
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
File: 3BEw2GFrq8bOCI9fIOaXGamcMrs.mft (raw, json)
Hash identifier: eo4TO2kZDX8KplijMvZ/zlYiTzztaoSDELE0ZL45h8M=
Subject key identifier: 3E:F3:BE:07:83:14:BD:EB:16:3C:5E:94:6F:35:B5:E5:57:B7:1B:BD
Authority key identifier: DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB
Certificate issuer: /CN=A91B732A/serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB
Certificate serial: 0140
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
Manifest number: 0140
Signing time: Wed 19 Aug 2026 06:06:33 +0000
Manifest this update: Wed 19 Aug 2026 06:06:32 +0000
Manifest next update: Wed 26 Aug 2026 06:06:32 +0000
Files and hashes: 1: 3BEw2GFrq8bOCI9fIOaXGamcMrs.crl (hash: JMmNgY67BgFiyplWqgeXEZkonuElX22Qa4VmrRppiVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl
rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B732A, serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB
Validity
Not Before: Aug 19 06:06:32 2026 GMT
Not After : Aug 26 06:06:32 2026 GMT
Subject: CN=6a8547e9-646c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:fc:cb:8b:f5:b2:9c:1d:28:d8:ce:1d:99:
d0:ea:55:53:d9:89:7c:2d:3f:fc:8b:74:43:ac:74:
57:13:34:a2:91:55:4d:57:59:d1:27:54:0e:29:59:
26:c9:20:76:7b:3d:4d:09:c2:0b:96:54:a0:8c:25:
bc:71:80:fd:e6:72:45:93:db:0a:6a:61:47:11:25:
0d:3c:11:d3:5e:92:6a:e2:db:76:29:a2:ed:62:eb:
ae:7f:e5:77:ce:62:e0:5e:45:ae:cb:9e:94:f3:33:
a0:91:cf:a6:c2:ab:86:77:65:92:38:c8:b3:e7:6c:
05:66:70:a6:55:8c:c0:bc:00:79:1e:b8:5b:db:f0:
72:a2:21:86:8f:f8:9a:ae:5d:e2:83:ad:a9:6d:4a:
9a:9e:62:6a:d4:62:f3:6f:31:06:e4:9b:73:ef:c9:
d1:da:b6:40:6a:7e:af:b0:75:58:55:18:00:b9:3b:
94:70:92:62:cd:0e:b9:ed:ed:de:f5:6e:4d:7e:b7:
a7:6f:7c:b0:20:6f:0e:c8:6a:67:62:79:19:db:6a:
10:3e:b5:5b:eb:88:35:02:10:17:f7:e9:f8:17:76:
65:ac:fb:be:eb:ce:f4:e8:c8:60:f4:2a:8b:cb:90:
1e:7c:53:ee:85:98:73:92:c7:0e:3d:c6:0c:84:bf:
1d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F3:BE:07:83:14:BD:EB:16:3C:5E:94:6F:35:B5:E5:57:B7:1B:BD
X509v3 Authority Key Identifier:
keyid:DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:35:45:b0:cc:0c:95:c9:cf:db:4e:dc:de:0a:20:b3:d9:ff:
c0:6f:8d:e4:50:85:5f:76:fc:2b:57:d6:a0:e7:de:2d:fe:ff:
a7:84:1e:16:47:2e:ad:62:77:c6:d2:cd:67:79:80:c4:ab:5f:
42:7c:ca:0c:3d:11:c7:02:e9:d5:73:c2:87:0d:a6:95:4e:48:
3c:5f:c7:7e:0e:0c:71:4a:b6:a2:27:cb:35:80:ca:d9:ab:09:
b1:20:9a:55:22:31:90:2e:a9:c6:58:a5:bf:29:e1:12:2e:87:
d8:a2:20:68:15:ae:55:5a:57:5a:40:d3:ff:db:e7:70:5c:27:
5f:c8:b8:55:92:46:61:4c:1b:65:5b:44:bf:e3:1d:47:40:bc:
cf:1b:5e:52:35:ea:39:0c:c5:1c:45:d1:ed:9b:35:69:64:6e:
a4:b7:29:d9:fd:26:03:48:7c:6d:e7:6a:d7:b8:d4:f2:54:28:
09:c7:aa:92:0d:5e:0f:10:21:85:17:8f:d5:31:53:e0:6e:99:
45:75:b6:39:71:5e:7b:10:bc:84:29:d8:de:c5:ca:29:15:32:
92:a3:de:bf:d5:24:01:fe:a7:02:3f:eb:2a:08:e0:81:ea:ba:
b2:b2:c8:11:63:27:a4:5c:d4:c1:b2:b4:03:72:ae:d6:15:fb:
59:9f:29:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:54 2026 by rpki-client