
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft
File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json)
Hash identifier: 3F8DMhSYtDbHXz7E9t+R83zxWgciOH9zfToyryMe720=
Subject key identifier: B4:6C:4F:06:C3:4D:37:93:6B:2C:35:E2:A4:D2:FC:1E:41:34:C7:A3
Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62
Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62
Certificate serial: 01D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft
Manifest number: 01B8
Signing time: Thu 23 Jul 2026 05:18:21 +0000
Manifest this update: Thu 23 Jul 2026 05:18:21 +0000
Manifest next update: Thu 30 Jul 2026 05:18:21 +0000
Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: eowS09Wiiaq0yAMlr2RdmEtZDee5qW6OlQqqFxLm/yY=)
2: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: 3aW6iUfzl0/knCHDbhr8nHXiBRl438L8ymDj1Nh8POQ=)
3: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: iGZLHjG2VueAdzLMDEEY/wlps2bNluNoPm25aV0tYgg=)
4: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: F81eopWit+WRjVvoNj/Syi/UxhKzo8TJfRsuymHvyyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl
rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62
Validity
Not Before: Jul 23 05:18:21 2026 GMT
Not After : Jul 30 05:18:21 2026 GMT
Subject: CN=6a61a41d-d899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:72:e5:e9:1c:4d:d9:74:71:dd:dc:84:10:
15:3e:09:8f:0c:82:cb:11:06:d3:23:1e:ca:2b:6b:
7f:c7:e4:fb:3b:ed:e2:03:b3:c8:f5:a6:d1:34:e8:
a8:23:cd:59:7b:86:eb:1f:46:b7:d7:7d:70:63:a2:
88:a5:cf:b4:0e:90:30:27:ff:cc:d3:85:e1:d9:12:
44:46:5e:e3:c9:62:13:97:3e:e8:9e:0b:ba:17:7d:
b3:21:67:6c:67:93:c9:5c:6e:f2:61:e2:2a:c5:05:
25:e7:b4:b2:7b:59:eb:d9:2b:ee:44:b1:da:bc:d2:
dd:2a:62:3e:1d:37:fd:96:0d:7c:cd:f5:e4:ff:42:
7d:a7:ff:4a:12:3a:c9:90:95:a9:ae:a1:b5:13:81:
b4:67:12:d3:80:e8:22:cb:02:42:ef:85:78:0e:c4:
b1:ed:ed:f0:a0:b0:a6:d3:ee:86:bf:a0:5a:82:25:
69:c7:bf:ce:9e:f8:f9:73:12:b4:e6:0a:42:c1:bc:
a2:9d:5c:96:a6:fd:12:45:66:e3:da:1b:40:90:b7:
10:0a:99:e0:72:33:22:38:24:4c:eb:1b:1d:01:a8:
46:71:21:37:67:12:2a:55:c9:4e:64:73:2e:b2:bc:
c3:cc:ae:89:99:eb:be:05:3e:9c:58:52:f0:f9:66:
74:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6C:4F:06:C3:4D:37:93:6B:2C:35:E2:A4:D2:FC:1E:41:34:C7:A3
X509v3 Authority Key Identifier:
keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:64:ad:7d:8f:4c:d2:bd:fb:43:98:2c:e3:34:92:67:29:cd:
12:7d:1d:75:05:18:59:cf:59:06:1d:8e:ad:30:6a:fd:02:d2:
fc:e7:dd:0e:99:02:07:36:d4:49:6f:e7:10:08:59:0f:25:ed:
ef:2b:11:42:d1:02:82:98:57:ec:3e:81:a0:84:33:81:ad:99:
06:27:c5:da:34:24:71:6b:52:7a:f8:6d:53:a7:7d:df:8d:07:
62:d6:76:f6:46:e3:89:78:30:aa:3b:c3:4e:63:e3:bb:a3:2e:
4d:29:b6:16:5f:6d:c5:5e:f6:d8:c2:81:b7:30:7c:92:91:ef:
52:64:02:d3:48:45:a9:14:4e:43:35:d4:71:25:9a:24:c8:46:
34:e7:1d:0d:b2:0c:f7:73:43:86:c9:a8:2b:23:a6:28:f0:04:
41:c5:fd:8b:fb:ee:74:2d:d6:81:cd:23:7d:3b:b8:33:c1:15:
c3:63:7c:76:c3:42:e5:a0:3e:7b:89:79:fd:e0:c8:95:4c:42:
01:23:2a:d7:60:bc:f5:af:6a:f7:01:dc:3a:10:31:83:9c:22:
18:ae:eb:bc:d6:90:20:f2:af:c9:11:e6:ec:3c:25:cd:e8:ad:
e5:58:b7:18:f5:30:68:d3:0e:b1:a7:37:b5:51:33:61:0a:b6:
50:b4:23:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:09 2026 by rpki-client