
$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft
File: 3Fys5yJTQlYHBjKHYfkTyTZJius.mft (raw, json)
Hash identifier: xolZiTPM8/cgj4UTFhWMr7khBfhMV+imXxlJFT0jHk0=
Subject key identifier: 4B:75:7E:FF:6A:4D:50:D9:6B:57:D4:AD:AE:83:4C:34:0E:D3:40:06
Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB
Certificate issuer: /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB
Certificate serial: 15E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft
Manifest number: 15DB
Signing time: Mon 22 Jun 2026 16:42:13 +0000
Manifest this update: Mon 22 Jun 2026 16:42:12 +0000
Manifest next update: Mon 29 Jun 2026 16:42:12 +0000
Files and hashes: 1: 3Fys5yJTQlYHBjKHYfkTyTZJius.crl (hash: OJXVzsmeUebfDnkwcykbG7u5ARiZeGPAmpbv/zLuoys=)
2: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (hash: 3tk4QPsr03ML5SuwBLsP7qy8OTNJWI4sJQvwqcILBHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl
rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 16:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5605 (0x15e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91317CB, serialNumber=DC5CACE7225342560706328761F913C936498AEB
Validity
Not Before: Jun 22 16:42:12 2026 GMT
Not After : Jun 29 16:42:12 2026 GMT
Subject: CN=6a3965e5-babe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b6:72:a7:3e:f3:1f:60:2d:43:ae:2e:6b:67:
1c:fa:63:ae:82:21:f0:f4:2f:32:da:3b:3c:30:e4:
6b:e7:be:09:4a:08:52:ca:b5:9e:67:30:e7:10:7b:
96:a1:ed:1d:e8:0c:90:be:8d:d1:a1:9e:cf:7a:cf:
67:fc:f2:14:c2:86:7e:9e:ec:18:ee:25:dd:d8:ee:
15:b9:bc:ca:08:47:33:8b:e5:13:f3:93:25:ce:93:
7a:0d:a2:f3:c1:31:af:eb:c0:eb:9f:31:fd:d8:e5:
4b:14:28:9f:ee:c0:c9:88:59:48:5f:ed:06:07:42:
57:a6:ae:5b:28:0b:1f:d9:e7:44:17:86:8b:72:a0:
c5:9c:6b:33:e1:d3:c9:0f:9c:54:fe:aa:54:c7:5e:
83:ad:e0:21:69:19:e4:6e:b5:22:12:90:75:2c:0b:
55:d0:da:5d:6b:c0:c8:8d:b9:c7:4b:d3:d2:1e:73:
e9:3b:1d:52:24:2c:d4:a0:b6:2a:c2:72:9b:f2:c2:
bb:c2:9c:5d:2a:2c:4d:fb:a5:3e:0a:41:32:f8:0f:
af:f0:ee:c4:b2:3a:1e:5c:e8:5e:28:a6:a9:9b:20:
de:18:ed:a0:e3:a8:19:48:76:55:cb:4e:e6:49:f4:
bb:45:0a:73:bc:d8:b8:4d:33:eb:f9:0b:55:42:81:
cf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:75:7E:FF:6A:4D:50:D9:6B:57:D4:AD:AE:83:4C:34:0E:D3:40:06
X509v3 Authority Key Identifier:
keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:50:1d:06:9a:9a:31:19:dd:3d:7b:65:0a:b8:dd:ff:d5:31:
17:ea:d6:ae:a5:7a:88:af:16:b8:df:a3:55:fe:ee:37:b8:1e:
af:cd:91:fc:c9:f8:93:e9:57:99:cb:23:96:31:45:89:76:24:
90:95:52:05:db:9d:8c:5a:74:b0:8d:0b:1a:33:49:f0:8d:05:
24:f5:76:80:3a:04:0c:23:b4:36:e9:55:c5:9b:a0:20:31:a7:
48:3a:24:80:6b:84:2c:98:2b:d7:fd:74:32:d0:ee:ae:c9:7b:
a2:36:7a:ea:7b:2a:58:14:70:8a:94:17:80:d1:10:9f:cb:6e:
76:be:49:37:96:c2:9f:b7:63:0a:75:49:af:46:4f:36:0f:01:
95:a9:4f:48:4f:9c:66:ca:df:55:61:2f:c0:7b:f6:78:5e:32:
91:51:51:eb:30:23:01:e1:b0:48:23:d9:58:a1:64:39:93:0b:
b5:29:2a:4b:c0:cd:ed:5a:ac:bf:eb:a3:26:a9:e2:30:52:6b:
d1:ff:e4:d0:8b:04:3e:d7:a3:79:b4:22:35:32:ed:3f:53:6c:
b2:3b:c7:c6:19:3b:29:6f:21:98:00:1d:00:56:b0:39:bd:65:
16:0e:af:4e:86:9d:cd:38:1a:9d:1b:9b:d2:bd:a7:68:46:b1:
47:f2:af:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:27:08 2026 by rpki-client