
$ rpki-client -vvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
File: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft (raw, json)
Hash identifier: QEKlO2WeDxBtGat+2Tj5oovx4I83UdqBXLApA9ardTk=
Subject key identifier: BD:12:CD:FD:F6:87:AA:19:D8:1B:B6:F1:78:2C:F1:D1:A2:75:8B:2F
Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
Certificate issuer: /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Certificate serial: 0CC2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
Manifest number: 0CB8
Signing time: Tue 18 Aug 2026 18:46:37 +0000
Manifest this update: Tue 18 Aug 2026 18:46:36 +0000
Manifest next update: Tue 25 Aug 2026 18:46:36 +0000
Files and hashes: 1: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl (hash: 7O2UUc/gbVlG0UFCMfKchyPrB5We2vUehLbOfPlTJBA=)
2: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (hash: veYCT0YVn2lsSh/a1SemHmCMUXzXqFx3N+q0M958UTg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:46:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3266 (0xcc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91822BF, serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Validity
Not Before: Aug 18 18:46:36 2026 GMT
Not After : Aug 25 18:46:36 2026 GMT
Subject: CN=6a84a88d-d5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:95:27:c6:d5:65:01:36:cb:7b:ba:f7:65:
56:f9:92:15:cb:41:84:bf:f9:bf:df:51:16:43:93:
48:fe:20:cd:a6:af:11:79:0f:77:58:1b:94:6a:69:
c5:fd:4b:22:40:7d:98:ec:73:67:b4:97:24:fa:27:
8d:28:bb:f4:32:9f:f0:b9:35:d9:3e:e3:19:27:ba:
76:cd:db:2f:cc:a7:1a:17:ad:f4:aa:0b:a1:7f:c7:
97:1c:26:f0:18:dc:d8:1a:ba:68:40:64:e2:d3:9f:
e6:59:03:fd:9b:a4:c3:5a:f4:b0:cb:2e:a4:1d:0f:
e9:02:5b:de:08:3f:72:9b:d8:48:c3:8f:3a:e4:d5:
63:73:9c:8d:f7:33:74:ad:31:70:7e:86:56:d3:ca:
bb:af:8a:cc:20:91:03:09:f7:da:47:2d:b6:e5:56:
73:3d:17:bf:fe:31:56:38:0b:3e:c6:41:92:af:df:
0e:c1:eb:2b:dd:46:0c:55:08:80:a9:96:3f:09:5f:
e8:d1:fa:59:af:08:b6:b0:0b:48:c1:47:1d:8b:df:
4f:88:0a:08:31:b2:1c:1a:37:59:a5:ec:38:5f:9c:
a3:1a:a7:5c:26:e6:1b:0c:e3:bc:a2:fd:01:f1:43:
2f:ba:04:4d:53:9e:e4:a4:68:47:1c:87:58:33:51:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:12:CD:FD:F6:87:AA:19:D8:1B:B6:F1:78:2C:F1:D1:A2:75:8B:2F
X509v3 Authority Key Identifier:
keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:0e:ec:04:ed:97:07:a0:d7:59:8a:88:2f:ef:c6:42:13:ea:
46:3f:20:fe:14:5c:b2:ef:56:7c:56:43:35:1c:9f:15:15:57:
7a:67:97:f7:f9:44:3f:f6:57:5c:41:55:f3:dc:51:df:46:34:
59:fd:be:9b:65:91:cb:95:b3:b0:93:39:04:9b:2f:93:b4:50:
7f:85:d9:33:9a:a9:92:73:a4:91:8b:2c:9f:13:84:aa:2a:18:
68:ac:69:42:a9:8f:f3:ca:90:d3:00:15:4e:9b:d5:89:85:db:
bd:e7:68:85:62:13:67:31:3d:9b:96:39:5d:f8:cf:78:89:64:
53:81:56:67:63:19:ac:5a:33:88:fc:be:53:29:53:e2:ec:68:
b1:e6:d7:cd:b9:48:e4:f0:dc:fb:0a:2f:3e:7a:a7:0e:44:f1:
97:ad:ee:5b:f9:ac:e3:17:61:f4:dd:b9:87:c3:7b:f6:59:b4:
36:2e:11:31:d6:c3:78:c1:f2:cc:b7:bf:27:49:f6:01:a7:74:
07:1f:81:8f:ca:14:22:10:75:a5:04:c4:ae:dd:57:82:a5:28:
dc:89:1c:d4:02:b2:29:62:65:41:c9:f4:b5:d2:0f:fc:7b:53:
d6:ed:1a:4f:f6:18:07:49:b9:aa:b9:0c:b6:6c:96:e1:d8:97:
0f:51:8f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:48:18 2026 by rpki-client