
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft
File: f3UA8ZRiBwd03Is7S5avThubtUU.mft (raw, json)
Hash identifier: MX671lKzZGSReil1RsGMDCO4QTQ6rtHm/x/uQiL0pdw=
Subject key identifier: 3A:0A:D3:F4:08:C3:3C:E8:66:53:31:82:23:C8:5A:A4:07:4F:53:74
Authority key identifier: 7F:75:00:F1:94:62:07:07:74:DC:8B:3B:4B:96:AF:4E:1B:9B:B5:45
Certificate issuer: /CN=A91A840E/serialNumber=7F7500F19462070774DC8B3B4B96AF4E1B9BB545
Certificate serial: 2EC6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft
Manifest number: 2EC6
Signing time: Wed 20 May 2026 15:29:18 +0000
Manifest this update: Wed 20 May 2026 15:29:18 +0000
Manifest next update: Wed 27 May 2026 15:29:18 +0000
Files and hashes: 1: f3UA8ZRiBwd03Is7S5avThubtUU.crl (hash: TiX8vcivPdu7VoV0xoR0rXfs/JkUtro9bOT6whshpvM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.crl
rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 15:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11974 (0x2ec6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A840E, serialNumber=7F7500F19462070774DC8B3B4B96AF4E1B9BB545
Validity
Not Before: May 20 15:29:18 2026 GMT
Not After : May 27 15:29:18 2026 GMT
Subject: CN=6a0dd34e-c881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:22:ef:84:4c:78:46:08:6f:57:3d:86:6d:
69:75:af:c1:ec:d7:0d:c8:e8:54:89:4c:bb:49:65:
a1:99:51:a5:16:2d:09:05:4b:fb:a6:e1:67:90:f1:
e8:f3:e2:f2:26:e7:01:04:ff:80:8b:36:7d:3e:8c:
b5:bc:af:c5:a3:5b:9d:a9:34:2f:fa:c5:7f:5f:df:
50:e1:11:8a:85:68:6d:07:16:85:01:68:c8:38:9a:
3a:65:34:a6:b3:87:05:35:5b:aa:f7:b5:07:14:3c:
06:ed:9e:8b:ba:63:a4:a8:e9:b8:b1:18:cc:aa:40:
ce:17:8c:3f:31:56:03:1e:bc:82:f5:94:e9:07:ca:
13:1c:59:71:76:f7:f8:da:95:41:78:e6:b3:c8:51:
e3:39:4b:0a:da:fe:fd:9b:fc:3c:d2:56:fe:37:57:
9a:23:a2:f7:59:0d:af:0d:79:4a:16:29:33:51:5d:
29:99:16:58:aa:86:22:5b:e7:fa:0d:07:a3:1d:42:
7a:4d:18:df:c3:c6:37:7b:23:ef:ae:bb:da:19:ba:
bc:90:24:74:22:4a:cc:f2:4a:aa:d3:3f:e9:73:16:
ea:9f:bc:2f:2b:fd:fa:24:f5:12:1a:d5:ff:d8:3a:
f5:04:a5:47:1c:f2:36:0f:c2:5d:29:1f:64:6b:ee:
b2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0A:D3:F4:08:C3:3C:E8:66:53:31:82:23:C8:5A:A4:07:4F:53:74
X509v3 Authority Key Identifier:
keyid:7F:75:00:F1:94:62:07:07:74:DC:8B:3B:4B:96:AF:4E:1B:9B:B5:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:a4:63:42:6e:27:98:34:47:4b:ac:15:da:78:46:48:35:f4:
4c:5c:59:9c:81:b1:2b:ac:51:6f:1c:22:a5:ec:a0:a7:e0:12:
47:f1:bc:e4:e5:81:e1:94:8d:00:49:47:0b:a5:15:e1:7a:54:
62:04:66:8e:cd:97:98:cd:e9:05:18:ef:51:8b:7b:72:8f:7e:
a8:de:c3:06:16:b6:b5:3e:6f:c7:3a:89:20:cf:fe:52:87:7b:
ed:58:59:52:ef:7d:0a:3d:12:59:e7:aa:0d:25:8d:9a:7e:0e:
da:a4:7d:d5:f4:79:b1:55:90:d8:19:f0:f7:c4:a5:29:0e:a2:
27:8a:5c:e9:2b:d9:cf:b9:b8:f4:63:71:4b:87:15:ec:65:39:
28:36:aa:a2:b2:18:81:40:0f:54:a0:a5:22:2e:bc:6e:2d:02:
1d:70:73:8e:16:57:b4:ab:26:f7:59:21:6a:0a:0b:d2:26:e5:
f6:a1:80:b6:70:23:50:e0:30:c2:20:07:36:ec:58:d8:06:d2:
88:75:5b:cd:27:94:6f:69:c2:73:03:94:3b:c1:4a:e6:5e:c5:
5b:40:6a:12:91:1d:04:7e:6f:ec:f8:14:25:51:e4:cf:ce:87:
a4:cb:d5:f9:6f:4c:25:19:58:ff:34:f7:70:a3:91:90:27:c2:
c6:68:4a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:43 2026 by rpki-client