
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft
File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json)
Hash identifier: cw637PWNHT/FhD2B87wxcRfCzQf/dStWrxfvAQxR8Qc=
Subject key identifier: 0D:7F:54:E1:ED:FB:D4:3E:43:B5:AF:46:3B:F4:77:9B:D4:7A:D4:7B
Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15
Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15
Certificate serial: 3587
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft
Manifest number: 3571
Signing time: Thu 16 Jul 2026 14:35:27 +0000
Manifest this update: Thu 16 Jul 2026 14:35:26 +0000
Manifest next update: Thu 23 Jul 2026 14:35:26 +0000
Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: GVYPRPG0GUkAa7TbZ9Z/lnx9DoVRqBnjO4rSLC1t4wQ=)
2: 1733DE66945D11F09E173B0CC4F9AE02.roa (hash: OZkX3g/64RL/qajmb4n7ihvruSABNBQqoBzJV+o1YLY=)
3: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: c/FPPyduLUiS4coeluLn4U29NK61HiEUQHYUfa889+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl
rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 14:35:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13703 (0x3587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15
Validity
Not Before: Jul 16 14:35:26 2026 GMT
Not After : Jul 23 14:35:26 2026 GMT
Subject: CN=6a58ec2e-fc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d1:81:e6:e4:fd:ba:12:04:19:79:b5:2e:e6:
78:df:c5:3f:53:b8:34:54:cd:48:6a:df:06:81:40:
22:56:2f:a4:8f:08:1a:dd:47:c2:19:25:12:44:04:
e0:7a:f9:a3:46:c2:00:7b:10:0d:ee:3b:67:80:98:
d9:52:52:f5:89:c4:81:1e:f9:41:05:28:fb:39:6c:
6d:e6:4f:5b:20:17:75:12:62:4f:a2:18:a0:43:f7:
44:4b:f2:d8:2e:42:4b:11:d1:44:cb:27:c1:b7:a0:
ea:f6:12:65:b4:4c:32:f9:4b:54:76:c5:e2:67:06:
04:9c:33:c1:30:15:69:fd:34:5b:5e:1f:ab:cc:46:
88:1d:61:da:20:50:63:8a:c7:d0:e7:a0:d4:2d:67:
52:15:8b:c2:b2:8e:61:a3:3f:23:74:a6:7f:1b:af:
e3:96:b9:27:74:8a:0b:e4:df:51:88:8c:bf:c5:9f:
07:75:1e:f2:75:8f:2e:92:e5:1f:75:99:ea:43:6d:
88:d7:22:74:1b:89:7c:a8:f9:77:6a:81:d2:db:6a:
ce:d3:e4:79:a1:10:c4:d2:74:00:c3:b6:4d:07:27:
ef:60:4d:2f:a5:cf:ca:42:85:4f:1e:a8:34:3f:ea:
e7:3d:e4:1f:0a:b0:e0:da:29:b3:b8:1b:11:3b:1d:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7F:54:E1:ED:FB:D4:3E:43:B5:AF:46:3B:F4:77:9B:D4:7A:D4:7B
X509v3 Authority Key Identifier:
keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:db:0a:bc:97:d6:7a:3a:94:29:aa:07:3d:61:62:fc:3e:5b:
9d:dd:b6:3d:5b:cb:4c:27:00:e8:79:87:c7:06:71:c1:72:07:
da:06:0d:14:0e:5c:f3:46:84:c9:62:7b:43:78:9b:ac:fe:cc:
ff:31:21:07:f4:b9:ae:04:bb:19:c4:78:92:28:a0:c9:1b:8d:
2a:6b:61:6b:c6:a7:b2:64:f6:aa:b1:5e:5e:06:23:0b:15:08:
84:87:8d:66:ba:c8:1f:51:07:95:49:d6:86:a2:e8:e4:8a:8e:
d8:6f:91:41:80:a0:ff:31:4c:5f:ce:b9:32:01:19:7f:21:54:
15:22:81:af:f7:f5:69:b7:9d:ca:33:30:a6:71:50:68:98:41:
97:27:84:14:e0:e9:b8:50:dd:0d:eb:97:36:80:3f:b2:41:a0:
bc:fc:c4:94:67:a9:8c:a9:14:a1:26:2e:d1:30:3d:64:ee:7b:
47:1d:0d:fe:5a:2c:c1:c1:00:19:f9:01:52:f4:43:e8:0a:52:
d3:84:27:eb:de:1a:13:df:c6:e9:fa:ca:f9:9b:ca:c6:e0:da:
e5:b0:e4:45:96:71:71:47:08:6e:70:06:92:62:b9:4f:11:bf:
c8:0e:eb:f6:30:46:9d:37:47:4b:68:f0:16:4f:28:0e:f8:e5:
d4:07:37:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:21:32 2026 by rpki-client