
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
File: N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft (raw, json)
Hash identifier: 3A7wg5LQgs857BrF1w2Wx7mw9Ukx6ZY+M2L0PNZ2mWE=
Subject key identifier: 14:AF:25:99:DE:35:05:3D:86:9B:B5:08:23:CD:AA:23:96:6E:C2:24
Authority key identifier: 37:74:6A:86:93:B3:B8:3F:50:1D:71:5D:10:30:B9:54:72:BE:3A:F6
Certificate issuer: /CN=A91F53A5/serialNumber=37746A8693B3B83F501D715D1030B95472BE3AF6
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
Manifest number: 28
Signing time: Thu 23 Jul 2026 01:27:26 +0000
Manifest this update: Thu 23 Jul 2026 01:27:25 +0000
Manifest next update: Thu 30 Jul 2026 01:27:25 +0000
Files and hashes: 1: N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl (hash: oYcH2o7cPmv1l8AlsFPL0DIK/+X2mOfOTaEVbn3KV58=)
2: 8F3BB5304DCD11F191088215B4833773.roa (hash: lA3Zts59kRJf+K26QY68A9dBrBr6aTNWe+CFgHwsnZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl
rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F53A5, serialNumber=37746A8693B3B83F501D715D1030B95472BE3AF6
Validity
Not Before: Jul 23 01:27:25 2026 GMT
Not After : Jul 30 01:27:25 2026 GMT
Subject: CN=6a616dfe-f599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:08:ff:45:b7:34:c8:72:6e:fa:df:ae:d8:
45:48:6a:af:15:2e:1a:ef:25:55:71:de:18:13:f9:
c2:c3:2f:93:86:33:42:ae:0b:c0:7f:d9:6b:9f:1c:
3b:f6:56:3b:d6:1e:e8:4c:dd:c1:52:a5:d7:4d:ec:
09:3a:fa:20:84:1d:75:66:c4:22:28:b5:a9:27:a9:
96:ca:85:e8:30:8f:d5:5e:55:f3:f6:f5:52:3e:40:
40:ed:a9:3e:db:66:64:07:ae:a9:65:3a:c3:14:1b:
47:3c:fc:db:cc:55:e9:ea:d1:2f:81:2e:57:43:2c:
f9:79:01:d5:af:56:7e:0f:3f:ac:55:7f:45:b6:38:
2e:af:e2:70:83:17:0b:8f:09:08:e6:0e:8e:45:6e:
33:b7:34:b6:c5:87:dc:1f:1e:5b:fa:0a:03:86:7a:
69:69:9c:c3:11:fc:e1:b7:31:5f:bc:28:47:b7:f6:
25:af:44:9c:92:4d:ea:1c:25:cd:4d:bc:ff:62:da:
0c:81:e5:57:c4:65:39:fc:3a:ae:41:4e:59:90:c8:
de:f3:c1:0f:37:d3:7a:6e:ca:da:2b:2b:b5:95:56:
8a:72:4c:0e:d2:30:9d:f8:ef:7d:14:c7:57:bb:bb:
91:15:a4:39:49:54:16:64:c4:6c:18:ae:03:fa:ed:
05:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AF:25:99:DE:35:05:3D:86:9B:B5:08:23:CD:AA:23:96:6E:C2:24
X509v3 Authority Key Identifier:
keyid:37:74:6A:86:93:B3:B8:3F:50:1D:71:5D:10:30:B9:54:72:BE:3A:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:07:93:c5:4b:fc:e4:bd:ec:65:21:db:de:21:36:e1:d8:00:
45:3a:92:c6:d2:e2:b0:3a:d9:0b:86:f6:b2:94:b6:d3:64:9b:
82:ff:ed:c0:ea:8d:82:e7:73:7d:e2:9d:e2:37:37:83:ad:85:
f4:7d:29:1a:b6:ab:27:0e:26:4f:0c:2a:77:00:5d:70:68:c7:
27:6f:7e:05:3a:4d:a3:ae:e2:76:2b:91:35:be:fc:ac:f7:94:
cc:cd:84:55:8e:96:3e:40:7f:83:df:cb:10:37:09:89:ee:dd:
bf:24:d1:73:e5:be:d9:0c:ae:89:01:24:c0:95:1e:bb:9b:d1:
93:72:f0:86:54:14:8e:51:dc:d8:15:21:a5:47:11:8b:93:01:
2c:f0:dc:89:02:b9:d0:82:6f:b8:e2:bd:63:ff:35:68:5c:d2:
06:0f:a5:f3:3e:50:98:6d:cb:20:ce:4e:d6:05:9b:20:82:0d:
8e:42:16:54:8b:7e:06:bd:24:c5:64:ed:48:cb:5c:13:cd:c4:
37:02:2e:f3:c3:62:e2:8d:61:5c:86:a4:8a:30:a8:3f:84:6e:
51:80:ce:ac:48:bf:56:fc:1a:61:86:c2:87:93:9f:fa:39:25:
b5:af:39:d9:54:97:77:a8:07:61:27:62:02:c7:6b:89:65:39:
7e:e8:f7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:38:45 2026 by rpki-client