
$ rpki-client -vvf rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft
File: 3n3GT5n2JAYkuhPSFUlETEJLVG8.mft (raw, json)
Hash identifier: 7Uh+sIYHQwhPDuu+mDGcjtIKPDE5qt0QOFnrB0SPb+U=
Subject key identifier: 28:25:D1:34:D0:9C:D8:4F:72:D2:E2:29:2A:CD:AE:D0:97:0E:9E:7E
Authority key identifier: DE:7D:C6:4F:99:F6:24:06:24:BA:13:D2:15:49:44:4C:42:4B:54:6F
Certificate issuer: /CN=A91567EF/serialNumber=DE7DC64F99F6240624BA13D21549444C424B546F
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft
Manifest number: 67
Signing time: Wed 19 Aug 2026 08:52:18 +0000
Manifest this update: Wed 19 Aug 2026 08:52:17 +0000
Manifest next update: Wed 26 Aug 2026 08:52:17 +0000
Files and hashes: 1: 3n3GT5n2JAYkuhPSFUlETEJLVG8.crl (hash: fVhYeoAQCxIatgkyv+jLX63k8JOsR/bgPCaeTFtwN4A=)
2: 616D1BAC6B9C11F1A5AE9DAA6D47A888.roa (hash: Q8pRs/zL4LH+ArnuogEwPHVYr3czyBo1S7DW7cvjosM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.crl
rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91567EF, serialNumber=DE7DC64F99F6240624BA13D21549444C424B546F
Validity
Not Before: Aug 19 08:52:17 2026 GMT
Not After : Aug 26 08:52:17 2026 GMT
Subject: CN=6a856ec2-b609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e8:46:e7:7d:1a:e2:e2:1a:a7:73:43:a2:b9:
31:c4:5a:93:4e:14:d1:7a:24:05:d5:a8:65:3d:a5:
50:17:95:97:d6:be:9b:70:95:4e:af:aa:00:28:e1:
0a:31:f6:c2:f3:8a:0c:32:bc:e3:12:ca:7f:ca:d1:
9e:ea:9e:e9:28:a9:5f:fd:4c:d9:b3:83:fb:5c:e6:
67:e2:ed:2f:9f:f4:52:95:fa:e5:32:01:a9:6d:a3:
d8:70:57:2e:1e:b7:93:16:36:7c:a4:89:f8:62:95:
39:d3:1e:7c:c2:77:15:f9:b1:33:e9:7d:7e:15:bc:
92:07:b4:6e:5f:f0:ba:ee:21:3a:7c:f2:c8:b0:30:
5e:ba:5a:75:fd:c7:1f:08:bf:9f:2f:4b:b4:8c:b5:
6f:9f:ae:e0:52:a6:c5:bd:44:08:6c:fe:fb:c2:69:
b4:33:14:49:eb:62:fd:97:53:45:c2:bd:63:d7:29:
6b:95:3a:2a:7f:f4:cb:99:2e:cc:44:8e:d8:9c:25:
3d:53:76:54:ae:14:9b:4d:b8:b7:1a:8e:ec:cc:2f:
bf:34:c3:d9:2d:9e:5b:32:3b:1b:65:1c:56:6a:0b:
83:fe:8a:cb:22:8e:c3:96:db:f2:2c:a4:15:97:2d:
aa:a6:ec:bc:e4:6f:97:d0:17:16:95:f5:4e:d3:3c:
06:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:25:D1:34:D0:9C:D8:4F:72:D2:E2:29:2A:CD:AE:D0:97:0E:9E:7E
X509v3 Authority Key Identifier:
keyid:DE:7D:C6:4F:99:F6:24:06:24:BA:13:D2:15:49:44:4C:42:4B:54:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d3:6c:bc:df:9a:7e:f7:5a:2f:41:9a:76:fe:8e:cd:ee:b9:
da:9f:72:77:08:22:4f:d9:46:22:b6:7c:bb:70:3a:43:3e:3a:
fe:e1:41:a1:1e:b7:b0:87:63:2a:59:d3:c5:34:32:62:af:f1:
7f:fb:61:dd:7f:22:b3:26:2e:a3:2f:9a:be:01:17:3f:1b:f0:
5e:86:36:78:95:8c:f6:a1:38:21:2c:77:35:10:e3:65:d0:9c:
d9:9f:1a:33:ad:1d:61:97:12:de:cc:40:51:92:92:0a:1c:f3:
db:42:4f:4e:52:49:be:33:4c:a9:6f:7b:6f:4f:42:73:60:58:
b2:0e:c3:f7:18:59:0f:f7:00:f5:bf:e2:4a:c4:36:3e:3d:e0:
26:03:9d:54:46:09:6b:06:ed:9d:7f:d3:6e:dc:86:62:e6:3f:
5b:98:2e:97:a8:2b:c0:21:bc:c9:20:4d:ba:37:ef:c7:67:ce:
c0:0c:90:82:4f:12:13:6e:d6:19:e2:aa:52:aa:62:b8:5e:e4:
3a:e6:e4:7f:4e:93:b8:15:1d:fc:1d:9e:69:54:2c:bd:a0:41:
2e:6d:29:2f:23:cd:c9:2c:11:db:c9:fc:fb:d2:fb:30:45:d5:
5e:c8:06:6d:a7:2d:6a:98:d1:cf:f2:8c:e6:73:3c:54:64:48:
21:f9:0f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:17 2026 by rpki-client