
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft
File: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft (raw, json)
Hash identifier: eKqSxLLSz2RPoienE9YtaE5KRlr59mUX/XEVfHDj9jE=
Subject key identifier: CE:81:FD:E1:4F:4F:EE:D3:21:64:99:11:7A:EA:EF:E3:98:36:CD:6C
Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B
Certificate issuer: /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B
Certificate serial: 067A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft
Manifest number: 0650
Signing time: Wed 22 Jul 2026 23:30:59 +0000
Manifest this update: Wed 22 Jul 2026 23:30:59 +0000
Manifest next update: Wed 29 Jul 2026 23:30:59 +0000
Files and hashes: 1: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl (hash: DfAmgr5s3TSj36B9LWTP360ePR3Y3/Ns94E+mntNUNE=)
2: 5AF5468879D811F18B1076AA62A30FBC.roa (hash: Txk3oJfW8oIUxGfHQSNc17ubTWdL39XUVrUs5+VxnYc=)
3: 8192DC9279D811F1ABEE2BAB62A30FBC.roa (hash: lzRS46VNGCFR6mmK03gAm8rTcOnzGRW+6BC889P7ELo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl
rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1658 (0x67a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5972, serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B
Validity
Not Before: Jul 22 23:30:59 2026 GMT
Not After : Jul 29 23:30:59 2026 GMT
Subject: CN=6a6152b3-1a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:e6:f1:61:51:8d:7c:af:7b:0d:85:5b:9a:
f4:5d:da:6a:8c:15:4f:79:20:c4:d5:05:ef:81:16:
30:bb:3e:d5:62:c3:79:9d:ed:5c:8c:19:ee:cf:ab:
6a:2d:f9:1c:68:5e:c0:8a:e2:76:c9:35:78:5f:b2:
e2:d9:91:36:be:89:dc:fd:06:66:c8:aa:96:eb:fb:
85:28:1c:3a:62:b5:be:0e:e8:97:19:ea:18:fd:9f:
4d:4c:aa:07:8f:9c:1e:c4:1d:fe:81:28:d3:4f:a9:
e6:68:98:ae:81:65:28:6f:a1:1b:69:ef:f5:c0:6e:
bc:5a:33:dc:b7:84:ec:5a:8a:4b:16:c3:cf:b7:52:
8f:8f:d6:7c:4f:1b:fa:45:40:20:0c:a4:bb:69:97:
11:f9:b1:5f:72:96:66:78:7d:6a:21:80:86:46:0a:
d7:5d:00:0f:39:40:48:4f:5a:78:7d:22:e2:73:e8:
de:49:a2:e0:08:7e:0b:c0:71:49:1d:d8:c1:d4:f2:
93:9e:2d:98:1f:2e:64:8e:0c:92:76:fb:c5:66:7f:
a9:36:41:36:07:fb:46:6a:ad:9d:29:ac:5e:46:45:
dd:e6:86:b7:18:da:8c:a4:df:b4:f1:e8:4d:b7:d7:
b3:73:47:68:dd:e5:20:b0:1c:2a:73:e7:70:a7:93:
ec:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:81:FD:E1:4F:4F:EE:D3:21:64:99:11:7A:EA:EF:E3:98:36:CD:6C
X509v3 Authority Key Identifier:
keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:09:05:1b:9f:e6:d8:bf:24:4f:c0:3b:6b:e3:a9:a5:7a:76:
89:a3:53:af:70:95:e0:9d:f0:9b:ec:e1:53:44:81:cf:b7:d9:
68:79:65:ce:2b:4f:c9:e0:8c:14:a8:53:46:48:1a:5c:39:ef:
95:9e:46:e1:d8:4d:1e:3c:82:a3:d0:94:02:46:d0:bb:09:ed:
cf:f6:2d:8f:29:46:0a:06:d2:c2:0d:f9:51:37:da:fc:a6:46:
56:a5:7d:7a:da:45:23:e4:98:4c:24:65:95:29:0c:08:39:28:
13:5e:b2:63:0a:3b:1a:45:db:39:00:0c:b4:06:75:64:f9:c9:
61:8d:0f:68:04:3e:51:f2:a9:61:b5:9f:c2:9a:00:c0:dc:51:
79:f1:ec:56:14:04:aa:74:06:23:5c:c9:ba:de:90:1d:68:5f:
31:33:f1:e0:4c:f8:65:7a:e6:d6:64:45:fe:6b:3b:4f:d7:bc:
0b:69:67:8b:f6:fb:93:df:d5:a6:42:14:cc:5b:08:b2:fa:67:
da:9d:5b:25:b0:96:32:bf:25:fa:7a:ef:ee:b0:c6:1d:08:fd:
0c:42:57:bb:52:3c:e6:48:91:80:5e:3e:48:d8:22:4f:c2:70:
a5:c3:3d:c6:c5:48:59:ab:df:64:62:98:ef:85:bc:e7:0e:18:
b7:c1:63:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:50:04 2026 by rpki-client