
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
File: 3nORs21uduLMQKkEd3LACw93Umw.mft (raw, json)
Hash identifier: rb3IneMjgyD/d5dV7N2WM5MMisnWly9JBs9zKLlZiQc=
Subject key identifier: DB:EF:EB:5E:06:99:71:C9:2D:7E:7D:4B:7E:63:AB:7A:FA:B7:40:3E
Authority key identifier: DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C
Certificate issuer: /CN=A91E4696/serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C
Certificate serial: 024B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
Manifest number: 024B
Signing time: Thu 23 Jul 2026 02:48:57 +0000
Manifest this update: Thu 23 Jul 2026 02:48:57 +0000
Manifest next update: Thu 30 Jul 2026 02:48:57 +0000
Files and hashes: 1: 3nORs21uduLMQKkEd3LACw93Umw.crl (hash: 3+J01tUCMG5GeNdlT/JiU9qDP6y7N27Swj5uTbPmdd0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl
rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 587 (0x24b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4696, serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C
Validity
Not Before: Jul 23 02:48:57 2026 GMT
Not After : Jul 30 02:48:57 2026 GMT
Subject: CN=6a618119-d62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:62:d9:79:1f:4e:9c:16:4d:7a:30:b8:de:
8d:1c:4e:c5:1a:77:6b:ba:71:26:fa:ec:15:78:cd:
a9:f5:f5:bd:63:21:1f:19:86:2c:23:30:23:23:08:
3d:37:87:26:91:39:47:ff:ea:f9:66:c6:90:fc:1e:
78:18:a0:e2:67:b8:3c:1c:4b:0d:e0:81:8c:5b:ef:
09:78:ef:d4:e5:2c:aa:32:49:7c:69:57:58:6f:d5:
c3:cf:ac:6f:e4:3a:81:a9:17:e4:ac:7e:ea:09:ae:
ca:12:49:23:d8:9f:50:50:b1:98:29:aa:2a:73:51:
b0:67:27:f0:fa:bc:5f:ad:1d:fc:d1:96:6a:33:be:
b3:45:35:2f:3e:6d:f3:38:2d:74:5d:9f:4e:fa:4d:
d0:8c:48:66:e6:2f:c9:48:63:89:4d:42:69:8f:a6:
42:fd:74:c4:c7:b1:d7:ff:a4:31:4e:47:6a:fc:83:
fd:df:86:ca:46:3f:40:a1:b4:aa:f9:a8:25:d9:7f:
ba:cc:07:93:92:f1:f3:74:6a:9c:54:5b:85:5d:63:
77:4e:4e:6e:c2:69:f1:d5:69:ec:c7:c7:03:62:5b:
72:72:d6:21:ae:cd:53:de:d1:d9:2d:2e:9c:fe:8c:
cc:d4:d8:35:e7:53:5b:f7:4c:74:ee:0f:78:a0:69:
cc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EF:EB:5E:06:99:71:C9:2D:7E:7D:4B:7E:63:AB:7A:FA:B7:40:3E
X509v3 Authority Key Identifier:
keyid:DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:08:31:7c:bd:d3:7c:e9:58:fb:12:40:15:cb:46:e8:62:56:
ed:81:7a:d9:74:21:58:79:9b:72:e5:2a:da:ee:04:d5:7d:2c:
89:ee:fc:07:b1:81:b6:58:a1:83:ad:cb:1f:2b:15:fc:af:c2:
66:c5:1d:9c:0f:88:3d:c5:5f:4a:0e:f3:2c:e7:e7:77:8b:f7:
d7:2b:5d:52:90:6a:c7:1c:2b:c6:41:7c:1a:6b:66:35:1b:6e:
d7:1e:35:c0:36:48:fd:72:55:8c:47:e7:e3:75:73:5f:b4:50:
d9:19:a1:5a:55:d4:0a:74:f8:e2:68:48:c5:ba:a9:6f:e1:02:
9a:21:56:1f:20:9d:c0:13:26:9e:e4:1a:0c:07:5a:65:de:0e:
63:5f:d7:96:90:78:79:e1:99:d2:d2:01:eb:8f:28:1e:a9:fd:
06:f9:fe:f2:01:8e:1f:b2:21:d1:de:14:c7:23:e3:74:68:48:
9b:22:c7:34:d0:9f:34:e0:a5:9b:25:ab:7f:95:61:38:4e:f7:
52:3f:0c:f8:ce:62:5a:2e:8d:78:1f:e9:24:7f:b0:1a:a1:50:
eb:3f:9c:7f:87:5b:6b:a9:0d:7e:ff:69:73:1b:8c:62:3e:e5:
d6:55:fc:90:fa:7c:f2:aa:bc:45:ef:bf:11:b7:5b:c5:36:77:
c2:5c:b3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:37 2026 by rpki-client