
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
File: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft (raw, json)
Hash identifier: uQQ96s3copEmsgJgw2c0PVe6NjShsNHcGnoN1VAGA/Q=
Subject key identifier: AA:05:E3:85:4F:5C:96:C6:00:ED:A5:1A:1B:01:32:0F:DD:1C:AD:9A
Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
Certificate issuer: /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Certificate serial: 1956
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
Manifest number: 194D
Signing time: Tue 02 Jun 2026 15:47:25 +0000
Manifest this update: Tue 02 Jun 2026 15:47:24 +0000
Manifest next update: Tue 09 Jun 2026 15:47:24 +0000
Files and hashes: 1: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl (hash: EKlC0mr6d5zLR5xKK/kwu1Z7ovKPdEsNBAHA6F2xHCo=)
2: AEA7C9C0818911EA81577016C4F9AE02.roa (hash: huSx5kpORQn0tkU4TRAPmVkFRxR4g/qvraibL4XJAo8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6486 (0x1956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Validity
Not Before: Jun 2 15:47:24 2026 GMT
Not After : Jun 9 15:47:24 2026 GMT
Subject: CN=6a1efb0d-a67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:84:d3:17:c9:a7:6c:b9:bd:db:92:e7:11:
0a:5e:84:9f:f4:38:6b:0f:db:93:0a:d0:40:50:68:
64:75:53:25:a6:d3:9a:7a:8e:ee:85:64:46:ef:db:
64:70:4b:ea:cb:fe:d9:19:5c:4d:0b:b0:38:72:9e:
20:5b:24:17:b5:dc:c7:e2:fb:52:d1:31:09:e7:e3:
9d:85:46:a0:4d:a0:aa:59:27:ac:d7:ba:9f:aa:bf:
d0:29:ee:10:a4:0c:39:97:f1:91:e9:f9:1f:ef:c2:
11:24:1e:03:aa:75:e6:f0:b4:eb:81:1a:c0:60:e8:
b0:82:7b:5d:1c:57:71:05:40:13:3f:4d:bb:16:c3:
46:75:6c:28:41:87:bb:ec:db:35:9d:25:fc:80:73:
f1:8a:e7:94:13:1c:4e:b0:7c:47:ff:af:b8:f0:de:
d7:7a:42:4b:e1:77:76:cc:a5:66:75:08:39:bf:c6:
42:c1:ae:5b:75:02:bf:fa:2c:a0:e1:32:18:56:59:
97:a0:66:1f:8b:a4:5f:c4:fa:f3:0a:3b:49:2d:49:
16:e6:01:61:b8:1e:92:3c:34:01:a5:bf:87:2a:2b:
ed:7a:fe:93:aa:3b:cb:a3:37:4c:08:bd:06:5c:3f:
26:6d:1b:89:1a:c0:36:ab:c6:16:7b:01:8c:d0:0a:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:05:E3:85:4F:5C:96:C6:00:ED:A5:1A:1B:01:32:0F:DD:1C:AD:9A
X509v3 Authority Key Identifier:
keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:76:25:72:3c:2a:50:51:67:94:f7:06:37:ef:f1:c5:2c:51:
5b:87:f6:99:fe:c1:45:64:fd:f5:19:f1:c2:86:d9:29:c9:3c:
4d:02:d8:7d:26:3d:e4:7d:80:7a:09:63:34:bc:3e:58:cd:ff:
31:26:e4:8e:03:53:e1:f5:32:43:ed:f3:95:ba:a0:17:57:17:
ee:3d:28:74:55:9b:57:de:f2:f8:be:34:87:a2:f1:bf:c0:d6:
89:5f:bf:29:0d:aa:7e:ff:dd:4e:f7:f9:25:6c:7f:75:36:ae:
cb:b8:84:56:d0:71:b9:ee:2e:19:6f:a1:f0:31:0e:7f:c7:a2:
e7:75:d2:87:cf:5d:a2:3e:19:93:52:16:f8:a1:c5:0c:54:b3:
4f:96:65:2f:61:2c:e4:2e:a1:65:ee:a8:64:9e:fc:e3:5b:ac:
fc:55:73:85:e7:7a:17:2b:b7:a4:48:6f:08:58:89:a4:6d:bd:
44:a6:18:1e:d7:0c:d5:a2:0f:bc:11:59:b1:03:dd:9a:46:b7:
b6:9a:e1:b8:c4:bb:42:a2:57:d9:7a:a9:3c:10:f4:da:4a:2c:
8d:86:d1:ad:37:37:f4:99:8a:be:61:5e:14:44:14:91:fa:55:
f7:05:bb:b3:4b:44:ed:64:2e:b4:7a:96:81:1b:e0:c3:0d:c2:
53:1e:1e:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE2OTExMTAvBgNVBAUTKERDMDRBRjE5OEM5N0YyNTgyRjE1QURERUVFN0M2ODI2
MTFDQURBNTEwHhcNMjYwNjAyMTU0NzI0WhcNMjYwNjA5MTU0NzI0WjAYMRYwFAYD
VQQDEw02YTFlZmIwZC1hNjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt5aE0xfJp2y5vduS5xEKXoSf9DhrD9uTCtBAUGhkdVMlptOaeo7uhWRG79tk
cEvqy/7ZGVxNC7A4cp4gWyQXtdzH4vtS0TEJ5+OdhUagTaCqWSes17qfqr/QKe4Q
pAw5l/GR6fkf78IRJB4DqnXm8LTrgRrAYOiwgntdHFdxBUATP027FsNGdWwoQYe7
7Ns1nSX8gHPxiueUExxOsHxH/6+48N7XekJL4Xd2zKVmdQg5v8ZCwa5bdQK/+iyg
4TIYVlmXoGYfi6RfxPrzCjtJLUkW5gFhuB6SPDQBpb+HKivtev6TqjvLozdMCL0G
XD8mbRuJGsA2q8YWewGM0ApPCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKoF44VP
XJbGAO2lGhsBMg/dHK2aMB8GA1UdIwQYMBaAFNwErxmMl/JYLxWt3u58aCYRytpR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81MEM2OTI5MjlE
MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhsZ3ZGYTNlN254b0poSEsy
bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzNBU3ZHWXlYOGxndkZhM2U3bnhvSmhISzJsRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTY5MS81MEM2OTI5MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhs
Z3ZGYTNlN254b0poSEsybEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyHYlcjwqUFFnlPcGN+/xxSxRW4f2mf7BRWT99RnxwobZKck8TQLYfSY95H2A
egljNLw+WM3/MSbkjgNT4fUyQ+3zlbqgF1cX7j0odFWbV97y+L40h6Lxv8DWiV+/
KQ2qfv/dTvf5JWx/dTauy7iEVtBxue4uGW+h8DEOf8ei53XSh89doj4Zk1IW+KHF
DFSzT5ZlL2Es5C6hZe6oZJ7841us/FVzhed6Fyu3pEhvCFiJpG29RKYYHtcM1aIP
vBFZsQPdmka3tprhuMS7QqJX2XqpPBD02kosjYbRrTc39JmKvmFeFEQUkfpV9wW7
s0tE7WQutHqWgRvgww3CUx4exg==
-----END CERTIFICATE-----
Generated at Tue Jun 2 22:01:43 2026 by rpki-client