
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
File: 3BEw2GFrq8bOCI9fIOaXGamcMrs.mft (raw, json)
Hash identifier: nFx4kSycBefSJlFY2kac++r1CHUwIq28ZDkiUWbbHT0=
Subject key identifier: BA:F2:48:98:C7:7D:95:0A:99:05:B6:5A:45:C5:B6:C9:A1:E2:88:0C
Authority key identifier: DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB
Certificate issuer: /CN=A91B732A/serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB
Certificate serial: 0132
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
Manifest number: 0132
Signing time: Thu 23 Jul 2026 07:16:10 +0000
Manifest this update: Thu 23 Jul 2026 07:16:09 +0000
Manifest next update: Thu 30 Jul 2026 07:16:09 +0000
Files and hashes: 1: 3BEw2GFrq8bOCI9fIOaXGamcMrs.crl (hash: 35l/C7aUkFBqlcvuJA0nIsnVvobbo+AhoA1zsVb+TGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl
rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B732A, serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB
Validity
Not Before: Jul 23 07:16:09 2026 GMT
Not After : Jul 30 07:16:09 2026 GMT
Subject: CN=6a61bfb9-ec9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:33:91:48:8e:50:87:06:de:f0:f3:aa:0c:
51:51:96:ed:03:9a:5f:f1:5c:12:1c:5c:78:68:7e:
be:b7:3f:a6:92:1f:8d:34:9e:9a:58:4a:39:33:4e:
00:85:35:04:f1:66:17:e1:0d:3f:9d:9e:b7:55:2f:
75:b5:04:0a:6d:84:7c:cc:46:57:40:32:81:70:42:
cd:7d:72:ef:8c:99:54:4b:37:9f:4e:d3:2d:df:48:
bb:a7:b8:68:37:a5:08:ef:4a:84:ec:d8:2d:4e:c7:
b4:e3:0f:b2:9a:b3:49:a4:8a:b7:1d:44:a1:01:c5:
39:53:dc:80:3a:58:87:8c:05:ca:0d:a5:26:62:17:
b4:20:1b:51:98:9b:f9:c0:1e:38:59:bc:0e:3b:e8:
98:b9:4d:fc:16:78:6a:68:2d:32:3c:de:e3:39:72:
22:0d:ab:9f:29:89:2b:64:aa:69:8f:55:94:97:47:
42:83:aa:a1:17:5a:fc:b2:a7:6f:7d:8d:b0:cb:88:
1c:ae:cb:4b:60:cd:d1:7d:b3:62:a6:0a:67:be:bf:
0a:ce:b9:0f:e6:74:c8:83:43:83:3e:19:f6:86:f9:
a8:08:ea:fc:a7:49:4d:6e:70:1d:d9:ba:fc:65:eb:
38:33:65:51:5f:92:67:5f:c1:6c:17:f8:ab:4a:6e:
a4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F2:48:98:C7:7D:95:0A:99:05:B6:5A:45:C5:B6:C9:A1:E2:88:0C
X509v3 Authority Key Identifier:
keyid:DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:a3:47:bc:21:e0:87:a3:23:0c:d3:2b:64:f3:f2:f2:18:a7:
1e:76:c5:72:46:cd:33:ed:9f:8f:9f:a8:8e:68:84:0e:40:50:
31:72:ff:92:ed:b5:75:3e:82:97:df:7e:5a:f4:b1:25:31:93:
b5:3d:28:42:26:92:b2:da:f9:49:db:3b:9e:94:36:a1:0b:f9:
e3:02:44:27:7f:5c:25:6d:fa:a4:a7:60:2a:72:99:b0:42:23:
ce:fd:e0:9f:7b:9b:79:32:6f:01:ce:5f:dd:6c:f6:4a:44:71:
a5:e2:4a:a8:ac:18:a4:f9:a8:ab:d6:fa:1b:4e:60:e0:39:1e:
5a:05:25:0e:3f:ad:fd:7f:d7:86:73:1a:11:e5:e3:df:55:f0:
5d:64:b2:d7:32:49:75:00:96:89:cb:7f:cd:2a:4a:9e:9c:c6:
9d:c3:3f:71:ce:53:3a:d8:b8:41:a5:cc:35:af:b2:aa:90:5d:
81:ba:9a:5e:d1:0a:a6:3a:6d:5b:8f:75:75:65:53:e0:2c:09:
52:20:c5:cb:e3:33:3c:fa:11:31:63:37:34:e0:4b:b2:34:43:
25:3b:23:21:5a:ef:43:2a:78:c4:44:8c:81:85:12:d8:05:da:
0c:aa:0c:4a:95:5c:f2:ab:d0:22:19:7c:49:08:80:6d:7f:ae:
2c:00:98:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:52 2026 by rpki-client