
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft
File: N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft (raw, json)
Hash identifier: PhslIG7U/nSq/KYgKd63YVn7MNTzJc5b003U2vvWnyE=
Subject key identifier: 3B:B7:40:80:6F:E1:11:87:87:5A:69:8F:28:A0:13:AA:81:11:A1:61
Authority key identifier: 37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1
Certificate issuer: /CN=A91EA409/serialNumber=377835CDA2BD6367EF0FEB5EA58198F8183A87C1
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft
Manifest number: 011E
Signing time: Wed 13 May 2026 05:53:35 +0000
Manifest this update: Wed 13 May 2026 05:53:35 +0000
Manifest next update: Wed 20 May 2026 05:53:35 +0000
Files and hashes: 1: N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl (hash: MDhcv5JkcrjioFKSrB+STy/FZrZPaDdKD7m39Q6LStA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl
rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA409, serialNumber=377835CDA2BD6367EF0FEB5EA58198F8183A87C1
Validity
Not Before: May 13 05:53:35 2026 GMT
Not After : May 20 05:53:35 2026 GMT
Subject: CN=6a0411df-f632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:c8:1f:ec:49:22:9e:d5:ad:d5:ad:4d:42:
7e:9b:31:88:95:02:a6:2d:34:6b:60:93:61:07:0d:
47:82:8c:94:ed:01:e7:c0:db:0d:1a:20:bd:8f:d0:
4c:d3:01:eb:c8:aa:d1:03:6f:00:34:c6:d8:19:32:
b3:f4:03:ce:e4:81:80:4b:5f:d5:4a:d0:9b:ee:29:
f4:cd:29:74:6c:95:e0:24:fb:6a:12:8e:6f:f2:f9:
24:d0:93:2d:da:b2:4f:98:5f:19:56:5d:0c:14:e9:
61:65:9a:65:50:33:b0:f3:dd:00:2a:7d:98:6b:9b:
38:49:8d:a2:66:09:f0:23:51:50:84:06:e7:27:12:
72:ba:49:4a:8c:70:f3:11:fc:1c:38:0b:1e:61:0c:
8e:ff:74:8f:9b:24:3f:86:13:d8:ce:df:82:c0:58:
60:11:24:31:36:9c:26:e2:26:d0:ad:3b:e8:33:d5:
5f:94:f8:11:a2:e9:a3:b5:b1:9c:dd:6c:fe:fc:34:
50:de:cb:d3:ca:2a:8e:91:07:f6:f7:68:75:ec:c6:
2b:19:0b:9b:e1:17:9d:34:00:cb:ad:c9:e0:53:d9:
3a:a2:81:8a:38:2a:54:95:83:30:9c:bc:8f:a0:40:
b8:34:bb:00:df:31:a7:af:7f:96:f2:48:e7:1c:0b:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B7:40:80:6F:E1:11:87:87:5A:69:8F:28:A0:13:AA:81:11:A1:61
X509v3 Authority Key Identifier:
keyid:37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:96:ff:5d:61:ec:be:88:08:e3:59:40:50:1b:2b:d3:9e:30:
fb:95:aa:49:34:e3:fc:b0:fe:b7:78:a0:51:8f:ff:8b:4e:d2:
cf:ee:8b:77:3b:ab:c7:95:fe:3c:7b:70:6e:d7:b0:67:15:5d:
14:f2:31:db:64:31:f4:56:6b:3d:71:48:40:77:4d:63:fa:3c:
22:9b:05:60:8a:57:e6:84:af:f2:0b:6c:ad:45:f0:09:08:fe:
11:4f:f5:af:bf:be:ac:f6:41:e2:f9:2e:df:62:5d:62:d6:75:
c0:3f:b5:74:d6:e7:72:35:e3:5b:55:7d:f8:16:9c:48:e5:00:
9a:7a:fc:6e:7a:dc:51:17:6a:43:2f:7a:22:91:39:ad:80:30:
d6:c3:d6:18:1b:50:0e:3c:a2:89:86:68:be:cd:0b:85:0a:ee:
53:64:b9:30:89:89:71:79:a2:ce:68:53:00:3b:fa:c1:03:c5:
d8:df:24:fc:92:ce:6e:fc:6a:46:38:27:8f:4d:bc:0b:92:33:
b1:57:06:f4:97:4b:4f:de:fa:29:43:7d:9e:de:d4:b7:a8:90:
6b:73:fa:73:e5:50:1f:a6:3d:bd:34:f9:b1:f0:62:d6:6e:e2:
26:5c:15:d6:8b:70:f0:ac:75:fa:c5:1e:a4:2c:5d:2f:0c:4f:
2b:88:93:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:15:43 2026 by rpki-client