
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
File: _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json)
Hash identifier: +/h6+suIGNId4s5y0y+f08wk9m2K6FC1hDvLPInHEKQ=
Subject key identifier: 47:66:7B:A4:F9:E4:B2:DF:12:09:8C:FD:EA:95:6B:A4:2E:45:DD:BE
Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5
Certificate issuer: /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
Certificate serial: 02DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
Manifest number: 02CF
Signing time: Tue 21 Jul 2026 02:19:15 +0000
Manifest this update: Tue 21 Jul 2026 02:19:14 +0000
Manifest next update: Tue 28 Jul 2026 02:19:14 +0000
Files and hashes: 1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: qtmqZg9gdLxDeHKbv/Zb72eRZ54iFsYrWTM1iTP5b6E=)
2: 41669A1AFA7111EFBBC5374BC4F9AE02.roa (hash: olDCuTzSXRa+4yuV9e6OJTjYDQDslUZvSPW/HYSoqc0=)
3: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: rO0tDNcttMplae7nIOvYG1R1bdxFHJg9RWvc/5wp/yQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl
rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 02:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 732 (0x2dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
Validity
Not Before: Jul 21 02:19:14 2026 GMT
Not After : Jul 28 02:19:14 2026 GMT
Subject: CN=6a5ed723-a8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:a1:b9:1b:49:59:39:18:93:e7:8a:27:8f:
56:22:d6:ad:e1:39:c5:b9:d6:c2:0d:2b:f6:5a:d5:
4a:65:9a:ed:1e:b4:47:37:5a:62:34:2c:74:21:12:
0f:a3:b7:19:70:0d:c6:96:b8:de:9a:79:4e:29:70:
a2:31:a3:e2:9c:08:e2:8b:d6:3d:b6:4b:80:17:b7:
fa:8e:e6:59:e2:fa:08:59:23:bb:a3:9f:16:20:97:
dd:f2:f9:6f:54:4f:94:73:ae:80:ae:f9:91:49:f4:
7d:49:f6:ea:8a:8f:01:1d:eb:fd:36:06:b1:d4:b0:
0c:8d:02:25:ca:a3:74:fd:b5:31:32:cf:ea:17:cb:
57:fc:e2:2b:8a:71:4a:58:6d:f6:d8:da:75:49:ea:
ca:64:92:a7:66:db:32:da:8d:b1:b8:d4:84:59:a1:
99:42:41:7a:bd:15:e4:d7:18:ae:a9:10:63:ca:e9:
b8:91:5d:94:35:ca:ed:8f:44:e9:04:33:f1:1e:cd:
5a:b7:62:70:27:3c:35:8b:cb:0a:95:77:74:48:89:
81:62:9a:37:29:9a:a1:d9:77:f2:49:e4:70:21:25:
f6:1b:f6:f5:8b:07:14:62:2a:79:06:af:da:f2:af:
18:4d:c6:08:00:03:3c:51:8c:7d:06:97:e1:c3:cd:
08:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:66:7B:A4:F9:E4:B2:DF:12:09:8C:FD:EA:95:6B:A4:2E:45:DD:BE
X509v3 Authority Key Identifier:
keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3f:8a:b8:2a:aa:af:eb:39:35:51:f0:65:26:54:cd:4a:26:
e0:af:ed:22:b0:37:f5:5f:dd:31:40:d7:98:7e:2d:5d:65:86:
dc:51:1e:93:4d:dd:22:74:ca:0b:54:5a:9d:dc:81:00:fb:94:
2b:48:f6:4e:64:06:9c:84:60:fc:a7:87:d3:21:42:dc:dd:31:
df:1b:ba:d9:f7:51:83:58:43:da:44:d3:e5:84:f5:5f:cd:13:
84:ef:52:d4:7e:a2:de:5f:39:f5:db:29:d6:b5:9a:fb:c2:54:
1d:c3:91:2f:ff:27:e5:b7:c1:14:3f:57:60:75:b9:e9:c6:c0:
49:cf:0a:a6:73:97:05:0c:d3:14:e6:54:b1:ba:9c:3c:91:ed:
c0:fe:77:79:08:68:85:34:38:96:d4:0d:16:75:0f:b2:26:27:
99:95:e5:a6:7f:df:9d:52:64:b0:ad:5f:53:17:fd:75:39:1f:
0d:34:4e:a3:9d:95:9c:1a:15:71:b0:45:ec:b7:fb:72:5e:ec:
4a:7e:8b:e9:0b:1b:6e:0b:48:a9:a2:3a:00:a2:2d:e1:a0:d5:
5d:67:ce:f6:f8:fc:d7:56:1c:42:ca:be:ef:50:7d:8d:b0:d1:
f0:12:ac:7a:f8:28:57:42:e0:d9:83:9a:7c:90:40:85:de:12:
a0:8c:a7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:05:43 2026 by rpki-client