
$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
File: 3JAYFdyRlzyvoZqLV2-GjphBPjk.mft (raw, json)
Hash identifier: Qo0kmQmyeAjwGqvhfhV4efM5BbWvcwyOJDGDlAhobRE=
Subject key identifier: 1C:F1:1F:67:4B:AE:2E:10:8E:2F:E4:98:A8:F9:88:6F:34:0D:91:65
Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39
Certificate issuer: /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39
Certificate serial: 1C7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
Manifest number: 1C78
Signing time: Sat 18 Apr 2026 16:06:26 +0000
Manifest this update: Sat 18 Apr 2026 16:06:25 +0000
Manifest next update: Sat 25 Apr 2026 16:06:25 +0000
Files and hashes: 1: 3JAYFdyRlzyvoZqLV2-GjphBPjk.crl (hash: hr/8lPTKnKMU2s4A4NlQQLppY6UoCT1X8HEK5Q6ImYM=)
2: 947F9724B93411F0909C206FC4F9AE02.roa (hash: 0EFTU/dv0CDsv/1McWF5wFSfQbHyynwC/0ZL4k27h+4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl
rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 16:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7290 (0x1c7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91168B5, serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39
Validity
Not Before: Apr 18 16:06:25 2026 GMT
Not After : Apr 25 16:06:25 2026 GMT
Subject: CN=69e3ac01-b5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c1:5e:75:0e:97:d6:97:71:87:71:b3:62:4a:
70:f8:8c:30:79:98:ed:f9:7b:a9:f9:92:19:83:9d:
4c:99:7e:bc:b9:78:ba:a0:48:e6:02:0f:39:d0:a9:
cf:d0:ec:cb:a1:07:7a:d8:63:d6:f3:6a:12:f0:a0:
01:e4:99:d3:15:14:02:bd:cb:ab:8c:9a:d0:8a:92:
f4:09:95:58:fd:d0:ed:80:80:22:49:1a:4e:c3:0b:
32:19:81:f4:98:64:9e:dd:57:ba:db:56:27:71:5a:
f0:4e:82:0d:de:54:7e:6b:10:39:7f:33:be:c6:31:
dc:e1:cd:d7:e5:9e:b4:e0:0d:62:be:fa:24:52:72:
5f:00:b3:36:d7:75:88:21:87:6a:ae:8c:04:cc:d6:
46:90:01:dd:f3:47:5b:4e:fd:50:ba:83:53:14:e1:
9a:b4:08:6e:cd:4b:49:55:10:9e:fc:90:e6:da:35:
66:d0:7d:31:53:58:99:18:85:07:0d:43:55:46:b9:
a4:57:25:63:d0:72:aa:a0:62:35:86:15:fb:af:15:
a8:21:fb:c6:42:7d:15:3f:46:49:99:28:3f:de:77:
19:56:91:2b:92:22:ff:f4:5a:34:02:a2:54:e3:bd:
66:9c:f7:2f:6e:db:4e:f4:79:fd:68:56:2c:0e:00:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F1:1F:67:4B:AE:2E:10:8E:2F:E4:98:A8:F9:88:6F:34:0D:91:65
X509v3 Authority Key Identifier:
keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c4:17:1f:2d:6f:a7:c6:b5:62:d9:86:ab:27:71:cb:7b:9b:
ab:7d:f7:70:93:e1:1b:31:ab:17:93:26:3a:6f:d3:62:c0:fa:
a9:bc:f6:53:0d:d0:86:19:94:18:84:57:91:ee:a5:04:d6:70:
ab:a6:2b:ad:74:f1:be:e5:ec:22:78:0a:2a:86:06:9d:47:13:
ab:20:e1:64:89:0c:17:dd:79:5d:fc:4e:63:30:1f:27:07:bd:
8f:eb:1a:fc:85:70:64:ef:bd:7a:95:e4:4f:dc:d9:b5:35:55:
b7:9e:7d:5e:b7:bb:0d:c4:5f:95:ee:21:1c:9e:57:4c:b8:bd:
4d:99:f8:2d:d9:1b:bf:71:6b:f4:fe:d7:0b:9f:18:d4:1f:d5:
78:63:e2:7c:0b:68:c1:9d:c3:b9:5b:80:6a:ff:ec:19:b2:07:
7f:cd:96:0b:94:58:b7:f9:e8:fd:97:a1:1b:07:e0:78:40:dd:
51:e3:b4:7b:29:44:b8:1b:98:3e:20:48:7f:41:18:fa:af:2a:
82:49:45:f2:a7:b1:32:4d:b3:51:b2:f1:94:a5:a1:53:2a:43:
f0:38:06:3e:d8:c9:f6:42:cc:e7:9a:e2:1e:c4:83:4e:da:64:
a7:e7:1f:e3:5e:19:44:5d:87:46:95:a3:41:e5:9d:48:c2:97:
12:81:06:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 02:25:36 2026 by rpki-client