
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
File: US3AbkHAiZokofyIXrNG5FMH80c.mft (raw, json)
Hash identifier: xYgsAQ2kD+82XZtPcQAQYbfF2HvHSC9Ox65tby5bmRg=
Subject key identifier: 32:4D:2A:0D:4F:01:E5:92:71:37:CD:0B:1D:EC:CD:10:6D:12:61:45
Authority key identifier: 51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47
Certificate issuer: /CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347
Certificate serial: 0A10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
Manifest number: 0A08
Signing time: Tue 12 May 2026 19:52:12 +0000
Manifest this update: Tue 12 May 2026 19:52:11 +0000
Manifest next update: Tue 19 May 2026 19:52:11 +0000
Files and hashes: 1: US3AbkHAiZokofyIXrNG5FMH80c.crl (hash: KYb8JJtIkVSrJ+EI4RVWe1+XC+R5//QgYTJORUZ8oLI=)
2: 9EEA3006979411EA8C6FC25AC4F9AE02.roa (hash: TtvgX0HunQnxwePu7sD+x5FU7eZoqly/IQVqoa8h86s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl
rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2576 (0xa10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA4F2, serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347
Validity
Not Before: May 12 19:52:11 2026 GMT
Not After : May 19 19:52:11 2026 GMT
Subject: CN=6a0384ec-f93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:bc:77:f2:d7:e7:a5:24:8c:64:be:70:51:
0d:5a:6f:ef:fd:15:4c:47:3e:02:c2:fd:96:b2:4f:
e9:fc:4d:98:39:26:34:00:59:e7:86:99:d0:6a:0d:
07:e3:c1:34:03:7f:7b:e1:18:cf:63:22:6d:1b:5d:
22:e8:70:27:07:37:7b:f9:2b:d4:ae:fd:35:d5:0e:
69:03:0e:e0:19:8f:b2:87:5c:4a:e6:29:1b:8d:63:
9a:4c:15:c0:11:3d:18:4c:cd:90:7d:79:b8:35:43:
8f:ee:9b:4a:8e:3f:53:f1:8d:3d:36:25:89:8e:4d:
f4:48:39:05:ce:71:b1:9c:ba:58:4c:28:e6:e0:46:
30:49:b3:e7:ef:0e:12:97:4d:a9:9d:24:a6:03:59:
37:e1:88:22:7d:1f:88:6f:94:5c:0b:57:c3:e2:8b:
56:73:96:b9:d8:74:75:32:9c:df:90:b8:9a:01:9f:
5d:a0:7d:06:2c:ac:87:43:69:85:83:a0:57:d8:93:
fb:c4:cd:c6:5d:35:f1:61:a9:bc:62:b7:4b:df:67:
48:1e:62:1f:03:f8:02:e0:3a:8e:97:6d:7e:46:bd:
17:8b:9d:b0:c8:6e:97:d2:86:77:30:32:de:aa:6e:
12:f4:4f:4d:e2:06:3e:79:d6:35:c7:44:6e:be:58:
10:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4D:2A:0D:4F:01:E5:92:71:37:CD:0B:1D:EC:CD:10:6D:12:61:45
X509v3 Authority Key Identifier:
keyid:51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ad:09:4c:2f:e5:97:0e:2e:c6:a0:7a:d8:9b:f2:8c:b2:07:
bb:c8:d4:53:6f:38:5d:8c:7d:76:79:dd:4c:15:52:19:ea:4b:
1a:82:8d:b2:8a:86:21:2d:53:b1:02:f3:c0:85:c2:93:9f:95:
82:7d:1a:3b:1e:8c:3b:8f:b1:7a:79:23:86:3d:87:f4:33:fc:
42:24:31:58:57:c5:d8:e9:ae:c3:ad:61:f1:c5:43:26:9d:ab:
73:c9:cf:5f:0e:05:1c:02:d0:c0:44:c6:6a:05:d3:56:a3:64:
a3:f5:a6:65:0e:2a:2d:a2:db:9d:9b:d9:a2:45:3b:40:c9:72:
5d:a3:2d:a9:81:81:91:d3:0e:ba:a1:00:d9:70:44:4c:9e:13:
f8:cc:0d:6a:5a:07:e2:65:fe:52:0c:73:d7:5a:50:a6:20:1d:
ca:d5:e4:0e:de:06:bf:e8:23:b2:f1:1d:11:73:c6:5b:c3:53:
a8:90:85:4c:4a:80:58:e0:e9:98:4b:ac:96:47:40:3f:76:b8:
9c:d3:74:c3:45:3c:09:9c:2c:73:18:1d:08:9d:95:e6:fe:b7:
31:91:52:78:e2:51:d2:06:b3:af:a7:7f:fc:23:d8:b7:be:22:
09:3e:df:2e:f2:e6:69:b7:61:b3:21:84:ad:70:69:32:05:d1:
c5:d2:f3:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICChAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkE0RjIxMTAvBgNVBAUTKDUxMkRDMDZFNDFDMDg5OUEyNEExRkM4ODVFQjM0NkU0
NTMwN0YzNDcwHhcNMjYwNTEyMTk1MjExWhcNMjYwNTE5MTk1MjExWjAYMRYwFAYD
VQQDEw02YTAzODRlYy1mOTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt628d/LX56UkjGS+cFENWm/v/RVMRz4Cwv2Wsk/p/E2YOSY0AFnnhpnQag0H
48E0A3974RjPYyJtG10i6HAnBzd7+SvUrv011Q5pAw7gGY+yh1xK5ikbjWOaTBXA
ET0YTM2QfXm4NUOP7ptKjj9T8Y09NiWJjk30SDkFznGxnLpYTCjm4EYwSbPn7w4S
l02pnSSmA1k34YgifR+Ib5RcC1fD4otWc5a52HR1MpzfkLiaAZ9doH0GLKyHQ2mF
g6BX2JP7xM3GXTXxYam8YrdL32dIHmIfA/gC4DqOl21+Rr0Xi52wyG6X0oZ3MDLe
qm4S9E9N4gY+edY1x0RuvlgQbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDJNKg1P
AeWScTfNCx3szRBtEmFFMB8GA1UdIwQYMBaAFFEtwG5BwImaJKH8iF6zRuRTB/NH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTRGMi8yQUVERUY5QTk3
OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWlab2tvZnlJWHJORzVGTUg4
MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VTM0Fia0hBaVpva29meUlYck5HNUZNSDgwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTRGMi8yQUVERUY5QTk3OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWla
b2tvZnlJWHJORzVGTUg4MGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPa0JTC/llw4uxqB62JvyjLIHu8jUU284XYx9dnndTBVSGepLGoKNsoqGIS1T
sQLzwIXCk5+Vgn0aOx6MO4+xenkjhj2H9DP8QiQxWFfF2Omuw61h8cVDJp2rc8nP
Xw4FHALQwETGagXTVqNko/WmZQ4qLaLbnZvZokU7QMlyXaMtqYGBkdMOuqEA2XBE
TJ4T+MwNaloH4mX+Ugxz11pQpiAdytXkDt4Gv+gjsvEdEXPGW8NTqJCFTEqAWODp
mEuslkdAP3a4nNN0w0U8CZwscxgdCJ2V5v63MZFSeOJR0gazr6d//CPYt74iCT7f
LvLmabdhsyGErXBpMgXRxdLz0g==
-----END CERTIFICATE-----
Generated at Wed May 13 03:57:03 2026 by rpki-client