
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
File: n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft (raw, json)
Hash identifier: V1Smmfcep6Anf6ZwEhWCY18ubOd7iazRFpCruyD2+64=
Subject key identifier: 83:ED:5E:C1:26:6C:41:2F:95:B0:52:28:68:3C:48:14:55:35:15:EC
Authority key identifier: 9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7
Certificate issuer: /CN=A91F8282/serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7
Certificate serial: E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
Manifest number: E1
Signing time: Wed 13 May 2026 06:43:27 +0000
Manifest this update: Wed 13 May 2026 06:43:27 +0000
Manifest next update: Wed 20 May 2026 06:43:27 +0000
Files and hashes: 1: n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl (hash: m8SnTx1O1GR2l71w9xWS3/J76yw3Fy1ioMTmYxW8FWA=)
2: 05EBB6CEFEF811EFB0C52572C4F9AE02.roa (hash: YgdZkpaRGf3qZu8ORhNwjKQyDofcMXRWEr4dow0fuZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl
rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:43:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8282, serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7
Validity
Not Before: May 13 06:43:27 2026 GMT
Not After : May 20 06:43:27 2026 GMT
Subject: CN=6a041d8f-623b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:fd:cc:5a:2f:8e:da:93:72:4e:81:53:e9:
47:6d:61:40:32:a8:0f:d8:b2:8b:4d:0b:e5:c4:3a:
01:7e:60:b2:06:36:3e:39:ae:f5:e7:34:fc:dc:4a:
67:ad:9e:be:13:24:29:3b:80:43:43:14:74:72:ff:
54:74:fa:c3:22:4d:fc:99:18:a2:ff:3c:80:c5:0f:
4e:51:dc:8f:1e:f5:8a:56:77:ac:4b:77:87:77:91:
ac:0b:6d:df:7f:7f:4b:c5:82:cf:80:2b:a0:43:f6:
9f:ee:d0:b8:25:36:49:e4:d6:dd:af:cc:7c:59:39:
81:77:7a:90:83:8d:a6:61:bb:92:0d:5d:cc:94:57:
cd:6a:1e:8c:63:36:36:67:51:a3:c6:2f:98:49:c5:
07:a7:9f:23:b4:50:88:a4:fb:44:e1:2b:f5:81:48:
82:5a:eb:da:b5:8b:1c:e7:46:58:3d:34:4d:b1:e4:
1d:ed:60:b6:14:c0:4d:39:c0:f5:31:cf:01:1a:5b:
3f:34:31:f9:a3:87:40:d6:06:ac:11:45:36:4d:83:
15:df:87:c1:5e:b3:c8:e1:d7:98:6d:eb:a9:3e:f1:
ce:5c:42:9c:4f:a3:7b:8d:2a:4f:c9:87:22:0b:fc:
4a:fb:82:c6:1d:39:a2:13:4f:bc:83:22:19:45:39:
57:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:ED:5E:C1:26:6C:41:2F:95:B0:52:28:68:3C:48:14:55:35:15:EC
X509v3 Authority Key Identifier:
keyid:9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:8b:4b:1a:7e:91:c5:4a:39:4b:12:07:99:56:4e:f0:50:40:
ab:57:c4:f8:c5:b8:66:69:43:9f:e3:73:d4:1a:11:1d:d5:41:
5b:d6:61:05:47:de:15:54:6c:79:6e:35:39:91:55:ab:6c:62:
9e:2b:86:53:36:92:8b:bf:b0:1b:b2:ee:fb:8f:64:b1:2a:a2:
5e:6b:66:26:29:80:cd:82:61:b4:6f:8a:9c:6d:2d:85:cd:72:
26:ad:77:f6:f5:cc:87:39:7e:b1:7b:06:0f:54:cd:64:83:51:
a3:79:17:8a:06:df:7a:7c:9e:53:4c:95:d7:ec:1a:1c:49:d7:
3b:1d:82:1f:60:20:bc:72:d0:80:78:d5:82:84:5d:4c:07:90:
2a:95:01:20:cd:90:6a:a1:22:a1:f0:90:d8:72:cb:17:64:55:
c7:48:6e:9e:e7:b4:b4:50:e5:6f:e3:c2:68:50:0d:02:89:df:
93:b3:3e:3e:13:b3:f2:99:fa:20:06:39:00:4a:77:e8:3d:d7:
45:7c:19:a1:e1:80:de:d6:dd:1e:0f:a5:4f:89:80:9f:fe:d0:
07:34:37:e0:ba:34:04:25:f9:5a:18:c6:12:f9:bf:b7:bc:08:
68:e7:c8:27:45:d3:59:cd:51:1c:d1:a0:c9:8b:3e:64:e0:fb:
e8:94:62:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:32:59 2026 by rpki-client