
$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
File: 3dU_UiXtL42o0J56rZgsgLbOrag.mft (raw, json)
Hash identifier: vX+E3Cri9QaOZ60zxvEhgHDHXFXS6nav5kbcYq2Lpx0=
Subject key identifier: 51:25:87:F9:CB:E5:77:15:B7:04:17:CF:69:73:23:A4:B3:BD:D8:D3
Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
Certificate issuer: /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
Certificate serial: 088F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
Manifest number: 2E4B
Signing time: Tue 18 Aug 2026 16:53:01 +0000
Manifest this update: Tue 18 Aug 2026 16:53:01 +0000
Manifest next update: Tue 25 Aug 2026 16:53:01 +0000
Files and hashes: 1: 3dU_UiXtL42o0J56rZgsgLbOrag.crl (hash: YJAEY6Vjd1Ih1T1YkYKaibubwvADJpzw/eA7ZqbarV4=)
2: CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa (hash: yofMdWFa6G+5IWdYK6Mk2y69/fwGAZwVAxMNAxb1xeg=)
3: 10C418C4D40011F083CDC127C4F9AE02.roa (hash: trEW3l3BfddlaJ5NOXeTcUWfTHS4ZdqJFRp+g2C/O5Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl
rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 16:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2191 (0x88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
Validity
Not Before: Aug 18 16:53:01 2026 GMT
Not After : Aug 25 16:53:01 2026 GMT
Subject: CN=6a848ded-341e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:fd:4a:93:09:77:9d:34:18:23:eb:d8:ff:
4f:7b:c6:64:07:df:5b:a1:54:42:22:9f:9f:c7:f7:
ed:03:be:be:fa:fc:a6:db:65:24:5d:5d:7b:56:7e:
bb:cf:b0:e6:df:d8:1e:53:85:50:b8:de:66:db:52:
25:72:75:47:0d:db:f9:48:bf:fc:3b:43:50:1d:83:
8d:87:1e:84:50:6e:e2:12:9b:3f:b4:ae:16:f3:ff:
49:5b:84:9c:e5:ba:07:e4:db:fa:1d:94:f3:ac:26:
99:0f:1a:2e:8a:90:37:ea:40:ba:0a:25:25:be:d2:
7f:31:ae:92:5f:05:7d:55:e2:a1:b4:6a:7a:98:95:
c6:07:24:a1:b1:1f:3f:96:f3:24:f6:18:33:aa:2e:
3c:d6:6b:7e:99:9c:25:1c:62:fd:4d:40:78:68:9e:
51:a8:80:d2:ea:7e:39:3d:7b:bd:ed:6f:d2:4a:bb:
dc:8d:60:de:39:aa:be:2a:2c:ae:64:51:02:31:37:
d3:8e:13:37:1c:0f:ff:80:08:7f:2c:75:e2:14:15:
79:07:98:22:02:42:39:f4:6d:37:de:3b:ab:ce:5b:
52:f8:db:84:c5:38:81:e2:df:c4:ee:af:43:b3:73:
56:b9:74:b9:17:6a:95:2e:ee:3d:68:0e:3c:c0:7d:
30:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:25:87:F9:CB:E5:77:15:B7:04:17:CF:69:73:23:A4:B3:BD:D8:D3
X509v3 Authority Key Identifier:
keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:28:a2:f2:59:1b:50:a3:8d:cb:4c:64:cd:bd:b2:3f:57:ef:
54:27:68:bd:12:11:36:20:5c:d8:01:6f:5f:66:d0:3c:ef:ee:
e2:c2:90:65:23:11:a1:41:b4:f4:94:4f:bd:d1:ee:94:1c:cb:
7b:7c:52:c1:69:4c:7c:c9:a1:ed:b2:a3:ce:5a:a1:f1:2c:c0:
c9:f9:da:ab:d8:48:92:65:51:71:86:f1:a7:33:64:93:d9:2f:
dc:62:83:d0:b2:e0:56:fb:b1:00:8b:cc:98:06:e5:fb:6f:21:
cf:41:a4:3f:dd:64:72:c4:b6:5e:a6:5f:05:58:35:c3:fc:77:
da:0b:75:04:69:51:7e:38:44:cc:7d:e3:42:b7:e0:ad:ef:e9:
23:bc:aa:65:7d:a6:98:37:fc:e4:ef:56:f5:fa:45:44:39:c7:
64:49:b8:d8:2c:cb:ca:2b:5c:c4:dc:79:3b:aa:11:cd:96:a7:
4b:7f:1d:a4:b6:11:2f:4a:93:c5:e9:ea:2f:32:65:8d:23:f2:
8c:56:a0:d5:7c:8a:42:aa:4a:00:64:2e:69:b1:10:88:81:49:
30:51:9d:1d:02:4c:b6:9f:dc:a4:97:90:5f:1d:df:d2:9e:8f:
e8:53:bb:fb:2f:3e:e3:f4:c5:28:ed:2f:eb:77:9c:57:21:08:
f3:5b:63:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:42 2026 by rpki-client