
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
File: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft (raw, json)
Hash identifier: +8kB7CIxXq368fgOw7QJw2FI//rw8TMC12duoAb+G2M=
Subject key identifier: 9F:C3:37:63:1E:C5:84:67:6F:C9:1F:FC:D5:82:DC:DE:DE:5A:3C:C8
Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
Certificate issuer: /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Certificate serial: 041D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
Manifest number: 0409
Signing time: Thu 23 Jul 2026 01:17:51 +0000
Manifest this update: Thu 23 Jul 2026 01:17:51 +0000
Manifest next update: Thu 30 Jul 2026 01:17:51 +0000
Files and hashes: 1: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl (hash: EODb4jP2bY0KmWlZGdpXQUrI8O4Ma0OQEPIJum41BWU=)
2: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (hash: k2oBvP0OHpEhn0rFjfJBUkA03yXoD6fncIA5rTRi8ZU=)
3: 67A55414D56911EFB3E08134C4F9AE02.roa (hash: kAzpZUfwrPPULu39+opOJk6qvp1ijsjz0hw+Ol5r+ds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl
rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1053 (0x41d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6DB3, serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Validity
Not Before: Jul 23 01:17:51 2026 GMT
Not After : Jul 30 01:17:51 2026 GMT
Subject: CN=6a616bbf-e817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:a2:63:f9:b1:69:78:60:b1:f0:73:bd:19:
1a:22:d1:eb:d6:0b:de:95:60:85:38:80:e0:59:3a:
d9:9c:71:c6:99:69:98:55:bb:74:71:8f:6b:59:0d:
40:cd:4f:cd:8b:0c:78:35:6e:f0:23:0d:a2:a8:a7:
47:0d:d7:da:d5:e7:72:14:5b:6a:e4:13:b0:f2:4a:
9a:6e:6a:36:02:e8:09:5d:4f:8d:89:10:c0:f4:94:
76:eb:9d:6c:f2:cc:06:1f:d0:0d:36:62:a1:f5:6c:
94:1c:b8:b3:df:43:6c:37:a7:42:83:5e:4c:8d:b0:
b5:3e:58:b3:44:97:50:0d:3d:8c:70:d1:95:bd:df:
7c:7d:72:51:6e:c4:7a:89:2d:48:d6:89:f8:4e:01:
5c:1c:4a:ba:0f:c0:53:b3:30:1f:3a:aa:61:9e:2a:
5a:b8:a1:d3:53:88:c0:74:f3:c1:1a:06:86:a4:80:
1f:7a:56:dd:46:22:19:04:fb:ac:53:bc:ea:bd:cc:
f7:d9:ea:8a:e3:b2:37:fb:13:80:49:70:a8:5e:af:
39:ed:05:06:7a:cc:ca:8d:a1:af:78:52:74:14:67:
e4:a9:3d:11:0b:44:ab:7e:8b:d6:13:af:22:b9:f5:
58:6c:a0:45:bf:c0:1c:6c:f0:75:10:37:fa:54:30:
59:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C3:37:63:1E:C5:84:67:6F:C9:1F:FC:D5:82:DC:DE:DE:5A:3C:C8
X509v3 Authority Key Identifier:
keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:96:22:fb:75:f8:78:56:b3:b0:28:9e:eb:b9:55:d0:df:1d:
8a:f3:f9:74:f5:8f:fd:69:a1:1d:7f:de:88:c2:98:9e:71:4c:
27:2f:61:30:f3:9e:19:9c:1c:2f:60:51:1d:cd:f5:b9:b1:f9:
06:00:b7:99:d1:9e:db:0b:55:6b:62:11:58:5b:8e:db:33:f5:
8c:bd:4f:f5:fd:72:1e:08:0e:c8:41:d2:0c:b1:47:33:23:ca:
ba:c1:ab:2a:8d:fe:fb:4c:89:08:60:f3:ff:8f:27:1e:8e:83:
5b:ba:90:af:8e:29:fa:19:0a:07:91:d1:55:f0:59:66:fb:46:
87:23:1b:58:89:74:08:c1:29:9a:f4:0e:cc:8d:d5:84:74:bf:
89:b3:92:b1:92:db:b2:de:f3:43:b0:bd:bc:98:38:1c:de:d5:
ba:79:f1:cd:a6:5a:58:30:5f:54:56:87:77:c7:bc:67:8b:9d:
f8:7a:3b:6e:46:05:ac:7c:27:53:af:6f:a2:7f:bf:dc:27:af:
06:f0:6d:8f:e7:54:2a:f6:61:e1:e1:23:c2:c8:e7:54:9a:cb:
b1:22:0a:66:b2:7e:ec:79:6c:80:f3:23:61:bb:7f:80:d7:2d:
0b:92:35:0a:86:40:fd:8a:84:2e:6f:c0:38:ca:ae:88:f7:34:
e6:3c:38:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:45:47 2026 by rpki-client