
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft
File: 3eQo-rsWskLR46Gm8A_V48OKpY8.mft (raw, json)
Hash identifier: rW9bdjFY79nQXMkHX4gWHf6GRJJrpCJk8h+7zuoTvtE=
Subject key identifier: 63:AC:6D:C0:E5:84:EA:50:01:77:66:33:31:24:A9:59:03:54:5C:BE
Authority key identifier: DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F
Certificate issuer: /CN=A91B681A/serialNumber=DDE428FABB16B242D1E3A1A6F00FD5E3C38AA58F
Certificate serial: 31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft
Manifest number: 2F
Signing time: Wed 13 May 2026 08:50:52 +0000
Manifest this update: Wed 13 May 2026 08:50:51 +0000
Manifest next update: Wed 20 May 2026 08:50:51 +0000
Files and hashes: 1: 3eQo-rsWskLR46Gm8A_V48OKpY8.crl (hash: E9pnnM7YAZ2PS6vbsqk7zJeRCyfgFw4AUz2dPC5EpbU=)
2: 50B86BE40BE411F1BD6D7437333D8C67.roa (hash: QFwXm5LgnQBWOl/6IqW37SOmW7TOlLZtTt8RxXnukJ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.crl
rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B681A, serialNumber=DDE428FABB16B242D1E3A1A6F00FD5E3C38AA58F
Validity
Not Before: May 13 08:50:51 2026 GMT
Not After : May 20 08:50:51 2026 GMT
Subject: CN=6a043b6c-2bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:66:eb:e9:46:77:9e:75:90:2e:75:a9:61:
be:aa:ae:11:bb:a0:87:85:d4:11:55:4f:8c:dd:d0:
73:e6:70:6b:b9:9c:48:74:a7:96:63:68:4b:37:53:
54:01:61:9e:a4:64:f4:f1:66:2d:f2:11:c3:35:9f:
73:c8:0f:88:c3:a2:99:8c:6c:a5:b8:3e:e9:b5:66:
24:4c:e6:17:e1:54:59:f8:bd:c7:6b:6d:37:02:2b:
3d:f0:a4:fc:dc:a8:e3:f3:5e:53:06:0a:77:42:ff:
00:06:41:1c:24:e5:5c:fd:6d:a2:de:2d:62:ad:2a:
f1:76:eb:94:d2:15:c0:19:7b:75:a5:f5:a3:13:f9:
4a:fd:d9:c3:42:e8:f6:b7:d3:a9:c2:cf:ee:90:c9:
37:d8:f5:4e:6d:36:9f:97:97:e5:d7:55:5a:72:63:
14:2e:17:be:4e:0e:9b:ae:70:6a:4e:d8:03:2c:77:
de:96:95:12:50:9b:76:bb:8a:64:6d:f6:06:9d:ed:
ee:d4:2e:7c:5b:5c:4d:40:3b:ac:9b:e6:33:dd:ba:
50:f8:d7:0c:02:56:ec:b0:05:30:91:88:3f:1a:fa:
58:3e:41:70:75:2b:fa:a5:16:76:3a:a1:56:bc:f4:
b1:ac:59:bb:86:23:bb:41:1f:b0:a6:fe:31:d9:72:
3a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AC:6D:C0:E5:84:EA:50:01:77:66:33:31:24:A9:59:03:54:5C:BE
X509v3 Authority Key Identifier:
keyid:DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:95:52:71:40:50:44:87:b2:d0:8f:97:16:2b:c0:39:72:50:
de:5f:16:0a:de:7b:13:e5:d8:e3:8e:11:d6:03:d7:35:a5:52:
38:68:a4:fd:51:ed:1c:3a:1e:12:b0:2a:da:a5:d2:af:d9:ed:
1f:f5:74:78:0e:87:25:21:b7:2f:ab:df:96:0b:e7:a8:94:1c:
c9:10:f4:c9:42:ad:3e:73:aa:66:53:24:b1:b2:1f:80:53:bf:
8f:e0:68:4e:3e:d3:f9:b4:ff:14:30:4e:69:f2:67:47:8c:fa:
5a:58:49:99:15:c0:b3:08:57:06:73:6b:ee:1b:3a:38:00:0e:
88:48:1b:68:26:28:e0:34:b5:40:93:d9:83:31:05:00:71:b8:
c1:e5:35:5d:57:76:16:95:5d:d6:9e:01:df:7a:87:dd:9c:44:
8b:03:02:8c:fc:c9:3d:b6:1b:ce:ea:98:8f:e0:82:4e:fe:33:
d8:e9:f5:f4:49:f8:81:97:c9:b8:ef:13:e4:07:fa:31:33:99:
93:75:34:20:78:81:12:68:27:bd:84:fd:c9:cf:c9:f9:0d:fc:
3c:b2:13:b2:d9:01:11:66:10:99:dd:15:0c:0b:97:27:f3:1f:
12:46:c2:82:6f:13:15:7d:fd:a4:8a:75:54:ff:e4:8f:db:3a:
32:12:7a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:14:56 2026 by rpki-client