
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
File: 3VM9EaneKrkYCFCDvoLVFDTfRUA.mft (raw, json)
Hash identifier: uT5NbuPXhnjVX+PNPDqvtbHEQpJd9mocJ3vVBLZ3DDQ=
Subject key identifier: 92:E5:01:CE:1F:0D:81:57:2E:CF:CE:4F:2F:06:8D:68:AD:A4:43:71
Authority key identifier: DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40
Certificate issuer: /CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
Certificate serial: 16A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
Manifest number: 1699
Signing time: Wed 22 Jul 2026 16:47:12 +0000
Manifest this update: Wed 22 Jul 2026 16:47:11 +0000
Manifest next update: Wed 29 Jul 2026 16:47:11 +0000
Files and hashes: 1: 3VM9EaneKrkYCFCDvoLVFDTfRUA.crl (hash: /RtvaoABJGjPUcVSQsXkkjLNMvg4+P10X99eqTbHaRQ=)
2: 116B4B06282011E8BBA2F625C4F9AE02.roa (hash: VHKrRamBzI5Z2a2wNY14oKOBu6LJFzzc8akNzDVPDyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl
rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5796 (0x16a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8EB6, serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
Validity
Not Before: Jul 22 16:47:11 2026 GMT
Not After : Jul 29 16:47:11 2026 GMT
Subject: CN=6a60f40f-a94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:30:be:49:d5:e3:4a:6f:ee:64:af:52:c8:a0:
87:b9:de:b2:61:5e:73:df:d4:42:d8:0a:8f:c5:d8:
fe:d5:cf:b3:a5:d5:93:aa:de:62:57:41:fa:0a:e0:
0a:20:19:4a:af:3c:37:e4:b4:04:fc:96:b3:bc:56:
3b:59:e2:b8:50:f1:ff:ad:cf:6e:4a:20:79:56:7d:
63:a4:d1:ef:d2:8e:f9:9c:8b:97:e3:6c:e1:b8:33:
0c:d0:fc:dd:3d:e5:92:d6:f5:4d:12:97:bf:4a:d7:
ed:66:78:bb:f9:5f:68:23:50:1e:ae:b3:fb:09:52:
17:7c:fe:a2:6f:9b:ce:9a:d6:07:fd:da:02:25:8f:
b3:d3:61:da:c8:59:a1:05:7a:8e:e3:57:59:96:3a:
34:ca:50:b4:b3:3e:d1:6f:51:3b:92:85:07:c2:5f:
0b:83:2c:78:2c:cc:1b:0b:5a:97:71:7f:16:3c:7d:
56:70:16:06:57:23:1a:24:57:60:fe:4d:3c:38:a9:
9e:03:b9:61:42:d8:0c:70:8c:8a:a4:da:da:09:41:
7a:9f:71:08:b8:d8:e6:57:37:0c:89:c5:93:74:eb:
3e:15:bf:80:c2:5b:10:9f:8a:9a:62:24:84:30:b2:
20:93:cc:8b:6c:6f:61:19:98:e6:0c:15:f0:f1:9f:
02:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E5:01:CE:1F:0D:81:57:2E:CF:CE:4F:2F:06:8D:68:AD:A4:43:71
X509v3 Authority Key Identifier:
keyid:DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:5f:a6:d2:81:35:cc:74:54:a6:64:d6:f4:84:1f:17:9a:7e:
9c:09:cf:da:60:e8:f2:45:da:2b:c4:11:4c:0f:ca:7e:76:22:
90:24:f7:eb:18:2e:cb:f4:07:ca:09:b0:e7:eb:c2:ec:c9:50:
53:94:75:d1:44:01:e8:01:f8:fd:62:f6:48:23:d7:86:3f:2c:
d8:1f:d2:77:a8:f3:44:d1:28:42:eb:81:b1:ca:fa:67:28:38:
ba:c1:92:11:20:17:70:3f:84:6b:dd:23:69:ff:e8:f3:28:fb:
56:e9:92:df:4b:52:fc:07:52:c4:45:be:ae:11:ef:7d:98:ae:
de:98:ab:30:2e:e3:ce:5c:50:bd:10:77:d4:ae:de:b6:38:a6:
00:a0:7c:94:55:81:68:18:91:a2:9c:22:ec:4f:d8:91:00:a3:
61:d7:64:97:ad:cc:bb:4c:76:ae:76:85:ed:8f:c3:f6:6e:90:
f6:ef:14:93:ff:e3:bd:ac:c7:de:e0:f7:01:d2:c5:99:e4:c8:
f5:61:e4:52:1e:4a:19:19:aa:66:c8:6f:cb:b0:de:24:59:cb:
d5:0c:05:2c:57:53:90:cf:6d:a2:76:ac:50:8a:12:84:dc:dc:
c1:fa:34:19:0e:e9:ca:a5:ae:7a:2c:38:70:0f:a9:7c:ea:90:
54:31:99:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:43:37 2026 by rpki-client