
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
File: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft (raw, json)
Hash identifier: YkUl0c3umyntwy0vvcbDAEccapWzNmVAF+amio+fYS0=
Subject key identifier: 34:66:60:8E:58:AE:41:22:53:C7:48:49:F3:4D:D3:7D:0C:97:D2:48
Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
Certificate issuer: /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Certificate serial: 03F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
Manifest number: 03E5
Signing time: Wed 13 May 2026 00:39:51 +0000
Manifest this update: Wed 13 May 2026 00:39:51 +0000
Manifest next update: Wed 20 May 2026 00:39:51 +0000
Files and hashes: 1: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl (hash: f0eOkf591rFVfKbIagDdHF3iPa8LO2IxmFszYPxKPP4=)
2: 67A55414D56911EFB3E08134C4F9AE02.roa (hash: kAzpZUfwrPPULu39+opOJk6qvp1ijsjz0hw+Ol5r+ds=)
3: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (hash: k2oBvP0OHpEhn0rFjfJBUkA03yXoD6fncIA5rTRi8ZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl
rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1017 (0x3f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6DB3, serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Validity
Not Before: May 13 00:39:51 2026 GMT
Not After : May 20 00:39:51 2026 GMT
Subject: CN=6a03c857-3791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:7a:73:5e:1a:c3:be:12:36:a7:a8:53:73:
67:ed:43:dd:c3:56:1c:b8:3f:9b:87:e6:c6:ae:3a:
00:99:44:6c:89:fe:e9:b4:ee:36:2a:61:c3:02:2e:
67:4f:d3:fa:2a:53:e8:73:72:fd:22:34:1c:fa:e0:
0d:d4:30:e6:ef:af:5f:ca:7b:ac:d3:4a:39:4f:8b:
f8:6e:27:4c:f1:f4:56:ec:cf:80:a4:14:a9:1c:d8:
13:d2:52:5a:4d:c9:26:2e:b4:e1:5c:d2:a6:31:45:
42:9a:fb:bc:6f:34:82:24:43:84:68:53:14:49:dd:
e2:aa:25:39:60:ca:12:55:7b:80:41:91:29:f0:8b:
db:37:aa:5f:2c:43:3e:0b:28:09:87:1a:f2:eb:81:
cd:bb:9e:c8:f9:f8:e8:cc:e4:58:e6:76:e3:1a:d9:
be:e7:88:4a:b1:d4:bb:eb:b5:bc:a4:53:3e:f0:e3:
d3:f7:52:b4:5e:b1:8f:b3:29:0b:cf:8d:fb:35:c4:
3d:8b:6a:e9:72:76:c7:3d:92:9b:3a:84:03:1b:1e:
d9:20:2d:4d:1b:c3:02:f8:e3:eb:95:c0:a9:ac:08:
a6:e9:a6:8b:5c:dd:df:06:7e:bc:8b:b2:57:b3:98:
ac:6e:2a:71:73:05:a2:a8:49:3d:0d:dc:70:4b:46:
df:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:66:60:8E:58:AE:41:22:53:C7:48:49:F3:4D:D3:7D:0C:97:D2:48
X509v3 Authority Key Identifier:
keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:cf:e2:66:58:d4:c8:fd:63:bb:74:74:9b:23:6e:9e:59:70:
14:d1:4c:e9:f7:a6:6d:49:69:10:85:7b:09:26:64:73:c6:0e:
e7:65:ee:bc:39:77:e5:8c:af:3f:00:32:74:b9:1c:2e:77:4e:
35:6b:bd:39:2f:a8:5b:a5:d2:dd:47:98:37:b1:c4:46:a5:9f:
ec:f6:db:59:e2:74:d1:0d:83:2d:ce:1a:9d:03:b0:af:13:83:
c3:2b:4a:78:29:01:51:e1:e9:e2:c7:6a:28:15:31:66:84:ec:
58:40:99:5c:d2:71:21:53:e1:f7:43:7c:24:39:5a:29:87:44:
89:d5:34:db:97:2e:0b:f0:94:72:ee:29:20:f6:cd:cb:63:a3:
5d:c5:ec:6a:11:89:30:e3:51:b0:f0:cf:de:ba:a5:da:d6:ab:
74:4d:c6:a8:14:6c:e1:cd:46:e2:04:14:aa:9c:52:1a:68:56:
47:17:c4:79:e4:f1:aa:76:db:83:0c:7a:67:fc:cc:aa:50:1d:
e3:e3:32:b5:25:ee:48:29:67:d0:ff:c0:81:1f:42:36:bc:ef:
7b:95:34:c6:84:a7:aa:34:88:c6:9d:9e:bb:b9:06:cf:ba:67:
10:a5:4c:23:fa:10:20:ab:b6:e9:68:c4:ed:7d:04:1d:5d:ea:
eb:63:d9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:49:29 2026 by rpki-client