
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft
File: 3CH4ZzeyOX3SsmCej7QGhuPI92E.mft (raw, json)
Hash identifier: ThqKI8LY2t6khINR8Tv3+cQOCYSt1U87xXkPxIQMPUU=
Subject key identifier: D8:D2:1F:9C:D1:B6:15:1B:15:3A:CB:9C:CF:90:48:7C:87:66:59:FA
Authority key identifier: DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61
Certificate issuer: /CN=A91C799C/serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761
Certificate serial: 0843
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft
Manifest number: 0839
Signing time: Tue 26 May 2026 21:04:09 +0000
Manifest this update: Tue 26 May 2026 21:04:08 +0000
Manifest next update: Tue 02 Jun 2026 21:04:08 +0000
Files and hashes: 1: 3CH4ZzeyOX3SsmCej7QGhuPI92E.crl (hash: oAJJG9litsTVeJwOwImD365hSNOlCk8xNxMA7PDbH3Q=)
2: 9F5F0EC6135911EBBC97C718C4F9AE02.roa (hash: nGutShTIxEkwTwwnglW9O9WTwfSVkS3vcucRNmR+lNk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl
rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 02 Jun 2026 21:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2115 (0x843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C799C, serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761
Validity
Not Before: May 26 21:04:08 2026 GMT
Not After : Jun 2 21:04:08 2026 GMT
Subject: CN=6a160ac9-58d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:0b:f1:e9:6a:7b:ff:ce:47:27:e1:46:8c:
23:71:17:d4:d2:40:89:d1:56:68:ed:a2:83:2b:46:
5a:db:ba:16:33:88:5c:c0:6b:a9:67:19:ce:45:8f:
c8:b2:b0:49:d0:e0:d8:79:50:8d:c7:a8:59:cb:7f:
cb:73:24:25:5a:1e:fb:3b:de:1f:18:b2:78:2b:12:
97:86:6b:58:55:58:94:22:9d:ad:0d:00:8c:d3:57:
6f:16:58:c4:6e:06:33:5c:a4:d2:b3:fb:f5:24:c1:
d1:a0:0b:ca:34:7a:48:a2:ae:68:90:5b:35:f6:0d:
b9:af:36:81:7f:11:4f:42:ab:26:25:01:8d:9b:47:
e4:db:19:00:1f:4b:52:72:6e:6b:b4:ca:d6:38:34:
c1:7f:1d:ac:e8:d0:b6:8f:90:bf:34:51:19:83:ff:
e7:11:30:11:ad:2f:f7:08:8e:25:42:8d:3d:6e:82:
0c:5d:b9:39:1c:8f:46:5d:e3:f6:91:60:c4:82:1d:
59:db:fa:ee:9a:4c:9b:1d:e7:64:47:3a:0c:6c:c0:
f2:01:4f:12:a2:30:52:cc:d4:66:25:d4:88:e3:c5:
97:35:12:71:65:4f:2b:c8:74:dc:88:b0:f2:eb:d7:
e5:b9:e6:e5:c5:60:58:45:27:cf:4d:8f:11:cf:fb:
4f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D2:1F:9C:D1:B6:15:1B:15:3A:CB:9C:CF:90:48:7C:87:66:59:FA
X509v3 Authority Key Identifier:
keyid:DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:ec:45:7d:5d:f4:da:58:0b:c7:49:46:39:fa:f5:8e:10:88:
15:6d:cc:e4:e2:91:45:fd:80:75:80:37:ab:80:c9:84:7c:8f:
73:5f:45:70:bf:c1:be:0d:14:72:28:a2:d5:23:c7:16:50:f8:
7e:5e:f1:1e:bf:9c:83:72:72:3c:52:ab:a2:c6:d3:b6:5e:c8:
c0:c8:fa:2d:c0:70:51:98:63:3d:fb:5a:e8:7a:97:4e:56:8a:
02:11:6c:5d:96:14:90:b1:d6:38:2e:a1:e9:08:7d:53:71:30:
1f:97:ee:b8:df:0b:2d:00:9c:85:7d:ae:b4:dc:9c:b3:ba:ee:
53:8d:18:a2:ee:e2:52:7d:b4:4d:4a:08:c4:56:b6:61:a6:c3:
28:7f:b1:4c:97:e3:f1:39:54:59:bd:4e:0a:e0:93:1d:85:5e:
87:ff:fc:23:8a:95:a4:57:78:0a:32:b2:a3:62:19:61:7b:07:
70:20:de:14:8a:c6:1a:a8:40:cc:65:e8:d5:de:9a:30:4c:07:
b8:93:cd:e9:72:4f:c0:cf:41:1b:f4:5d:00:f4:37:b5:be:fd:
40:46:55:c0:cd:81:34:77:aa:96:a4:ff:bd:c3:13:1b:f9:37:
59:1b:6c:b9:0b:56:09:33:bc:3a:b6:99:1f:21:d7:31:db:91:
0e:45:ba:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:44:00 2026 by rpki-client