
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft
File: su3iAzROnKc1AcVRQvmugWCeiYc.mft (raw, json)
Hash identifier: rymfkZ1fp22XTm3u21RQyjIzMwF+JeGLOw2muYxEfB4=
Subject key identifier: 7C:CE:AB:53:3F:CA:8F:1B:EB:4F:A7:86:6D:6B:4C:E6:14:75:73:41
Authority key identifier: B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87
Certificate issuer: /CN=A91E46A5/serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987
Certificate serial: 0D50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft
Manifest number: 0D40
Signing time: Wed 22 Jul 2026 18:19:34 +0000
Manifest this update: Wed 22 Jul 2026 18:19:34 +0000
Manifest next update: Wed 29 Jul 2026 18:19:34 +0000
Files and hashes: 1: su3iAzROnKc1AcVRQvmugWCeiYc.crl (hash: F7NHuU4iKO/5ehNZa74JCFpCrI1xtGYn0la5uM59KzM=)
2: CE094B08006B11EAA2719060C4F9AE02.roa (hash: 1V529Ks3PXwTRKi34Eodwq3M4BDwCRU11im6mkDfUoc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl
rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3408 (0xd50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E46A5, serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987
Validity
Not Before: Jul 22 18:19:34 2026 GMT
Not After : Jul 29 18:19:34 2026 GMT
Subject: CN=6a6109b6-3fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:21:ad:48:a3:a8:01:92:7f:9a:0c:59:5f:09:
f7:a5:93:f5:20:c4:3c:52:64:44:32:c6:dc:13:a3:
2d:38:ea:98:f5:7d:8d:bd:b8:f0:e4:84:73:d7:b4:
1a:b9:43:f5:f9:93:19:67:02:b0:d3:94:aa:27:91:
8d:43:52:c8:6a:8c:35:ef:87:f9:a4:1d:ad:ba:09:
88:06:ff:3f:3d:0a:aa:95:69:64:54:25:ca:ed:f3:
35:8f:a0:09:43:22:d4:8a:37:37:55:bf:ee:56:78:
ee:ca:49:4c:f3:4e:b9:8e:e6:91:ae:de:7b:17:ec:
72:b9:13:26:89:47:c1:9b:64:12:96:e1:d1:ed:b5:
b5:ad:5a:7f:b3:cb:94:bf:99:27:00:7a:d4:2f:b9:
81:aa:e5:fe:02:11:58:67:b5:88:6a:ac:bd:2a:1b:
ef:31:22:20:1c:9d:42:20:02:cd:e6:f8:34:84:8d:
e9:28:24:fd:25:8d:66:c8:a4:9d:98:dd:30:f6:25:
18:50:4e:75:d0:df:33:d6:ec:9e:34:9d:b4:33:19:
0c:ee:c2:8a:4b:5b:3e:3c:2a:7c:b3:08:50:1f:e2:
1b:bb:a1:3a:88:c2:85:75:fa:db:ca:58:7c:9b:91:
b1:33:2a:f1:c2:f1:fa:b0:33:0a:0b:1f:a7:9f:4b:
d6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CE:AB:53:3F:CA:8F:1B:EB:4F:A7:86:6D:6B:4C:E6:14:75:73:41
X509v3 Authority Key Identifier:
keyid:B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f9:d7:0a:03:32:c1:33:68:e2:49:63:1a:d7:95:74:5e:48:
59:00:4e:5a:f9:dc:9d:fa:39:5d:70:96:0a:ba:7a:68:30:c0:
2f:10:b9:9d:66:9b:88:d5:6b:00:63:f7:60:1c:dc:3f:ce:1a:
2c:de:2e:18:c5:a7:d5:ac:f3:76:36:41:b7:fa:e0:ba:ee:24:
d4:f3:02:44:29:9c:3f:7a:4a:d8:25:f2:da:ea:cd:22:5a:c3:
e8:d2:5a:a1:4d:11:61:d5:9c:f9:d5:48:9f:7c:9e:9d:6f:6d:
6f:ee:8c:4e:b1:4c:90:31:d5:fe:39:c9:de:c5:e0:3e:28:e8:
8d:5f:5c:86:c6:e4:51:42:b2:e8:c8:ee:33:af:b1:8d:e6:24:
9d:3e:61:63:5b:27:54:53:0c:b3:02:fb:7e:f7:88:97:7b:4c:
1e:43:44:7d:58:e9:c8:e2:63:fd:96:80:f3:31:ee:61:46:2b:
13:54:db:a5:fc:68:d2:b8:90:96:f3:39:df:ea:38:01:d7:12:
59:9e:1a:1d:cb:a4:8e:9e:4e:a8:c2:c4:33:fa:4e:2c:b4:aa:
a0:0b:83:3b:46:a1:df:e4:ae:c5:23:d4:0d:83:48:63:ae:aa:
5d:66:ea:24:a7:ed:2f:f4:5e:81:d3:c3:9a:31:3d:5d:c1:4a:
84:1d:22:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQ2QTUxMTAvBgNVBAUTKEIyRURFMjAzMzQ0RTlDQTczNTAxQzU1MTQyRjlBRTgx
NjA5RTg5ODcwHhcNMjYwNzIyMTgxOTM0WhcNMjYwNzI5MTgxOTM0WjAYMRYwFAYD
VQQDEw02YTYxMDliNi0zZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4yGtSKOoAZJ/mgxZXwn3pZP1IMQ8UmREMsbcE6MtOOqY9X2Nvbjw5IRz17Qa
uUP1+ZMZZwKw05SqJ5GNQ1LIaow174f5pB2tugmIBv8/PQqqlWlkVCXK7fM1j6AJ
QyLUijc3Vb/uVnjuyklM8065juaRrt57F+xyuRMmiUfBm2QSluHR7bW1rVp/s8uU
v5knAHrUL7mBquX+AhFYZ7WIaqy9KhvvMSIgHJ1CIALN5vg0hI3pKCT9JY1myKSd
mN0w9iUYUE510N8z1uyeNJ20MxkM7sKKS1s+PCp8swhQH+Ibu6E6iMKFdfrbylh8
m5GxMyrxwvH6sDMKCx+nn0vWHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHzOq1M/
yo8b60+nhm1rTOYUdXNBMB8GA1UdIwQYMBaAFLLt4gM0TpynNQHFUUL5roFgnomH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZBNS8wMjMxQzE1NDAw
NkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25LYzFBY1ZSUXZtdWdXQ2Vp
WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N1M2lBelJPbktjMUFjVlJRdm11Z1dDZWlZYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NDZBNS8wMjMxQzE1NDAwNkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25L
YzFBY1ZSUXZtdWdXQ2VpWWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArfnXCgMywTNo4kljGteVdF5IWQBOWvncnfo5XXCWCrp6aDDALxC5nWabiNVr
AGP3YBzcP84aLN4uGMWn1azzdjZBt/rguu4k1PMCRCmcP3pK2CXy2urNIlrD6NJa
oU0RYdWc+dVIn3yenW9tb+6MTrFMkDHV/jnJ3sXgPijojV9chsbkUUKy6MjuM6+x
jeYknT5hY1snVFMMswL7fveIl3tMHkNEfVjpyOJj/ZaA8zHuYUYrE1Tbpfxo0riQ
lvM53+o4AdcSWZ4aHcukjp5OqMLEM/pOLLSqoAuDO0ah3+SuxSPUDYNIY66qXWbq
JKftL/RegdPDmjE9XcFKhB0iVg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:34 2026 by rpki-client