
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
File: gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft (raw, json)
Hash identifier: 5U3l1IlLOIuohcVNEVjzumXw+5rochoNBUu8J8fzAfQ=
Subject key identifier: 64:9F:DC:3F:7C:BF:8D:DA:93:DB:E4:4A:6B:66:A0:CC:34:BB:92:06
Authority key identifier: 81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
Certificate issuer: /CN=A91E6BEF/serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Certificate serial: 0E73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
Manifest number: 0E67
Signing time: Wed 22 Jul 2026 17:56:26 +0000
Manifest this update: Wed 22 Jul 2026 17:56:26 +0000
Manifest next update: Wed 29 Jul 2026 17:56:26 +0000
Files and hashes: 1: gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl (hash: eJYG2bPaj7EDzoukf8P/+5JZ6hA27Ym7GOFP10P2EWc=)
2: FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa (hash: DD1ADaREQj4FZ7nnow63JObODw7KCChH9CO7F5RCGA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:56:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3699 (0xe73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6BEF, serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Validity
Not Before: Jul 22 17:56:26 2026 GMT
Not After : Jul 29 17:56:26 2026 GMT
Subject: CN=6a61044a-e297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:18:11:94:29:8a:e8:06:60:80:51:61:cf:
69:5a:95:94:df:f6:21:2b:ff:e2:af:cd:4c:48:69:
2b:f0:4c:e3:eb:87:5e:9a:51:36:b1:ec:67:4f:b4:
b3:7d:dd:bf:4f:05:40:8d:65:b2:cb:37:1a:09:f9:
1b:4a:93:10:ca:d7:d4:d9:3f:73:ae:cf:93:16:7a:
8c:eb:d6:9c:f8:1e:93:75:66:a0:9f:80:6d:49:e4:
99:fd:2d:d1:85:de:f6:87:dd:29:96:f0:d2:55:e8:
36:61:ef:06:7a:7d:50:fb:24:97:c9:0c:12:e2:fd:
f1:c1:6f:60:8d:fe:5b:86:4b:3d:9f:9f:6c:db:5a:
ae:b7:78:1c:b1:12:f2:9b:54:5f:a4:2e:8b:a0:d2:
d1:a4:dd:b1:68:29:55:19:5e:ae:b6:88:31:66:6e:
74:8a:04:48:fb:bd:32:ab:45:aa:e8:88:83:1f:3f:
a5:c6:dd:2c:17:d4:75:72:e9:f1:cf:06:18:93:1b:
25:3a:7d:63:2a:ac:3a:07:ba:71:57:fb:53:9b:c3:
85:6d:f9:28:07:0c:49:da:3c:5c:1b:8a:fa:4a:a5:
48:0d:01:7c:1b:73:63:86:b8:6f:1d:8a:9f:7d:17:
08:80:b1:30:3d:61:1d:22:d4:35:e9:12:1b:d6:6b:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9F:DC:3F:7C:BF:8D:DA:93:DB:E4:4A:6B:66:A0:CC:34:BB:92:06
X509v3 Authority Key Identifier:
keyid:81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:dc:6a:61:57:f5:19:f1:ac:39:2d:5c:7e:a9:ac:7f:18:4d:
c7:e6:07:9f:ff:f1:37:36:5c:f4:3c:93:07:c8:88:70:4d:33:
36:7c:5c:46:1c:f1:04:df:db:9c:09:8a:e5:4c:f7:2c:ce:01:
46:39:a3:63:2c:a8:64:99:ec:95:46:06:2d:07:29:41:04:b9:
1a:71:4c:58:d0:8a:61:de:2d:2a:55:95:6f:c2:f1:10:69:16:
50:1a:ac:33:76:fb:6a:d5:85:cd:a3:cc:99:e6:a5:97:38:1b:
a9:07:64:8f:b5:41:1d:e7:e8:28:e6:6f:86:f1:38:a0:52:b4:
70:21:ff:34:42:d7:ff:59:a4:cd:97:ac:67:2e:c2:10:52:e4:
bc:f4:02:5a:a4:a1:ff:8a:9f:4b:33:9f:4f:e1:f3:0b:85:19:
fe:cf:cf:c5:12:8e:e9:00:3e:93:60:bf:62:a3:90:5c:c3:ec:
29:0e:40:4b:cf:21:78:cc:a6:7e:50:ac:65:5e:ed:72:ce:df:
2a:9b:ae:b3:3a:14:ee:fa:f6:16:4b:05:a8:97:8d:76:e7:d3:
b9:3f:4f:48:06:6e:76:2c:15:a3:2e:4a:37:87:88:fc:25:58:
b6:7d:77:39:e0:bf:cf:af:9b:74:46:5e:b7:f0:4d:97:03:74:
a8:ee:4d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:48:49 2026 by rpki-client