
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
File: 63_piS3wACVfzzrAsrTRKupv-AY.mft (raw, json)
Hash identifier: IpBS/JozGd2K4BeBobmKs3NyKEW3/8t50xnNg41ptpc=
Subject key identifier: 27:8B:27:AA:18:65:79:A7:C6:31:FD:2E:E2:D0:FF:FC:53:40:39:29
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial: 3684
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
Manifest number: 35AD
Signing time: Sun 26 Apr 2026 14:51:57 +0000
Manifest this update: Sun 26 Apr 2026 14:51:57 +0000
Manifest next update: Sun 03 May 2026 14:51:57 +0000
Files and hashes: 1: 63_piS3wACVfzzrAsrTRKupv-AY.crl (hash: YoNQvW+sN8VyZz4iiqxozox6aAnku62JSTkE3EdX0e8=)
2: 347735B4C00511EE82324069C4F9AE02.roa (hash: /kUd9dg2x7gbUussL1CZiH5//c2g+atYXyM6o1Fjd68=)
3: F4ABC602F57411E9B18D9325C4F9AE02.roa (hash: VIRmL951A2w0+MXfiiwjWiaHXlAvoYt8IPFvgYt8GJ8=)
4: E28E6B84BB0011F0BF1A9179C4F9AE02.roa (hash: smbkx45zByj9Rn6fJhQgzAKRd1qZspDivWChDPD3Xgc=)
5: 355461A4372C11EDB1059640C4F9AE02.roa (hash: NxJ2unXmkGj4Yr8VVZLWqjZNZJ7C6FQB8WBXPKvyldA=)
6: 9566944A8D4111EB81CBE475C4F9AE02.roa (hash: Td8fpDl1muyggYTNSgp6i/pQqHmwkCCIVXTLbwgwDlA=)
7: 150612CA903711EEB0B65F74C4F9AE02.roa (hash: g1chng8Zroh0xuqUUgiR9KsHEJpzRGDKOC2H2UuXyfM=)
8: E180123A500A11F09FCC5C46C4F9AE02.roa (hash: SvhfDhu8z7AY1Gsx30cCjfYcMF/mDJRnCXF7NmFAbv8=)
9: FD206C4EF80B11EAA0659123C4F9AE02.roa (hash: mcPnEtJN4CwFlo9K5wKS7nNsKtBJ+C4x6y6oJtNpiUQ=)
10: B3501A3838BB11EB9F5B573BC4F9AE02.roa (hash: R+EwkIyyW5Tva5rKC5LyIDMc9DCqL1tlwpEozeLBwXE=)
11: D53B3AEE89FE11E6A44EAA55C4F9AE02.roa (hash: R6YXr6mLTUDY2MoinQ6/ghJTAUyVeETH/6l5X7fp+n8=)
12: 6A6FBBFE16C111ECB341F934C4F9AE02.roa (hash: +DlfNUUN/cRUX1kAlUw6vhOedHe0ghSEJgBGTWeBk+Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 14:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13956 (0x3684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Validity
Not Before: Apr 26 14:51:57 2026 GMT
Not After : May 3 14:51:57 2026 GMT
Subject: CN=69ee268d-047b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:16:b3:73:eb:9c:83:cb:2b:a9:63:9d:ca:fc:
eb:8a:94:25:d4:89:99:9a:c0:e7:c7:a1:60:eb:ee:
eb:80:4f:18:30:76:3e:1d:ac:d4:37:ea:90:b3:8a:
60:af:96:52:73:c7:f6:d8:eb:7a:86:bb:2d:90:94:
f8:9f:d4:7a:76:80:ec:9e:bb:a7:82:7a:d0:b8:10:
48:c0:b8:fa:fe:08:7c:f3:09:59:9e:06:d4:1c:8e:
4c:a2:aa:23:00:e6:a3:de:85:1f:e8:3a:c2:66:b6:
2e:df:33:b8:89:30:e1:35:7c:2b:3c:ab:31:0e:14:
6b:38:e1:36:41:e9:dc:3c:7e:46:a4:2a:db:20:23:
85:96:ad:24:51:ca:da:b8:de:9d:72:c6:d1:e3:5c:
69:26:5f:3e:56:0e:fc:7d:04:f9:64:a6:fc:69:d5:
86:d7:02:39:ea:33:d6:16:d0:a2:47:4e:8f:29:f8:
2f:c4:10:e2:06:95:8e:6f:7e:13:da:ad:fa:fe:29:
8e:77:08:76:2b:79:e3:b3:16:9e:7d:ca:60:1d:b1:
38:9e:70:ae:e3:ff:74:b8:f4:05:f7:93:17:7f:87:
4f:45:18:00:f2:10:9e:d8:d1:04:bd:73:ca:13:4d:
59:a3:57:63:5c:7a:49:55:49:2b:89:a8:4f:6b:b0:
50:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8B:27:AA:18:65:79:A7:C6:31:FD:2E:E2:D0:FF:FC:53:40:39:29
X509v3 Authority Key Identifier:
keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:23:08:72:cf:ab:3e:e5:eb:36:9b:44:c6:64:e3:5e:1b:70:
f4:0c:53:db:67:ad:f5:1c:58:6e:a6:46:b2:c5:fc:a1:53:0a:
9b:f1:3a:c0:5b:47:fa:2d:77:2b:65:69:ed:2e:e0:af:9b:6e:
25:6c:95:85:9a:e9:a6:c3:73:ec:83:8b:92:02:55:b5:7e:8f:
a5:0d:87:e9:76:3f:f4:01:13:8d:ce:ef:bd:18:94:26:99:25:
4a:1e:62:c8:4f:f5:86:d8:fd:5c:d0:4f:00:1e:e5:2c:11:21:
95:d7:97:54:4e:da:03:95:e2:13:cc:4b:b5:88:43:d3:f6:63:
bc:cf:64:fd:eb:e3:33:f8:0d:2e:f2:10:96:c0:02:ad:ce:f2:
a7:23:a9:96:dc:f3:ba:b7:3b:85:44:3f:fd:4e:42:eb:92:0f:
ad:4d:c4:b7:4d:37:f5:bd:de:97:e9:ad:a4:6a:f8:09:ab:a5:
ea:e3:98:99:c0:b0:10:35:8c:94:0f:e7:ba:26:75:4d:7c:80:
cc:2d:22:2c:3a:14:e8:a7:4e:98:4b:9c:d9:07:39:1d:b2:bc:
23:79:99:d8:26:06:b5:12:81:d8:9e:13:c9:82:14:0b:a7:33:
63:00:ac:68:7f:0e:22:95:1e:98:93:b8:ed:db:22:ea:cf:ba:
0f:13:ba:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 13:54:52 2026 by rpki-client