
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
File: As_3eY8FPpyB_czteWLsu3bB0ho.mft (raw, json)
Hash identifier: Wg3v7LYWy+MfTpttgQfrzNYUxhhm863hKWcB3PZmV04=
Subject key identifier: 59:72:58:81:ED:9F:18:67:76:2B:69:7B:52:D8:89:BC:7E:EB:8A:E1
Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A
Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A
Certificate serial: 0192
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
Manifest number: 017F
Signing time: Wed 19 Aug 2026 05:14:39 +0000
Manifest this update: Wed 19 Aug 2026 05:14:39 +0000
Manifest next update: Wed 26 Aug 2026 05:14:39 +0000
Files and hashes: 1: As_3eY8FPpyB_czteWLsu3bB0ho.crl (hash: NC5r7uqaYv4Z3gQPjenoui3UXZWgcEoviSU10MO23hk=)
2: 18C1AED0ABD111F0A1D84812C4F9AE02.roa (hash: onsHSEw2gBQvyT6GIE8r+szJ0Eco/4I+9evLtNgxa0M=)
3: A8F5426250E311F09F3F2B1BC4F9AE02.roa (hash: /ylmPLoqNPkXI0WwNkgwXyjpwWePDXl4PjOB+BkYIxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl
rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 05:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A
Validity
Not Before: Aug 19 05:14:39 2026 GMT
Not After : Aug 26 05:14:39 2026 GMT
Subject: CN=6a853bbf-502b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:69:70:85:95:8d:d6:79:8b:a8:fd:26:f2:
dc:9c:c4:d8:9b:11:f0:4a:2a:e1:d5:cc:84:8a:8b:
df:4c:75:1c:5f:2f:c4:88:cb:aa:d1:1f:5e:07:e8:
78:0f:3e:1a:25:fd:fe:46:27:c6:d8:a1:fb:03:3a:
d5:fb:b3:82:f8:51:32:ab:09:2d:ea:3e:e6:68:f3:
f3:52:b1:7d:41:8b:0f:00:a0:ff:1d:28:26:a5:f9:
c0:9f:71:53:31:e3:64:f9:58:e2:80:19:64:1e:60:
7c:1b:30:1f:38:0b:7f:7b:28:54:35:55:13:e1:bb:
ad:51:16:ad:13:5f:a3:9d:0b:b1:9a:3b:13:52:e7:
80:5b:03:b2:83:d5:7f:7a:e9:49:04:80:5f:f3:40:
0a:61:1f:9f:3b:57:60:c6:7d:3b:fe:6b:bd:94:71:
ee:b2:65:b8:c6:fe:5c:3c:03:96:8e:b8:39:6b:63:
b2:47:7d:e5:b9:84:04:64:68:d8:05:e0:66:9c:c4:
c8:40:c8:d9:9b:16:3e:5a:aa:dc:28:5f:6d:d6:d1:
e9:bd:7b:d9:23:bf:16:e5:35:94:69:94:ca:50:cc:
5d:0b:d1:3a:e9:cc:5c:dc:8b:47:1e:e4:b6:48:4e:
42:ed:92:a1:b2:be:6d:15:68:de:ff:0f:f8:e0:44:
33:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:72:58:81:ED:9F:18:67:76:2B:69:7B:52:D8:89:BC:7E:EB:8A:E1
X509v3 Authority Key Identifier:
keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fa:44:7d:71:bc:06:ec:82:b9:41:93:b2:78:c2:bd:81:e8:
2b:c2:8d:a4:8f:4a:33:20:87:f7:53:cb:20:9d:dd:25:b2:8d:
c3:9c:e2:02:f8:05:5a:e9:0b:6a:67:19:48:ed:3f:3e:e1:6d:
36:da:07:c1:69:e1:60:a8:c0:f6:33:82:52:39:10:1b:f4:89:
93:45:73:f1:cb:7a:d4:44:30:36:8c:28:85:4c:7a:32:4b:0c:
9a:e4:d8:f8:2f:72:33:cd:59:00:24:36:2a:76:f8:45:73:13:
1b:b8:d8:a8:f9:f1:ec:e4:ab:b4:59:53:30:bf:7b:d0:9e:2c:
2a:7f:6c:0e:48:0e:95:49:98:07:74:2f:07:26:69:b4:cd:83:
b4:5c:cf:fc:43:75:32:69:08:f5:05:20:1b:35:d8:a7:4d:d9:
78:41:00:55:e5:49:4d:3c:0f:66:11:2e:05:69:ef:43:df:5c:
8d:cb:9f:29:17:f2:d0:7a:b0:02:79:ab:fe:92:a3:4f:91:1b:
3c:18:96:86:e1:4b:00:5b:cc:47:51:77:53:54:a9:c8:ca:01:
f7:bd:d0:7b:5f:84:c5:85:25:a2:72:3c:fb:c3:c7:0f:26:ce:
ad:c2:88:8a:de:51:36:88:66:a0:a2:be:48:de:cd:87:a7:da:
18:5a:58:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:06 2026 by rpki-client