
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
File: F3JfretEo_qLMf_wpjy8UVWpB9g.mft (raw, json)
Hash identifier: 1pSkdnUtpqYtrMEbK5AQJO5WMmiUUV+cJbtYySrE8iA=
Subject key identifier: 47:E8:99:A6:8C:21:34:23:01:04:84:5D:B7:DD:BE:F0:56:09:1D:10
Authority key identifier: 17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8
Certificate issuer: /CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
Certificate serial: 085D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
Manifest number: 0855
Signing time: Mon 22 Jun 2026 20:55:28 +0000
Manifest this update: Mon 22 Jun 2026 20:55:27 +0000
Manifest next update: Mon 29 Jun 2026 20:55:27 +0000
Files and hashes: 1: F3JfretEo_qLMf_wpjy8UVWpB9g.crl (hash: NsHnpPPAM54SAZzb809LbpdVI5+tOrMxlXvwqbiMIyQ=)
2: C6591C620DFD11EBAD63A21CC4F9AE02.roa (hash: HLXn0y5saMGZHdBI1Bh2ImWIk/Xfj9Kl57imAxrALWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl
rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 20:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2141 (0x85d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0049, serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
Validity
Not Before: Jun 22 20:55:27 2026 GMT
Not After : Jun 29 20:55:27 2026 GMT
Subject: CN=6a39a140-32a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3c:3e:d9:73:24:d9:37:bb:09:0d:ec:89:2d:
66:0a:9f:a0:b8:d1:2e:19:0d:03:d4:99:a1:85:c1:
d0:fc:c8:f2:c7:a0:d7:7a:46:c7:47:cc:d3:5b:a8:
8a:52:e7:4f:bb:12:59:c9:51:b8:4a:df:d5:cb:14:
5d:5b:c3:47:0c:7d:91:3a:20:d8:d1:9b:ea:fd:81:
e2:a6:be:fa:3b:94:d3:b0:8e:d4:cf:82:e3:29:9a:
37:6e:7b:08:99:a4:9c:60:02:b0:32:7c:f7:4a:c0:
19:08:78:38:da:92:9d:07:93:6e:c2:72:c6:b9:d5:
4f:72:b8:82:89:04:5a:82:54:b6:9f:13:da:97:73:
f7:18:0b:af:8a:2a:b6:ae:83:c7:31:2a:71:b7:81:
01:1f:a4:b3:dc:46:87:13:a5:1c:2c:04:9b:61:02:
c4:9f:06:ce:9f:f5:05:00:f7:38:e5:20:75:2a:9d:
1f:c9:12:14:02:46:07:9b:56:14:8a:0b:67:b1:65:
de:9e:ff:78:98:9b:4b:ac:a4:dc:aa:bd:47:a9:16:
30:20:c5:f7:74:8d:c0:b6:1e:31:71:aa:48:85:aa:
dd:76:6b:f0:4e:7f:22:9a:91:af:8f:6f:b3:14:69:
73:1f:6d:f9:41:91:bf:2e:69:ea:0d:7d:06:b4:d9:
b5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E8:99:A6:8C:21:34:23:01:04:84:5D:B7:DD:BE:F0:56:09:1D:10
X509v3 Authority Key Identifier:
keyid:17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:74:80:76:19:4a:1f:07:d5:36:12:06:32:c8:49:65:07:16:
4e:89:4f:c3:ff:7d:e4:fd:a4:67:9a:18:7a:a9:71:5b:41:ad:
1e:5a:9b:95:ae:e7:56:b4:af:8c:13:fc:e8:2e:81:64:b3:16:
01:61:6b:de:22:eb:25:c1:68:04:2a:45:cd:61:8a:55:bc:44:
4d:5f:c1:fe:7f:55:60:52:79:fb:75:9e:bb:af:93:f3:64:48:
1c:6d:42:dc:f3:f1:24:3c:18:fd:a2:e9:c5:69:a4:35:4c:b7:
32:2a:6e:42:8d:43:ef:bb:88:ba:7c:e1:80:7f:19:df:90:c4:
dc:4d:28:e9:e0:7f:87:d3:ba:15:34:d4:26:0e:86:60:df:5e:
ad:d3:48:24:0d:e5:bd:fd:83:e9:03:21:3d:ba:7a:ee:37:a2:
e5:54:08:fb:cd:91:42:56:8f:dc:6f:0d:7a:be:95:c5:e3:b6:
73:c1:31:2d:37:67:aa:70:c6:da:82:9d:13:74:47:52:d8:99:
f7:f4:8c:ed:3e:1b:95:dd:78:e0:73:5d:4b:11:51:12:d2:41:
07:58:03:a6:63:55:e2:e7:08:3d:e5:a0:40:76:5a:9b:c4:10:
de:8a:08:8c:36:35:84:32:d9:b7:ba:8c:1f:f2:3a:b7:6a:52:
54:c2:c0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:20:55 2026 by rpki-client