
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft
File: 3NoGnj7_iVbAFXKBanAjUZXwZyU.mft (raw, json)
Hash identifier: vGp9sg0VlZi6dh2PmwJ4ZEfmqapmWYvYN/VClfbuBG4=
Subject key identifier: 96:12:19:51:B8:AC:A1:36:2A:E9:F3:00:4D:5B:24:48:50:B0:DA:B6
Authority key identifier: DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25
Certificate issuer: /CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725
Certificate serial: 01B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft
Manifest number: 01B3
Signing time: Mon 11 May 2026 04:06:03 +0000
Manifest this update: Mon 11 May 2026 04:06:02 +0000
Manifest next update: Mon 18 May 2026 04:06:02 +0000
Files and hashes: 1: 3NoGnj7_iVbAFXKBanAjUZXwZyU.crl (hash: 2gKDgnd6P0iuDUSpyfQzH9n4d5u/R6tLxhcNcfUwvgM=)
2: 37D72D7CC17C11EE8391A218C4F9AE02.roa (hash: f0Nq6bNqAFhlnNadTuboxrgMX1sJQBWxkk0foam6u60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl
rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9F31, serialNumber=DCDA069E3EFF8956C01572816A70235195F06725
Validity
Not Before: May 11 04:06:02 2026 GMT
Not After : May 18 04:06:02 2026 GMT
Subject: CN=6a0155aa-eb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:e1:3b:1a:93:88:6e:b9:ea:15:64:fa:69:
f2:43:16:97:2a:65:ca:9b:4a:0e:00:b6:97:d1:5d:
67:90:37:fa:67:10:dd:48:e2:22:96:95:ce:31:b0:
a3:a3:e9:4b:81:3b:df:8b:cc:7b:e5:61:d4:ab:c9:
3a:df:83:46:81:0b:8c:82:c7:30:c5:ff:f1:24:c6:
65:3a:a3:13:26:72:b6:c6:b0:c7:ca:3c:26:0c:98:
33:2e:c1:21:59:09:8d:4f:a3:7d:d1:66:81:a8:77:
6e:de:22:c3:7d:14:dd:71:b5:1d:69:50:41:e9:0a:
1a:9c:49:73:44:45:ba:91:a9:f1:bf:80:50:09:d9:
9e:c8:98:a3:8c:bc:0d:f1:04:ab:b8:4a:1b:ba:11:
4e:f1:e6:4e:50:d0:ba:83:14:c2:4a:89:b7:fa:ff:
b5:98:be:7a:98:36:9f:d5:3f:b7:43:ad:ff:f1:c3:
f9:e0:11:69:f6:f5:4d:b0:d7:85:ab:3c:8f:fa:e2:
f0:97:d4:d9:51:d0:f5:23:51:00:66:8c:e5:12:49:
dc:f8:e1:09:6c:53:18:0b:f7:7a:e2:1f:59:7a:5a:
5d:d6:a5:30:c7:69:59:06:14:83:a7:61:b5:1f:77:
ee:02:7b:8d:00:fe:b6:90:01:87:48:c1:75:56:36:
de:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:12:19:51:B8:AC:A1:36:2A:E9:F3:00:4D:5B:24:48:50:B0:DA:B6
X509v3 Authority Key Identifier:
keyid:DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4e:98:4f:1b:ca:6d:d5:96:f5:3a:a5:2b:84:ab:78:4d:4d:
29:37:1e:d5:41:3e:d9:87:aa:da:3f:09:91:6b:d4:1b:04:1d:
fa:92:75:1d:2c:d8:b3:26:b9:7c:3e:ce:b5:01:0b:07:2f:a2:
58:8b:7f:a8:0c:c4:55:9c:0f:a4:64:e4:9d:76:f8:20:b9:c7:
e0:ae:ab:d5:a6:3a:f1:94:a7:ba:d0:19:be:d3:80:1c:6a:91:
01:4e:67:a6:a0:74:56:80:8e:dc:6c:98:c9:30:56:ce:7f:c9:
c1:6e:ca:58:ed:40:99:9e:bc:68:73:47:e0:b6:47:8e:35:d0:
4c:39:17:38:d9:25:4c:c6:12:aa:ed:34:58:8d:65:90:79:1b:
48:b1:35:d3:35:6e:14:f1:69:dc:b3:0b:b7:39:79:88:66:50:
09:83:c2:d1:b1:79:9f:5e:ad:48:07:d4:48:86:dd:e4:8d:d7:
02:39:07:fc:d5:32:39:f3:62:06:c1:bf:0d:9e:e6:0b:62:50:
0a:3a:af:54:58:18:17:5f:98:9d:8f:cc:b2:fe:61:57:a8:cd:
f9:be:59:07:c4:85:42:a6:ab:fd:0a:0d:d6:15:8c:fa:dc:c3:
a2:58:b6:86:ee:5c:9b:f5:8a:6d:c7:ed:76:b0:cb:84:66:34:
94:40:f8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:19:57 2026 by rpki-client