
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
File: r3YSV94snaXzPnHGQZ4meoYt-2I.mft (raw, json)
Hash identifier: /dbrGm0z/xiVK6By1mw8g7xzgE+Bn0pzBpNGIdLqafc=
Subject key identifier: 86:78:57:34:7B:B1:F1:2F:F4:BB:C2:6D:3F:7A:FB:90:B4:51:AD:14
Authority key identifier: AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62
Certificate issuer: /CN=A91F4D54/serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
Manifest number: 010E
Signing time: Tue 21 Jul 2026 07:37:19 +0000
Manifest this update: Tue 21 Jul 2026 07:37:19 +0000
Manifest next update: Tue 28 Jul 2026 07:37:19 +0000
Files and hashes: 1: r3YSV94snaXzPnHGQZ4meoYt-2I.crl (hash: JiL9yV6W9imEQcw6RNplol/zkx2JrDxeyqMsFGec2sA=)
2: 61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa (hash: TBjFZLoAcX8XTz4OXPD8ohPadAtZD+uq/tBStT0J3HQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl
rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 07:37:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4D54, serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62
Validity
Not Before: Jul 21 07:37:19 2026 GMT
Not After : Jul 28 07:37:19 2026 GMT
Subject: CN=6a5f21af-45e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e2:c0:83:05:c3:52:4d:67:9a:3f:78:94:01:
2f:20:09:3a:f5:a7:8b:26:78:0a:de:19:74:5b:c7:
9a:2a:26:90:42:e6:3e:d6:70:2b:53:30:48:8c:03:
85:75:d6:23:5c:e3:b7:7c:e4:47:39:2d:ec:10:f1:
1f:a9:4b:f9:fd:de:f3:2a:96:a8:2c:1a:4a:cc:dd:
e9:8d:a0:44:21:ab:53:94:d8:21:09:96:d3:0f:85:
3d:66:b9:fa:f8:a6:4e:77:1c:bf:76:32:92:bd:3e:
d3:36:ff:8c:0d:ca:f6:8b:f5:6c:54:77:93:82:a9:
c9:17:77:95:06:47:24:af:db:1f:0a:a6:9c:7b:c2:
b9:a6:e0:ed:e1:84:0b:9f:4a:9d:73:1d:20:6f:66:
22:40:20:28:ab:48:bf:d8:da:83:c5:d6:22:e2:1a:
06:80:bd:18:6e:99:a1:06:4e:ec:2f:34:01:29:bf:
52:42:66:d2:fd:d7:44:58:18:ba:01:5e:bf:f4:f4:
d5:16:d7:60:5b:36:aa:89:17:6e:c7:27:9c:ee:40:
5c:89:e8:f7:f1:28:ab:b3:7a:8d:8d:2f:18:d0:4a:
38:e2:29:2b:a1:77:d4:e8:e4:77:05:92:0a:4e:28:
25:4a:c4:3c:90:87:9c:c8:e7:07:e7:43:62:de:1b:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:78:57:34:7B:B1:F1:2F:F4:BB:C2:6D:3F:7A:FB:90:B4:51:AD:14
X509v3 Authority Key Identifier:
keyid:AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:84:8a:e1:f0:78:83:fa:3b:ef:d2:a3:a6:4b:4c:e0:ed:2f:
45:80:3b:80:ae:52:f5:44:bf:c4:16:44:0e:ef:d1:25:67:8e:
84:86:b2:26:e2:8c:f2:80:5e:84:17:c4:d4:9f:5b:35:4d:59:
95:0f:e7:72:4b:0c:59:19:b0:e6:05:93:9e:51:39:1f:f1:5e:
f2:73:c2:c3:74:ce:63:17:f8:9c:22:da:98:09:c3:4e:f0:ac:
c6:19:b0:2a:84:fd:43:38:b7:fa:fb:db:fe:66:96:a9:25:5d:
f7:a3:f2:d2:82:5d:18:35:0c:22:40:d6:dc:5a:e3:8b:97:f1:
61:10:e0:38:fa:ec:1e:07:e2:8b:af:34:d7:ff:f6:fc:87:8e:
52:fb:d6:92:0f:d0:0f:ca:e2:af:10:a4:25:e7:a2:ba:b7:c6:
29:66:5f:d6:b0:27:2b:55:ea:fd:f5:8f:d5:56:5a:3a:04:5d:
c6:01:fa:9c:9c:8b:68:61:7b:9d:8c:a1:7f:e4:14:64:12:ee:
e7:e5:51:1b:17:8d:b8:24:a3:97:d4:cd:e2:f7:e9:4e:b8:83:
d0:e4:e3:05:11:39:dd:ae:e0:d8:fd:18:3a:e4:af:be:a7:ea:
b7:17:17:4f:d6:98:ac:7d:0d:5e:1e:79:ca:09:f9:0b:ff:9b:
1b:d7:88:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 04:41:02 2026 by rpki-client