
$ rpki-client -vvf rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft
File: 3UhfmiMRbUEQwHvThx70phTsTSw.mft (raw, json)
Hash identifier: c/TeWiVFqecEPXFx/z568Ptm8Jb0sTj2lUm0inSI6So=
Subject key identifier: 37:3D:16:FF:E7:5E:73:86:C8:2A:45:18:E2:AF:45:99:BA:9D:60:B1
Authority key identifier: DD:48:5F:9A:23:11:6D:41:10:C0:7B:D3:87:1E:F4:A6:14:EC:4D:2C
Certificate issuer: /CN=A91331AA/serialNumber=DD485F9A23116D4110C07BD3871EF4A614EC4D2C
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft
Manifest number: 80
Signing time: Sat 25 Jul 2026 09:29:12 +0000
Manifest this update: Sat 25 Jul 2026 09:29:11 +0000
Manifest next update: Sat 01 Aug 2026 09:29:11 +0000
Files and hashes: 1: 3UhfmiMRbUEQwHvThx70phTsTSw.crl (hash: PPbMTJK7ImdSlgIy/nqgK+PO3r8GjiByqjNHnaYY8TI=)
2: DAC133B0C8EC11F08ED15548C4F9AE02.roa (hash: Hbt1e1dpkIGnlA91fKm5c8xCNcRrKCzjIZmrOyE5tgg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.crl
rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Aug 2026 09:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91331AA, serialNumber=DD485F9A23116D4110C07BD3871EF4A614EC4D2C
Validity
Not Before: Jul 25 09:29:11 2026 GMT
Not After : Aug 1 09:29:11 2026 GMT
Subject: CN=6a6481e7-02c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:29:7a:77:c3:50:b4:6b:03:ac:33:0f:96:68:
6d:89:34:8e:a2:c8:93:26:b6:d7:37:52:53:97:7c:
80:43:a8:af:d5:af:fb:d9:e5:6a:ae:49:a2:93:b1:
89:ef:78:62:2f:3e:14:ff:72:07:d3:22:8e:dd:83:
58:9c:0c:bf:b3:18:4c:a5:93:7b:61:45:57:fc:f1:
4b:0e:26:25:f9:de:26:75:b3:cb:26:1b:07:0b:58:
15:5e:2a:a2:ca:75:a2:3d:ce:c0:0c:2c:fd:ba:49:
27:c3:4e:a7:80:84:2d:50:f6:f7:39:15:ab:b4:1f:
83:e0:ed:5c:ac:cf:7e:fa:1c:9a:79:f7:69:8d:07:
2e:5a:6a:ae:8a:db:24:c1:5e:b6:60:e5:a6:d2:f4:
85:ce:b8:26:29:98:4c:14:5b:17:65:c1:35:43:36:
3c:35:e2:1e:11:65:d4:0b:a3:12:11:25:88:12:11:
33:7b:de:14:94:f3:ce:d6:99:9d:fb:f5:99:e6:40:
c4:a5:bd:7c:8d:4d:6f:15:92:87:2e:1c:70:08:92:
2b:ac:41:68:d9:b4:4e:fa:83:2a:bd:44:0c:fe:55:
a1:a2:31:07:94:c7:bb:c9:f3:f1:25:46:96:18:f2:
5f:32:e1:35:e0:3c:bc:da:f0:cf:12:29:bf:7a:00:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3D:16:FF:E7:5E:73:86:C8:2A:45:18:E2:AF:45:99:BA:9D:60:B1
X509v3 Authority Key Identifier:
keyid:DD:48:5F:9A:23:11:6D:41:10:C0:7B:D3:87:1E:F4:A6:14:EC:4D:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:5e:6b:2b:49:43:7d:bd:2a:07:b6:f4:fb:6a:66:bf:47:82:
