
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
File: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft (raw, json)
Hash identifier: W6eQ1D0s8fxahi1cH+g5kct14FHYpbft4WtkizSki78=
Subject key identifier: 99:DB:65:3B:50:61:8E:59:21:A2:64:C7:09:93:4F:6F:15:06:C0:B6
Authority key identifier: DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6
Certificate issuer: /CN=A91CDFFB/serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
Certificate serial: 08FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
Manifest number: 08F2
Signing time: Sat 04 Jul 2026 20:28:17 +0000
Manifest this update: Sat 04 Jul 2026 20:28:16 +0000
Manifest next update: Sat 11 Jul 2026 20:28:16 +0000
Files and hashes: 1: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl (hash: iEeMPgzWnNzN6E+WAIPP43nOewQD1T3G+bpHfTAiuBY=)
2: CA42E5689FA411EBBC1FFB40C4F9AE02.roa (hash: 3Ec92baJsmBFXlv6Q2B/yYGvWMA45NR4PIY2EvsfluM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl
rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 20:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2303 (0x8ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDFFB, serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
Validity
Not Before: Jul 4 20:28:16 2026 GMT
Not After : Jul 11 20:28:16 2026 GMT
Subject: CN=6a496ce0-2ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:a9:9a:51:b7:28:9e:ad:44:8c:d0:1c:fc:
50:a2:df:c0:eb:e1:f2:d2:0b:7c:e4:93:62:b3:29:
6d:dc:ea:17:00:5d:ed:dd:aa:87:15:6b:e3:4f:e7:
a3:43:0b:32:4c:12:f8:35:02:df:c5:7e:72:16:a4:
95:cd:00:71:c5:0a:21:23:44:06:db:50:c8:8c:4f:
14:54:d1:c6:54:53:c4:f4:9d:ba:64:bd:94:37:70:
1c:83:45:db:d6:f8:24:d3:a0:03:aa:24:38:53:0e:
c4:16:04:5e:bf:8b:08:53:4b:e6:92:d9:b5:4e:35:
d2:e3:41:4f:cf:06:45:4e:6a:33:bd:2b:bf:7e:c4:
e4:e4:97:85:d2:9c:48:6b:09:3a:7d:5c:d7:85:4c:
33:0f:de:18:cc:bf:0d:ca:74:f7:5f:7d:cf:91:ac:
0c:5e:f7:a0:1b:af:4f:cf:17:ab:26:72:c4:22:c9:
df:e6:55:74:da:28:32:ce:23:d6:e7:d7:61:66:ab:
90:be:13:bb:60:b5:21:54:64:a4:1a:2c:49:9d:dc:
3d:42:26:cc:d8:3f:cb:e5:d2:5f:57:42:de:74:86:
26:f1:35:1a:f5:23:0c:7d:f0:a8:ab:ea:79:d1:bc:
1e:98:64:3a:c9:2a:0a:8e:5e:89:cf:20:d5:50:05:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DB:65:3B:50:61:8E:59:21:A2:64:C7:09:93:4F:6F:15:06:C0:B6
X509v3 Authority Key Identifier:
keyid:DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:60:e4:65:0e:41:73:f1:d0:eb:bd:45:d9:2a:1c:d2:77:e8:
54:a8:c0:cb:08:86:b2:74:75:b2:3a:9b:1d:dc:cb:9b:7b:99:
5c:82:33:90:06:29:85:b5:fa:96:24:23:73:da:3b:3f:7c:60:
a1:5e:32:5c:a5:46:79:2e:cc:cc:fa:7f:65:a5:cb:ce:76:d1:
35:9f:96:80:cc:d6:4c:a6:9f:bc:eb:35:69:ac:f6:aa:46:b5:
a7:67:63:30:ce:6a:92:47:d4:36:17:1e:bf:8d:46:79:67:fa:
e9:57:f6:b3:16:eb:45:46:b6:38:f0:e3:81:69:28:1c:b0:b0:
00:55:cb:3b:35:45:57:e5:00:1f:36:9c:2b:e5:fd:5c:9c:69:
19:77:38:31:92:b9:42:dc:47:4f:9c:e9:31:74:bf:02:70:e7:
e4:66:3a:07:6b:e4:83:09:5e:55:fa:42:16:f6:5a:a5:8e:af:
52:24:e8:ce:95:ec:31:f8:97:2c:23:ab:75:90:86:be:16:23:
09:39:b7:72:7b:f9:c4:da:19:1f:f2:1f:cb:bb:55:4e:ce:3b:
5f:5b:58:ff:34:70:e5:be:75:d3:c1:12:22:d0:83:39:6f:33:
c7:2e:fb:18:10:25:e7:23:7c:ea:34:fa:dc:35:e7:a6:61:55:
76:f6:44:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:39:39 2026 by rpki-client