
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft
File: r_h3chh1NYXDiOm4HDkGa9ONtZI.mft (raw, json)
Hash identifier: 7LTAOOnE64uMXqUCTTY1n3j1eHsB9mcG0aLCqBwQUl4=
Subject key identifier: 39:37:24:2E:A3:7E:1D:59:6A:63:59:DB:F9:F9:A3:C9:18:BD:0E:55
Authority key identifier: AF:F8:77:72:18:75:35:85:C3:88:E9:B8:1C:39:06:6B:D3:8D:B5:92
Certificate issuer: /CN=A91CB3FE/serialNumber=AFF8777218753585C388E9B81C39066BD38DB592
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft
Manifest number: ED
Signing time: Wed 19 Aug 2026 07:06:14 +0000
Manifest this update: Wed 19 Aug 2026 07:06:14 +0000
Manifest next update: Wed 26 Aug 2026 07:06:14 +0000
Files and hashes: 1: r_h3chh1NYXDiOm4HDkGa9ONtZI.crl (hash: fkVdvHFOPLv9sP+a2QAfxyghKcgLCBDZMbSp1KFpAow=)
2: AFD61B9C36A311F08A82A258C4F9AE02.roa (hash: d6zMH6FslhCioO9BUQgF2N2RzyG3M8j7DpL3pPa6Rys=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.crl
rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB3FE, serialNumber=AFF8777218753585C388E9B81C39066BD38DB592
Validity
Not Before: Aug 19 07:06:14 2026 GMT
Not After : Aug 26 07:06:14 2026 GMT
Subject: CN=6a8555e6-645e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:76:9c:89:38:3a:ad:75:5a:5b:c2:3a:0f:
c7:62:fe:87:d0:b2:e3:f2:0e:36:54:70:9f:41:e8:
ef:c5:18:28:ab:e9:06:5b:a6:84:f1:cc:07:7e:78:
dc:f7:65:c6:02:c7:5c:74:b4:1a:6e:3b:23:83:45:
d3:34:e9:82:36:f6:ca:cd:54:39:3c:1a:e4:e0:e5:
6f:68:a0:93:74:c7:3a:7f:d7:36:a3:f5:df:38:e2:
f7:04:a4:03:22:11:e2:ab:85:c3:59:86:ea:06:ad:
31:26:6e:c6:ea:f7:b6:ab:17:6c:39:19:cc:aa:17:
75:f3:96:fa:70:e6:02:ce:fe:d2:f2:93:29:15:af:
88:c7:63:6b:d0:55:a5:15:61:d3:d6:aa:0f:de:01:
56:61:53:44:61:41:7a:3d:00:32:0d:20:c6:e7:4b:
44:ea:c2:a4:b5:a7:44:99:c0:20:6a:9f:30:21:d4:
52:b4:c4:52:35:31:f8:40:33:d7:58:00:1f:b0:64:
77:f9:1d:c8:ca:97:cc:88:d0:3e:5c:45:91:4a:c8:
2a:55:f3:97:32:5c:7d:a2:7a:85:6d:b1:0c:cb:0c:
17:2d:56:2a:cd:5b:a0:83:65:5d:a8:e7:81:96:8a:
2f:7e:a8:79:e6:c1:5a:6e:79:73:32:89:a4:55:3f:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:37:24:2E:A3:7E:1D:59:6A:63:59:DB:F9:F9:A3:C9:18:BD:0E:55
X509v3 Authority Key Identifier:
keyid:AF:F8:77:72:18:75:35:85:C3:88:E9:B8:1C:39:06:6B:D3:8D:B5:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5d:e1:08:75:20:49:23:b4:0a:88:e0:af:b9:8a:c0:40:d1:
65:cd:5d:40:36:a0:05:c7:83:bb:87:96:a8:3a:c6:db:73:97:
92:8a:44:fd:e6:5f:a5:bd:05:17:66:61:61:c2:5c:04:e3:c2:
d7:2e:c2:31:fb:0c:f7:57:af:f3:71:d4:8e:2c:4e:6c:00:24:
e9:14:9b:7b:54:50:3d:e3:2a:03:e3:9c:5b:2b:70:36:f0:d9:
9f:f2:98:72:ab:19:0d:d8:4c:88:ec:0a:06:4c:06:07:0b:89:
ed:ab:bf:c2:42:e0:a8:08:23:4e:a7:71:a1:63:0e:c9:d6:c5:
e4:ae:4d:46:f8:4d:bf:24:89:38:01:f5:ac:d3:58:28:50:b8:
87:c4:c8:80:86:df:11:5b:4f:e2:fb:8e:2a:46:25:0e:b4:4d:
e8:dd:e7:4a:91:ba:60:43:17:df:5b:3e:d5:f7:5d:64:60:a3:
77:c9:3a:76:dd:2e:27:20:fd:28:b6:c3:f1:0c:8c:c1:14:bd:
6a:bc:a1:85:7a:18:bc:62:41:f4:d5:b9:f7:0c:07:73:b1:25:
f8:64:a7:dd:92:a5:67:f3:d3:8a:b9:5b:ba:e8:40:08:b4:e5:
a6:ff:6d:02:04:51:72:06:41:ee:45:ac:c2:a5:68:83:49:04:
3a:e9:4b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:05 2026 by rpki-client