
$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
File: 3K6HG3xct5vH7PZ5s7LTyVan2eM.mft (raw, json)
Hash identifier: DMI3aF3iMySVPLdp5+1qi4UYPmU4aRT4fMbs9NvqOBg=
Subject key identifier: 02:43:6B:3E:81:CC:EF:32:DA:22:E5:05:92:9A:EB:6C:04:4A:B8:AB
Authority key identifier: DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
Certificate issuer: /CN=A91604AC/serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
Certificate serial: 0759
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
Manifest number: 074B
Signing time: Mon 20 Jul 2026 22:28:58 +0000
Manifest this update: Mon 20 Jul 2026 22:28:58 +0000
Manifest next update: Mon 27 Jul 2026 22:28:58 +0000
Files and hashes: 1: 3K6HG3xct5vH7PZ5s7LTyVan2eM.crl (hash: 9irZRAPgizc8sKtn6D/jCW+5pAfTeMt+SqZygN7oLWs=)
2: 0081F3D6F22111EE8EEC070EC4F9AE02.roa (hash: gt5MzzOyMRjHAQJ1OB2Ov2agdEJbjl0iI4HuG5lS+Fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl
rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 22:28:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1881 (0x759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91604AC, serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
Validity
Not Before: Jul 20 22:28:58 2026 GMT
Not After : Jul 27 22:28:58 2026 GMT
Subject: CN=6a5ea12a-d41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:05:5f:d9:a2:ae:07:ba:5d:28:ce:22:f2:
a2:f7:2b:10:8a:6a:ef:a5:a4:15:5c:73:dd:1a:eb:
42:b8:a2:80:db:57:60:05:c1:de:e1:c5:ff:5e:69:
f0:c5:05:22:39:a3:63:83:b1:ec:ac:ae:1d:df:5b:
fc:cc:b0:54:97:4c:b2:f8:2d:37:bb:9e:43:ba:68:
15:1b:be:3c:07:ba:8f:80:cd:0f:fc:b0:05:ef:2e:
e8:6b:15:fc:f4:3c:b0:2d:d6:2f:80:39:20:5e:4c:
80:3a:c1:ce:44:12:d2:bd:55:65:b0:d2:98:ed:98:
7a:cb:9d:5c:c0:21:97:c7:5f:34:50:fc:c4:95:6a:
9d:72:e4:8b:fe:1e:37:de:01:56:14:bb:0d:36:4d:
46:5b:4a:32:55:c8:ab:56:67:fe:ec:59:44:1a:f2:
3a:3b:0e:91:14:7c:f7:2e:8a:20:e6:f3:ed:05:db:
d3:bb:6e:52:d7:52:0b:86:c4:a6:fc:96:c9:1d:bf:
4a:83:fd:07:e1:52:e4:ad:22:45:4b:1e:73:73:11:
b3:58:d0:08:3f:a3:32:c0:09:0e:20:5f:eb:83:20:
ed:36:30:03:00:cf:c6:05:1b:9b:50:34:2b:55:ac:
36:e3:1c:da:35:79:cb:51:f7:98:2c:67:50:98:3e:
bc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:43:6B:3E:81:CC:EF:32:DA:22:E5:05:92:9A:EB:6C:04:4A:B8:AB
X509v3 Authority Key Identifier:
keyid:DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c7:a3:2a:c9:af:ef:87:92:2d:26:67:09:c2:dc:d6:2b:35:
34:8f:ea:fd:ce:33:14:33:2e:80:90:ce:87:2f:b5:f3:cd:dd:
4b:0a:b3:1c:bd:e3:f2:d4:60:95:5a:20:08:ad:7d:da:d6:ea:
5d:56:98:0d:17:fc:b9:dd:db:bb:26:08:db:e2:e4:c4:48:3a:
1e:f9:db:6b:6a:39:4c:24:0b:c6:d6:31:eb:a5:b2:f1:eb:04:
28:0c:32:5f:7c:4b:e3:08:0e:04:53:21:4e:ed:6d:9f:33:2d:
6e:0a:55:b2:f8:1a:08:ad:b2:67:3c:49:fc:b1:71:38:f6:23:
b6:e9:d8:d3:07:d5:e8:c6:c3:7d:45:d1:25:68:22:ac:39:33:
c6:ee:8d:0a:ee:b9:e6:d5:3a:d0:5d:34:e8:7a:7b:ba:9d:ef:
a4:d3:6f:bc:7e:2d:f6:38:6f:2f:34:11:2d:d8:11:9e:41:81:
fa:8e:d0:ba:e5:91:92:c8:6f:a8:27:e0:d7:32:bd:bf:af:af:
56:f6:11:e4:76:f1:17:f9:54:f2:5d:be:26:8c:1a:f4:9d:66:
5e:41:76:9e:de:4a:f0:38:a8:9f:2a:2c:27:60:c4:4f:72:2e:
70:74:31:6e:10:5c:cd:50:18:94:28:b6:e5:73:f8:01:42:96:
32:7d:00:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:33:35 2026 by rpki-client