
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json)
Hash identifier: cT/0cT6ac3/B9yqFdBipfSgAUisoTlgcBaYfR5T0Gkk=
Subject key identifier: F1:C2:08:5B:DF:34:DA:FB:AF:28:1D:29:C5:7C:46:3A:64:C6:71:CB
Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1
Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1
Certificate serial: 0567
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
Manifest number: 0559
Signing time: Sat 04 Jul 2026 23:45:01 +0000
Manifest this update: Sat 04 Jul 2026 23:45:00 +0000
Manifest next update: Sat 11 Jul 2026 23:45:00 +0000
Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: 3GRJg37EE5bU/mzXrlOOus6oDui1n4y8uPyG7aWIaXo=)
2: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: jAa33zySKD0mAn7r2v7MBjntJgbOB3pz/8LhzG43AK8=)
3: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: NzLjTxl1M87dajrYUnMMeCTuzc6b9MgyWvlgrea5Itk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl
rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 23:44:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1383 (0x567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1
Validity
Not Before: Jul 4 23:45:00 2026 GMT
Not After : Jul 11 23:45:00 2026 GMT
Subject: CN=6a499afc-885d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f2:cb:98:a4:cd:00:17:c4:1b:3e:0a:24:3a:
40:d9:68:4c:57:85:32:1f:e5:a6:f1:57:6e:7b:e9:
be:6b:af:14:ad:d9:ad:57:b3:30:cf:6d:b1:96:8a:
3a:4e:a6:78:0a:1e:e0:70:8c:52:ae:be:9b:68:1c:
51:25:68:45:83:65:60:0e:a4:40:89:9f:27:30:54:
6b:89:f2:fc:ef:c4:d4:ea:52:a1:e1:7d:96:cf:70:
12:16:f5:e4:f1:a9:3d:e9:9f:85:81:23:9a:93:96:
a7:f9:ff:61:b8:6e:f9:a1:a7:b1:e5:9b:56:a2:87:
96:77:8f:32:a6:f2:76:c7:cf:97:f7:b6:2a:06:6c:
52:f5:08:98:fd:3c:51:e6:3b:8e:ef:c2:cd:99:f6:
b5:d6:e9:93:cc:07:30:42:78:2e:17:4c:54:47:b2:
7c:45:5e:39:7b:31:33:82:b6:f2:0f:e1:d0:7f:ba:
44:44:0d:83:0a:f4:67:f4:3b:7d:92:7f:2e:5c:c1:
2d:c0:fa:f1:59:f5:c7:e3:e7:27:f6:2a:85:7b:b5:
d9:50:8d:f0:d5:7d:c8:25:94:12:27:79:5c:e1:6e:
33:90:d6:2a:45:7c:46:e3:74:20:52:ec:08:f9:02:
6d:e0:48:17:68:99:96:5e:1e:49:5c:de:36:6c:2f:
ec:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C2:08:5B:DF:34:DA:FB:AF:28:1D:29:C5:7C:46:3A:64:C6:71:CB
X509v3 Authority Key Identifier:
keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:0b:4e:2e:fe:d9:bd:cf:e6:e1:01:ae:6f:b1:a1:9b:ff:d0:
da:41:bd:d4:c0:3a:ca:4c:25:b7:89:6b:55:45:4c:fa:a8:a2:
47:c9:be:c2:f0:1c:8d:31:06:71:bc:55:da:bc:39:62:ad:9e:
0c:40:bc:2d:b0:48:cf:d6:5b:48:46:3a:18:5e:0b:64:14:c0:
27:04:e1:08:0a:22:92:6d:a4:98:26:f3:81:f0:f3:38:9f:6c:
97:73:32:af:ba:01:ec:7d:fa:ef:8d:6e:c1:22:39:a3:85:5b:
04:92:b9:52:4f:d9:f5:ed:c9:77:7f:96:df:c3:6f:c6:18:b6:
95:ba:30:49:91:d4:92:20:53:cd:e5:f9:8b:de:47:24:a9:92:
cc:00:fa:57:f5:e4:3d:da:9f:5f:05:20:f3:33:1f:bd:b7:22:
12:e0:9a:93:0f:f5:14:d6:a5:96:fe:de:05:79:4c:c9:77:dd:
b3:6a:b2:6c:c8:cf:64:0b:eb:65:da:26:a4:e5:fa:a1:b7:6e:
41:b2:8b:ba:11:b7:24:96:de:2e:1e:72:f8:54:bf:99:5f:fc:
35:e4:54:b2:79:60:58:37:c8:74:74:fc:54:d6:36:c4:8f:24:
b7:2c:9e:25:59:75:52:74:fb:50:94:1c:95:32:74:f0:ce:de:
a4:d4:44:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:07:24 2026 by rpki-client