
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
File: As_3eY8FPpyB_czteWLsu3bB0ho.mft (raw, json)
Hash identifier: coTT4m5i3Vb74c3FiL7b0JGgCwwDrpRc9auvWtllDLM=
Subject key identifier: BA:2D:64:82:5C:C5:37:64:48:79:64:D6:3A:98:CF:28:52:65:3C:4B
Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A
Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A
Certificate serial: 0173
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
Manifest number: 0160
Signing time: Fri 19 Jun 2026 05:05:10 +0000
Manifest this update: Fri 19 Jun 2026 05:05:10 +0000
Manifest next update: Fri 26 Jun 2026 05:05:10 +0000
Files and hashes: 1: As_3eY8FPpyB_czteWLsu3bB0ho.crl (hash: ll3FFwX1OVgb91MIkHrfTLWKGAx/LpkjtZ1aZFqdPbw=)
2: 18C1AED0ABD111F0A1D84812C4F9AE02.roa (hash: onsHSEw2gBQvyT6GIE8r+szJ0Eco/4I+9evLtNgxa0M=)
3: A8F5426250E311F09F3F2B1BC4F9AE02.roa (hash: /ylmPLoqNPkXI0WwNkgwXyjpwWePDXl4PjOB+BkYIxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl
rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Jun 2026 05:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A
Validity
Not Before: Jun 19 05:05:10 2026 GMT
Not After : Jun 26 05:05:10 2026 GMT
Subject: CN=6a34ce06-8af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:af:ef:18:87:44:e2:87:cf:ec:e0:88:c7:
6b:d2:06:c0:1d:e6:ac:8c:fa:f6:c9:80:df:83:87:
21:63:fa:3a:01:3e:52:34:4c:13:ef:fb:08:8a:bb:
14:a8:3a:f0:06:d3:a2:64:17:4f:81:86:44:b3:d0:
c5:e3:9b:3e:72:f8:d8:93:2e:5e:90:a1:0b:79:17:
d9:6c:7d:3f:7f:98:ae:4b:dc:52:04:b4:dd:44:7a:
cf:33:d8:f5:8e:2f:bb:9e:a2:c8:ed:ca:69:cc:d5:
84:d6:37:ca:c1:ac:82:6c:63:85:15:b5:f3:5b:d7:
5c:b8:6f:b1:0c:77:f3:2f:4f:61:dc:32:51:e8:30:
8d:a4:be:9f:4a:3d:64:77:d4:09:be:6d:a6:5e:55:
0a:d8:a5:d1:74:9f:9e:2e:05:02:ab:ff:f1:fb:6d:
53:33:b6:0d:fd:7f:38:6c:b3:c9:6b:22:a9:b4:d8:
46:f6:64:eb:4f:0b:a4:64:33:4e:2a:89:ff:d1:84:
63:af:04:86:94:a1:d9:dd:56:fe:96:6e:dc:8e:84:
bc:79:59:1a:61:73:98:63:a8:a4:1d:90:5f:bd:8f:
64:75:67:b4:77:a1:81:50:b0:4b:ce:ce:65:33:7a:
f3:7d:73:6e:19:df:96:eb:57:e4:2a:b4:21:40:b8:
ac:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2D:64:82:5C:C5:37:64:48:79:64:D6:3A:98:CF:28:52:65:3C:4B
X509v3 Authority Key Identifier:
keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f1:92:02:26:9d:e8:27:8f:8d:bc:a7:8d:32:85:ed:65:af:
66:83:e7:db:2e:6e:c3:8b:06:0e:ec:b3:99:24:2b:3c:af:00:
7e:09:14:67:99:f3:65:72:9c:5b:13:67:b4:dc:56:4e:56:35:
e9:3a:9c:b9:95:89:ab:1d:b5:4c:b5:ff:25:07:9f:a3:94:01:
be:f7:f7:89:ae:cf:22:2b:e2:32:2d:ef:ab:c0:16:ff:51:4b:
84:c0:a9:57:1d:a3:da:1c:1c:f9:0a:ce:88:bb:1d:ae:bf:9d:
ae:bd:6a:75:82:fe:9b:8b:b2:03:08:bd:38:e8:0e:34:fc:a3:
f5:ed:19:69:eb:2f:cb:ed:45:24:fb:1b:69:47:3e:62:cc:0d:
4d:b3:31:c0:02:ce:e8:be:a0:d3:bd:10:69:b7:b6:23:20:4f:
33:06:54:05:3a:65:66:28:ea:15:19:15:79:f2:64:70:7f:88:
b0:ae:78:c1:19:29:09:42:eb:b5:32:2a:ca:4b:39:7b:42:43:
b7:8c:f8:9f:a3:8f:9c:dd:90:03:22:14:0b:19:80:ec:51:f3:
cf:94:12:2c:14:62:0a:a4:5a:13:54:5e:db:bf:a3:ea:a0:68:
a4:3f:0e:cf:c6:21:17:bf:a2:ce:02:59:a0:43:60:d2:eb:39:
65:69:5d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:01:58 2026 by rpki-client