
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft
File: 3DHPX8nyg0g327s2g8uK9kKrSnw.mft (raw, json)
Hash identifier: LKIK5tY4XmjuiokNtEvsMOs5Or9x0eYI/aviKcqs+vk=
Subject key identifier: BA:77:87:30:A0:A1:8B:0E:9D:CB:28:38:AC:1A:79:24:E6:50:13:68
Authority key identifier: DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C
Certificate issuer: /CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C
Certificate serial: 01EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft
Manifest number: 01EA
Signing time: Wed 13 May 2026 03:25:14 +0000
Manifest this update: Wed 13 May 2026 03:25:13 +0000
Manifest next update: Wed 20 May 2026 03:25:13 +0000
Files and hashes: 1: 3DHPX8nyg0g327s2g8uK9kKrSnw.crl (hash: PPgReJ8Q/mM5gGUTXCr1UrtPIxruj3DlPqzu1LwzbTA=)
2: EE28B64661D611EE9C66300EC4F9AE02.roa (hash: uTyjoAh95BFvYOGGP6YDD2msOcpdKZlwbOX4CL5Jc1s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl
rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495 (0x1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF85B, serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C
Validity
Not Before: May 13 03:25:13 2026 GMT
Not After : May 20 03:25:13 2026 GMT
Subject: CN=6a03ef1a-44cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:02:2e:6e:20:33:7b:fc:fa:1c:62:ef:72:
96:d5:fd:5f:16:3b:b6:7c:29:b2:f9:da:2b:6b:9d:
43:0c:5c:45:2f:7e:74:a1:e1:ca:b5:74:e4:02:f2:
b4:d1:9d:f7:2a:07:a0:b5:f7:82:5a:ff:e1:20:52:
3a:eb:8a:d3:d4:01:7b:ee:6d:0e:80:c9:f9:3f:59:
ef:66:30:89:b0:99:8e:9d:6e:c7:46:cc:32:7b:d3:
c5:68:08:77:69:5a:c9:7b:bb:3a:34:24:ad:b0:a0:
b1:c9:20:20:e4:86:da:71:be:fa:b0:b0:1e:45:88:
83:2a:55:45:9f:31:58:74:fe:78:aa:d8:24:2e:ae:
2f:d5:6e:1e:eb:f5:73:1a:1e:e1:d4:a7:b1:fe:bb:
44:88:bf:70:69:85:90:7e:b8:21:33:19:2a:a9:f4:
c7:e1:96:0a:21:bc:ae:6e:75:16:94:e9:5f:ff:08:
a8:f3:be:42:ed:98:db:db:c7:2c:a1:15:d5:e5:c5:
a9:12:b3:51:e7:ff:ca:75:84:d6:b8:b7:ba:d0:43:
df:01:fd:be:22:f6:87:c7:bc:26:6c:e8:87:27:46:
2e:d2:44:03:3b:8f:8d:ce:e6:b7:f9:45:28:1e:1c:
9c:0e:ec:58:9d:10:47:ad:71:35:3f:7e:d7:a7:84:
ba:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:77:87:30:A0:A1:8B:0E:9D:CB:28:38:AC:1A:79:24:E6:50:13:68
X509v3 Authority Key Identifier:
keyid:DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b7:a4:a7:9f:aa:e4:01:89:24:67:2c:a0:14:7c:47:4c:1d:
4a:90:1e:9a:8e:d4:45:65:7b:ff:2d:e2:41:98:f4:1a:56:67:
f3:9b:93:bd:08:db:af:98:28:bb:49:65:01:7d:db:fe:c7:fc:
61:02:51:e7:a1:30:da:a3:3a:28:5a:08:b9:66:a8:4f:f9:8c:
ca:37:6b:ee:06:5d:2a:96:a2:5b:c9:d1:da:8d:47:83:2e:81:
56:89:96:23:ba:37:eb:73:46:fc:d4:32:bd:fc:95:e6:3e:c8:
fc:9b:39:d5:56:72:10:61:60:17:15:84:fc:3e:63:75:24:30:
91:b1:55:e9:71:d9:f1:7a:fb:b0:c7:3b:9b:c6:2e:37:c5:0a:
e7:16:df:a6:60:a1:da:53:f2:6e:b0:c4:e7:1c:aa:2b:a7:51:
d0:f8:37:17:9a:0d:f7:6a:ab:85:da:bf:6d:30:e9:97:6c:5b:
41:6a:01:a2:54:a7:f2:a4:54:1e:f5:29:4c:c7:1a:29:77:e0:
cc:eb:26:34:12:77:f2:ab:e0:8e:dd:cf:72:e4:2a:dd:49:57:
e0:25:15:0c:d8:af:cd:32:ea:55:96:87:57:ca:a6:ac:38:e2:
4e:c0:23:70:b3:95:9a:68:04:dc:4f:30:7d:8f:d3:ab:a4:d2:
db:0a:09:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:26:02 2026 by rpki-client