
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft
File: 3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft (raw, json)
Hash identifier: cO1gMGvp57qT5/BvsN1hx05skoyWhosgGwk2eftQqNI=
Subject key identifier: 5C:2C:92:ED:D4:6A:4C:DB:65:6E:AD:3F:58:1B:BB:0D:31:CC:52:A8
Authority key identifier: DC:B8:39:31:9F:D5:2E:AD:9F:CB:97:78:29:84:FD:1F:D4:49:2C:17
Certificate issuer: /CN=A91B569E/serialNumber=DCB839319FD52EAD9FCB97782984FD1FD4492C17
Certificate serial: 02E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft
Manifest number: 02DB
Signing time: Wed 19 Aug 2026 01:40:40 +0000
Manifest this update: Wed 19 Aug 2026 01:40:39 +0000
Manifest next update: Wed 26 Aug 2026 01:40:39 +0000
Files and hashes: 1: 3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl (hash: TGj0H0iveBDv1YI+7js8/D7CAlk1cBfiWuzt0IVSCEo=)
2: 0CDAA8EEE86611EFA5152A24C4F9AE02.roa (hash: Z52mVJSz988Jd9hitOllyu60oqioAYARpSvRGcwNtnE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl
rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:40:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 742 (0x2e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B569E, serialNumber=DCB839319FD52EAD9FCB97782984FD1FD4492C17
Validity
Not Before: Aug 19 01:40:39 2026 GMT
Not After : Aug 26 01:40:39 2026 GMT
Subject: CN=6a850998-9e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:12:f3:e3:8c:75:1a:01:3f:af:30:01:46:
14:91:8f:10:4b:c3:7a:9f:b9:6c:32:80:e3:fb:89:
41:d0:bc:4a:bc:35:59:f7:4a:df:0e:5a:2f:ae:fd:
11:e3:a9:58:3c:8c:b7:a9:86:48:f0:f8:b4:bb:54:
48:69:4f:63:e1:2e:e7:17:81:34:79:9f:82:df:8e:
6c:c3:47:9c:25:7e:6c:87:a1:94:20:03:52:17:52:
13:92:9b:e1:f0:d2:32:8e:9c:8c:0e:10:7c:3c:72:
d4:12:0c:1f:11:9c:22:52:ef:7b:18:3a:87:23:26:
75:67:40:9c:20:f7:05:29:b8:3a:42:c6:60:52:f0:
77:62:06:5c:7c:f1:0a:e4:2c:e1:d8:62:f0:a2:d2:
87:c6:97:77:ca:2f:3b:04:dd:66:cc:b6:ca:44:e7:
8e:40:13:46:1a:61:95:fe:e3:47:f0:3d:16:73:d5:
2a:57:63:07:c9:6c:14:8d:55:86:c9:40:67:dc:13:
68:63:76:34:e3:68:2c:ec:85:7f:1f:67:43:9b:80:
dd:f4:97:49:dd:c0:8c:8d:90:0f:92:c6:57:f9:4f:
14:4b:2d:78:09:61:10:c4:5e:a8:95:08:a3:b7:e2:
19:84:65:f2:00:8e:91:f4:20:8b:d2:9b:3e:32:67:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2C:92:ED:D4:6A:4C:DB:65:6E:AD:3F:58:1B:BB:0D:31:CC:52:A8
X509v3 Authority Key Identifier:
keyid:DC:B8:39:31:9F:D5:2E:AD:9F:CB:97:78:29:84:FD:1F:D4:49:2C:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:9d:a3:da:b9:48:24:4e:97:7b:cc:74:a7:7d:f9:55:e1:04:
1f:f8:94:ba:54:35:74:b3:85:9c:b8:0d:88:34:bc:4e:8c:43:
82:02:6f:cf:f4:f8:cd:f4:25:ee:05:ef:8d:31:32:60:d9:28:
dc:81:15:0d:3c:ce:fe:b0:27:8a:0d:ce:57:23:30:59:7b:d9:
d1:92:b8:77:af:14:9c:40:72:01:a6:55:cc:9f:ea:13:47:19:
ea:de:32:93:62:64:63:9f:77:61:e0:d0:05:42:8f:7f:d7:a6:
eb:03:52:2c:ab:85:5f:9e:b4:d4:c0:c8:34:0b:7f:81:cd:da:
ce:0c:df:fa:32:c4:a9:ac:98:69:66:0f:25:ca:91:24:be:09:
b9:45:59:f4:5b:1f:1e:e7:68:b2:40:31:92:cc:cb:c3:9e:51:
f1:f8:3a:7e:b6:42:b7:1b:05:f0:79:37:a4:07:44:7a:39:f7:
a0:d8:aa:05:42:0f:7d:9c:c4:44:69:71:5a:79:af:7f:21:e1:
7c:7d:72:cb:a6:20:ea:a6:27:92:eb:7e:f0:54:3c:b9:57:b0:
bc:85:75:3f:6b:a4:85:ca:80:9c:d3:ae:3a:83:08:73:ca:a6:
81:b1:ca:9f:0c:87:73:cb:46:57:47:2a:3f:bb:f2:84:b7:52:
e0:26:06:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:15 2026 by rpki-client