8:e4:9b:55:ae:a4:c3:79:8a:cd:da:7f:e7:4e:80:bd:00:f9:
f8:ca:45:88:9c:21:ec:b6:3b:a8:1c:15:8e:88:7f:1e:87:f2:
42:7b:28:2f:20:3a:7f:98:52:d2:e1:67:b2:0e:fc:96:00:c6:
da:c5:0f:65:8d:7c:77:bd:80:17:2f:f3:2b:3d:b2:5e:2f:65:
37:f8:8c:4c:84:71:75:99:16:ba:62:ed:de:d1:95:28:d0:89:
63:04:ed:1d:38:2d:d6:61:42:6c:48:28:f3:2c:64:47:b2:de:
89:0d:1f:a5:85:e1:fa:69:36:5d:99:a8:59:77:c1:1f:18:68:
63:b6:fc:a9:54:64:f4:f6:35:fe:50:e2:2e:96:e2:b1:1c:fe:
86:a1:c3:2e:64:54:b1:49:c1:41:f4:9f:a9:9c:c4:c7:7a:4f:
34:e8:99:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:20:14 2026 by rpki-client