
$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
File: 3dU_UiXtL42o0J56rZgsgLbOrag.mft (raw, json)
Hash identifier: wba/N3ppCVqpZ5BBzrzxva5suQ4LayvqEQzHhZ6Hf2Q=
Subject key identifier: 0A:AB:D5:DF:17:60:FE:63:01:E5:96:F4:8E:25:A4:D3:3F:D6:75:3E
Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
Certificate issuer: /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
Certificate serial: 0872
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
Manifest number: 2DF4
Signing time: Mon 22 Jun 2026 16:42:29 +0000
Manifest this update: Mon 22 Jun 2026 16:42:28 +0000
Manifest next update: Mon 29 Jun 2026 16:42:28 +0000
Files and hashes: 1: 3dU_UiXtL42o0J56rZgsgLbOrag.crl (hash: g2urDfJLFstxOLTSBML/ALdjuhKhl9j83LXsjsp0OBY=)
2: 10C418C4D40011F083CDC127C4F9AE02.roa (hash: trEW3l3BfddlaJ5NOXeTcUWfTHS4ZdqJFRp+g2C/O5Y=)
3: CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa (hash: yofMdWFa6G+5IWdYK6Mk2y69/fwGAZwVAxMNAxb1xeg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl
rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 16:42:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2162 (0x872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
Validity
Not Before: Jun 22 16:42:28 2026 GMT
Not After : Jun 29 16:42:28 2026 GMT
Subject: CN=6a3965f5-a28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:76:76:6e:99:1a:42:80:1f:5b:a4:12:ff:
64:ff:79:f8:c4:d3:b2:b9:b6:49:13:1d:e6:3d:3c:
55:c9:59:3f:4b:70:6c:84:c4:d5:fa:e5:12:06:9c:
f4:52:7d:5e:86:8f:c5:f5:b4:fd:fe:45:68:ec:e9:
53:31:69:fb:7d:8c:d8:08:62:61:42:f8:72:e4:46:
50:1b:fc:68:03:cb:f5:28:1f:32:90:f5:f3:3f:21:
8e:82:bc:0f:85:49:54:29:a5:d5:0d:48:3a:2e:b3:
05:91:66:d6:ed:4d:6e:ef:f1:6f:b3:4f:45:d6:56:
ef:63:92:5d:c2:c8:52:2f:02:a7:ca:06:83:2a:9b:
d0:fb:c0:2c:85:ba:d6:6b:bc:a7:5c:c9:ed:3a:d2:
18:37:a4:ae:4a:da:e1:c0:7f:2a:5f:d4:7f:32:a3:
bc:6d:f3:f3:05:bc:47:2a:7d:fa:f6:04:50:4f:9e:
b6:24:5e:bc:fd:6f:b1:22:ac:a0:b6:57:7d:43:37:
2f:dc:22:49:4a:8e:0e:ce:6a:07:95:68:0e:99:dd:
4d:73:ba:10:91:03:bd:90:c1:a5:d5:2f:a5:be:f2:
d3:1c:26:99:03:1b:b8:6f:34:fc:ac:60:a6:1d:04:
70:40:f9:fb:73:ef:58:12:c3:97:da:2f:bb:b0:12:
3d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AB:D5:DF:17:60:FE:63:01:E5:96:F4:8E:25:A4:D3:3F:D6:75:3E
X509v3 Authority Key Identifier:
keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a6:99:3f:30:f5:51:d0:99:12:0b:03:91:98:66:17:e7:b6:
09:df:eb:4a:eb:aa:22:88:8a:82:96:e8:18:91:a5:fa:cb:13:
7c:f8:98:57:92:d3:fd:d7:b8:ef:19:af:b5:d4:d8:26:22:e2:
19:3d:3e:ce:c4:d1:62:fc:64:44:b1:07:0a:27:61:43:60:36:
de:47:37:b8:72:64:5a:e6:97:00:a0:68:44:6e:0e:ee:2c:4b:
75:8b:e6:1d:5b:cf:d4:38:b6:0b:e8:6b:37:1e:88:d5:9e:ec:
91:59:73:63:4a:49:26:cc:3f:55:3e:32:d6:1e:20:0a:24:61:
33:3e:5f:67:95:40:66:e1:00:14:b6:7f:08:bb:4c:8b:60:77:
51:69:09:8a:d5:17:fb:70:d6:c4:c5:ac:b6:27:10:f2:e4:f9:
cd:ce:63:44:46:b2:f9:e8:aa:1b:d4:64:9f:fd:63:db:44:84:
95:16:59:5e:0f:45:ac:46:35:bd:ce:2e:41:ec:ec:5a:29:2c:
87:96:f1:58:b2:81:3f:cb:1f:64:9e:3f:f7:18:fd:b8:ce:4c:
b6:f3:21:46:9a:e9:c5:64:9a:d7:9e:d4:9f:bb:e9:14:7f:18:
35:99:88:d9:1a:e5:24:93:f3:7a:9a:cb:0a:be:06:26:8b:90:
a3:fe:11:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 16:35:23 2026 by rpki-client