
$ rpki-client -vvf rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
File: 3owRZVEEK-jnJkvttYLwo3e7JL0.mft (raw, json)
Hash identifier: Wcim7w3FaAUGu8AVEmAOwaqhnicI+pnQuWU1rW7eV18=
Subject key identifier: 54:52:AF:E2:C1:35:55:DC:DB:B2:7F:F9:23:AA:BB:13:97:B9:8F:B5
Authority key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD
Certificate issuer: /CN=A91471A0/serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD
Certificate serial: 77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
Manifest number: 6C
Signing time: Mon 29 Jun 2026 08:42:44 +0000
Manifest this update: Mon 29 Jun 2026 08:42:44 +0000
Manifest next update: Mon 06 Jul 2026 08:42:44 +0000
Files and hashes: 1: 3owRZVEEK-jnJkvttYLwo3e7JL0.crl (hash: Oa5fjlbcMhKOLB2Jw9E60wU9QuVLiep2WH5yyiwRWk8=)
2: A4A022041D1B11F188B066AA103D8C67.roa (hash: 0UiK+7UG4gazEA6M9ztbhs59f2RFRj/xH1mxg/FNT2U=)
3: 9572FAF41D1B11F1B62EA9A5103D8C67.roa (hash: YxVjuj/u6cFjLolYA4vHKI/ekIe2/ZI5hcZUBzFakNE=)
4: 947595301D1B11F1B62EA9A5103D8C67.roa (hash: fyVIn40fjMUq1jfx5eUqoEzNu3Qfs0MIIOR0mSpXHec=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl
rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 06 Jul 2026 08:42:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD
Validity
Not Before: Jun 29 08:42:44 2026 GMT
Not After : Jul 6 08:42:44 2026 GMT
Subject: CN=6a423004-b790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:d8:20:48:67:54:2b:b5:f4:e6:eb:8d:6d:
8c:8d:53:bc:71:b6:0d:50:1c:22:64:da:01:cc:99:
bd:0b:41:b2:b6:6f:7e:10:8f:12:6a:fc:dd:3a:45:
92:b1:a7:4c:b2:e1:a6:cf:84:4b:2e:8e:9c:70:b6:
c2:36:c7:a8:e2:3d:33:a3:16:aa:71:1c:b2:62:58:
19:ea:20:d3:1d:8f:b7:bb:30:08:cf:e4:81:d7:aa:
fb:fb:4c:ee:80:04:d1:09:37:e4:5c:55:96:ec:c3:
b8:fd:70:f4:3a:1e:c0:6a:8f:b5:d2:75:3b:c5:b4:
a7:c0:fd:7c:77:a0:6c:92:67:7b:0d:8c:41:0c:aa:
ca:42:db:00:8d:e0:8c:a9:a6:9f:d5:6e:a2:12:b4:
f8:79:c9:38:e9:11:51:ad:88:4d:6f:5b:51:44:3b:
2a:f9:77:ef:56:26:8a:b4:93:7f:ba:df:81:43:53:
0c:4a:3a:32:7f:07:42:86:a5:c7:a6:e3:98:b3:0f:
f1:3b:19:7b:fe:16:d2:ac:67:b1:ff:44:44:6c:f1:
cb:6d:cf:1d:c7:74:75:ab:06:62:20:40:81:7c:8a:
11:80:2b:ff:f1:5f:68:5e:d7:dc:9a:6d:ce:41:e0:
08:fc:e4:a1:92:23:41:f3:cd:be:59:7e:0d:03:bd:
5a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:52:AF:E2:C1:35:55:DC:DB:B2:7F:F9:23:AA:BB:13:97:B9:8F:B5
X509v3 Authority Key Identifier:
keyid:DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:c2:22:90:5c:c9:80:40:91:0b:d6:98:72:02:fc:3b:75:df:
4c:64:16:cc:80:d5:fc:22:b9:af:ce:a5:fd:a8:27:7a:1a:a2:
5e:64:02:19:9f:8d:32:fd:df:bd:a9:73:85:6a:ff:89:47:c8:
12:e2:00:c9:7d:17:4e:b6:60:da:41:91:65:08:cf:c9:0f:1b:
07:4c:03:c2:a4:94:38:f3:9b:84:47:27:b9:1b:92:83:e9:2a:
d4:c6:15:b5:44:5f:b7:48:a9:df:c0:02:34:1d:4c:0f:5b:7f:
d3:ac:39:bc:b6:30:f8:e3:ab:00:3f:a3:42:79:0d:1f:71:28:
14:1f:9a:89:c3:18:bd:61:aa:0a:16:77:31:9c:63:88:85:15:
12:da:e1:b0:b9:cd:e1:3a:bc:b2:cb:51:cd:d5:74:73:62:cd:
71:b7:f5:da:cf:c5:86:4b:2b:4d:d7:cd:b1:8b:50:0e:22:78:
15:04:45:48:72:d8:be:a3:ad:80:84:93:19:7e:4d:3c:f4:8b:
b3:79:aa:75:a0:4f:a0:29:2d:02:df:28:a7:dd:9d:cc:83:2d:
1e:32:a5:d0:d4:88:92:0e:8c:5f:6a:dd:dd:15:4e:71:6c:19:
c0:c2:ec:63:3b:b1:7b:8f:35:7b:50:49:f5:9e:68:01:9a:a1:
72:4b:fc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 09:47:09 2026 by rpki-client