6f:84:29:f8:25:19:9f:8f:54:c9:2f:9e:34:70:d5:a8:19:36:
cf:c6:a0:51:d3:45:80:45:a8:ca:10:91:56:51:ac:de:85:2e:
83:2d:a8:ea:a6:fe:45:de:4d:2e:2a:19:b2:ab:ef:b7:09:35:
d4:7c:b4:99:33:88:13:41:81:d0:ef:96:0f:48:66:f2:c4:5b:
b7:59:42:ea:ae:58:03:a3:4f:74:f3:fe:24:5b:97:44:b0:aa:
fa:85:b9:23:18:63:02:ea:7a:ea:6b:90:3b:d1:00:31:c3:a1:
b9:65:6e:cc:03:b0:19:20:37:65:44:c8:c9:26:52:f2:12:8b:
ec:40:69:16:6b:ac:c9:8e:3a:4d:37:71:40:e6:14:65:68:13:
6a:e2:06:bf:31:1f:62:e0:15:62:b2:cf:e8:9f:08:f0:d5:f1:
42:39:3f:3d:e5:22:83:ac:10:76:2f:8f:ee:5d:d0:e3:85:81:
8f:86:e3:dd:d7:24:b7:3b:67:45:8e:1c:fc:c7:03:87:1f:93:
fc:ec:08:15:93:39:c6:ef:d6:b3:df:7e:d1:a6:16:82:6e:12:
22:f3:c7:34:d8:1a:0a:62:82:f9:4e:91:c6:5c:d1:df:3e:fb:
c6:53:8c:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzMxQUExMTAvBgNVBAUTKERENDg1RjlBMjMxMTZENDExMEMwN0JEMzg3MUVGNEE2
MTRFQzREMkMwHhcNMjYwNzI1MDkyOTExWhcNMjYwODAxMDkyOTExWjAYMRYwFAYD
VQQDEw02YTY0ODFlNy0wMmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2yl6d8NQtGsDrDMPlmhtiTSOosiTJrbXN1JTl3yAQ6iv1a/72eVqrkmik7GJ
73hiLz4U/3IH0yKO3YNYnAy/sxhMpZN7YUVX/PFLDiYl+d4mdbPLJhsHC1gVXiqi
ynWiPc7ADCz9ukknw06ngIQtUPb3ORWrtB+D4O1crM9++hyaefdpjQcuWmquitsk
wV62YOWm0vSFzrgmKZhMFFsXZcE1QzY8NeIeEWXUC6MSESWIEhEze94UlPPO1pmd
+/WZ5kDEpb18jU1vFZKHLhxwCJIrrEFo2bRO+oMqvUQM/lWhojEHlMe7yfPxJUaW
GPJfMuE14Dy82vDPEim/egAVQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDc9Fv/n
XnOGyCpFGOKvRZm6nWCxMB8GA1UdIwQYMBaAFN1IX5ojEW1BEMB704ce9KYU7E0s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzFBQS84QUZCREI2MEM4
RUIxMUYwODYxODdCODBDNEY5QUUwMi8zVWhmbWlNUmJVRVF3SHZUaHg3MHBoVHNU
U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNVaGZtaU1SYlVFUXdIdlRoeDcwcGhUc1RTdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MzFBQS84QUZCREI2MEM4RUIxMUYwODYxODdCODBDNEY5QUUwMi8zVWhmbWlNUmJV
RVF3SHZUaHg3MHBoVHNUU3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACV5rK0lDfb0qB7b0+2pmv0eCb4Qp+CUZn49UyS+eNHDVqBk2z8agUdNFgEWo
yhCRVlGs3oUugy2o6qb+Rd5NLioZsqvvtwk11Hy0mTOIE0GB0O+WD0hm8sRbt1lC
6q5YA6NPdPP+JFuXRLCq+oW5IxhjAup66muQO9EAMcOhuWVuzAOwGSA3ZUTIySZS
8hKL7EBpFmusyY46TTdxQOYUZWgTauIGvzEfYuAVYrLP6J8I8NXxQjk/PeUig6wQ
di+P7l3Q44WBj4bj3dcktztnRY4c/McDhx+T/OwIFZM5xu/Ws99+0aYWgm4SIvPH
NNgaCmKC+U6RxlzR3z77xlOMVg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:46:18 2026 by rpki-client