
$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
File: 3JAYFdyRlzyvoZqLV2-GjphBPjk.mft (raw, json)
Hash identifier: zjOkVp2KxNgoCIdUQVeVrtSg9A3tPDQ2NFACxnaexac=
Subject key identifier: FA:63:49:7B:C5:55:23:80:F2:36:07:97:86:A3:A3:FF:F3:A1:F4:FC
Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39
Certificate issuer: /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39
Certificate serial: 1CB8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
Manifest number: 1CB6
Signing time: Tue 18 Aug 2026 16:16:58 +0000
Manifest this update: Tue 18 Aug 2026 16:16:57 +0000
Manifest next update: Tue 25 Aug 2026 16:16:57 +0000
Files and hashes: 1: 3JAYFdyRlzyvoZqLV2-GjphBPjk.crl (hash: jfP+V9anjv6LfC0xZdaySePWPKRIlRvaUWiVF6UmeV4=)
2: 947F9724B93411F0909C206FC4F9AE02.roa (hash: 0EFTU/dv0CDsv/1McWF5wFSfQbHyynwC/0ZL4k27h+4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl
rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 16:16:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7352 (0x1cb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91168B5, serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39
Validity
Not Before: Aug 18 16:16:57 2026 GMT
Not After : Aug 25 16:16:57 2026 GMT
Subject: CN=6a848579-3238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:6b:54:75:1b:be:a1:4c:45:d8:06:3b:7a:
9d:32:34:33:84:30:0a:2f:2c:4f:68:c6:ba:51:25:
32:22:9a:ee:5d:85:2f:85:d0:f9:bc:e3:7a:c2:35:
0a:17:64:ca:67:07:aa:cc:63:fa:7e:bd:61:42:fa:
58:3b:0d:6e:a1:1d:30:04:77:5d:2d:ef:9e:96:bb:
94:c9:11:ae:67:c8:a5:34:71:c0:d4:1b:d1:a6:a2:
24:27:f2:1b:a8:d9:1d:e5:2c:4c:b7:c5:0a:77:bf:
f3:0b:44:4f:6d:bc:93:5e:cf:38:2a:bc:90:59:68:
58:30:3a:b7:4d:28:a6:40:6e:60:5b:72:58:2b:af:
54:6c:11:31:6a:89:bb:dc:0b:73:6b:d0:cb:74:b9:
11:19:83:df:a4:db:20:b3:9a:6f:1c:2a:cf:b0:45:
ca:a7:95:63:a3:33:d9:c0:27:ab:32:a2:9d:35:00:
df:7a:8f:6a:6e:50:57:1a:b0:28:f7:13:43:c5:b8:
79:6d:b7:f2:82:db:58:f8:61:97:9d:84:77:25:06:
6c:e4:e2:95:d6:2c:ed:d0:b3:75:0f:f8:e2:65:eb:
90:71:91:d0:ac:69:be:f3:79:e6:2e:84:9d:f2:36:
9a:9a:20:b4:4d:e1:fa:93:12:d8:2a:2e:43:dd:b2:
70:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:63:49:7B:C5:55:23:80:F2:36:07:97:86:A3:A3:FF:F3:A1:F4:FC
X509v3 Authority Key Identifier:
keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:ef:f8:17:a5:92:31:42:1d:8d:93:52:fb:12:c4:e9:e1:d6:
80:c3:0c:f6:5a:de:15:de:2d:23:86:af:67:92:01:0f:cb:30:
89:36:b9:71:51:02:fc:d2:92:5e:db:14:bb:89:7d:fb:76:64:
ab:53:cc:7f:10:4d:b0:31:5a:e3:49:25:92:75:05:ec:c4:40:
82:f5:7b:03:9f:e1:9d:45:a3:cf:9e:d9:49:5f:b6:21:62:1a:
3f:4f:69:d9:47:5c:15:c9:de:ce:ae:0a:54:85:76:22:1f:b4:
fb:80:4a:fb:f2:92:4e:86:25:32:3f:94:8e:92:81:aa:dd:15:
60:71:94:1e:94:e6:bf:2e:0a:50:68:18:80:8c:e1:09:9f:7d:
90:d3:14:f1:4d:50:33:e8:b7:e4:55:0d:50:0a:d9:0a:6b:2a:
f7:81:fc:ed:d4:53:d6:d5:e7:ae:a4:ae:d7:92:44:db:ba:d8:
56:92:72:e7:1c:3a:f4:22:55:42:a8:5c:ea:7b:80:1e:ac:7e:
57:bd:29:8c:a6:8e:15:89:79:79:97:b7:a4:e9:c2:8e:a7:4e:
f7:1e:7b:04:67:e9:ca:0d:23:41:ec:ec:df:84:bc:df:7e:c4:
71:d5:9b:8c:70:14:a3:43:6f:e4:f9:85:b1:b6:76:6f:74:d2:
36:bb:7e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:21 2026 by rpki-client