
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft
File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json)
Hash identifier: X5O6WYGT3iL809CuAk7/9ZbyLIODeH6tG7Dwi/bxpRQ=
Subject key identifier: CC:4D:EC:A5:72:D5:6A:E2:31:9F:BA:DB:7A:52:5D:75:3E:F8:F2:53
Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A
Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A
Certificate serial: 0D2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft
Manifest number: 0D22
Signing time: Wed 22 Jul 2026 18:22:48 +0000
Manifest this update: Wed 22 Jul 2026 18:22:47 +0000
Manifest next update: Wed 29 Jul 2026 18:22:47 +0000
Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: FTOuD5l+pzrU6cUwil6rTZGYPuDl7mwowU899H1QZlA=)
2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: 3yJDGrz0XRdPzy2//5nR0N/T7ckhtUUCQuGTGQX3Puk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl
rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:22:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3372 (0xd2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A
Validity
Not Before: Jul 22 18:22:47 2026 GMT
Not After : Jul 29 18:22:47 2026 GMT
Subject: CN=6a610a78-981f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:47:07:8e:87:6a:e6:0e:17:c5:13:dd:5a:
cf:ed:19:8a:ba:b6:9b:62:f9:0e:b8:ee:95:eb:34:
de:07:78:e1:0e:ba:cc:5d:f4:4a:08:1b:98:9f:bc:
0c:de:53:94:61:26:67:62:e3:cd:18:e8:89:f1:c3:
13:e7:30:f3:3e:2b:90:a8:40:27:84:fd:97:6c:6d:
40:d9:f8:3f:b3:aa:4b:fd:c7:7c:22:28:58:09:1a:
af:3b:af:f2:b1:e0:9d:de:7f:ef:f8:1f:30:fb:4f:
3b:22:fa:2a:2e:1c:09:c6:b0:06:7d:06:91:77:26:
13:6a:18:df:6d:ed:eb:d7:a3:8c:a7:7c:89:69:eb:
cb:1d:54:0a:13:7d:20:d2:c1:44:13:70:9a:08:19:
dd:97:ca:3f:aa:09:8f:ad:aa:e1:69:9e:6c:11:3c:
02:28:dd:35:45:86:b1:63:9a:86:b2:62:f2:02:cc:
2d:2c:07:31:15:19:39:26:4f:f2:2f:71:99:46:6d:
01:e5:4b:6a:21:94:49:f4:c7:5e:42:e4:79:88:5e:
56:40:68:26:30:f9:da:9e:7f:22:7d:c3:e5:14:84:
b3:5a:19:7d:b3:7f:1c:6c:b3:93:a1:0c:9b:e8:1f:
7d:6e:a4:c0:23:d9:56:b9:32:e4:96:b1:c4:1e:b2:
27:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4D:EC:A5:72:D5:6A:E2:31:9F:BA:DB:7A:52:5D:75:3E:F8:F2:53
X509v3 Authority Key Identifier:
keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cf:39:97:b5:f8:58:53:73:71:47:3d:2f:ad:b1:a8:9c:8f:
97:43:6c:78:67:0f:57:e7:b0:3c:db:44:42:04:0e:cd:e9:1c:
2f:a5:12:f9:29:b3:a1:6a:ae:8c:33:b6:ff:43:69:7a:f8:59:
0d:0b:71:3a:5b:57:54:cd:1c:44:b0:0b:a0:ac:c3:1b:7b:e6:
a4:24:ff:6b:c8:d5:b3:fd:f0:75:3f:cb:b2:7a:76:5a:a3:81:
83:7d:de:63:b5:92:06:06:11:12:68:ed:28:1f:03:83:62:be:
2a:dc:88:b9:39:f8:3b:41:af:f9:36:70:7a:80:e0:c4:6d:fc:
99:61:df:9f:a3:95:8f:d0:c8:ce:b4:79:bc:b9:67:94:84:03:
ee:bb:0e:2b:b5:e1:d5:a8:1b:5e:cf:70:47:97:cf:d8:1d:16:
96:e6:53:68:2b:0d:34:81:2f:4c:76:38:46:84:59:36:d6:e1:
e3:c7:4a:12:74:a3:27:8a:cd:4d:1a:ea:b3:ed:0b:77:7f:9f:
7b:af:74:07:4b:bf:7a:48:d3:ff:7f:6f:27:cb:da:52:b4:db:
db:08:ce:ba:dc:27:3a:72:d1:1b:43:0b:04:37:ca:41:cf:aa:
cb:6b:b6:55:9c:9a:22:9a:91:c2:02:1f:e8:36:ad:87:19:c5:
fa:a9:8e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:56:55 2026 by rpki-client