
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
File: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft (raw, json)
Hash identifier: 98SO9zrOHYhlVwVY/KHhq4lScTCdYljAkepUcyrlmY8=
Subject key identifier: BC:EB:7A:74:3B:F4:F7:68:DF:53:92:D0:5C:2E:F9:EF:52:40:27:76
Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11
Certificate issuer: /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11
Certificate serial: 0B10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
Manifest number: 0B02
Signing time: Mon 22 Jun 2026 19:21:53 +0000
Manifest this update: Mon 22 Jun 2026 19:21:53 +0000
Manifest next update: Mon 29 Jun 2026 19:21:53 +0000
Files and hashes: 1: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl (hash: sCwRSKDF24EyxjhsmGQ7LDe1JI+NpPtmZ3Bbtpwr6TE=)
2: 47772F946C2011EAA5965B3CC4F9AE02.roa (hash: gthIzMyilnDr9O/SMY6/sn4SwcV0DCBMCWSIc0OaLZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl
rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 19:21:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2832 (0xb10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D76BE, serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11
Validity
Not Before: Jun 22 19:21:53 2026 GMT
Not After : Jun 29 19:21:53 2026 GMT
Subject: CN=6a398b51-78c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:13:85:2b:18:2f:b3:00:d5:09:f8:35:da:
d1:1e:61:3e:cd:54:04:0b:53:8d:1c:0e:5d:9b:79:
f0:3f:1e:99:a7:2e:80:c5:7a:4a:bc:67:1a:b5:bc:
30:9f:b0:e7:0b:22:ea:5a:a9:0a:96:ef:fb:e2:13:
ac:1d:73:d3:11:b9:1f:cb:c5:2f:e1:6f:49:f4:bf:
04:08:c3:a4:8d:02:bd:0e:9b:e5:8a:cd:a4:01:96:
bf:3f:e1:65:30:bc:6a:07:a7:16:7d:e5:e3:b9:36:
16:52:5f:d2:f0:57:98:c8:de:cf:3c:ec:6e:32:66:
6c:81:95:12:e6:d8:f3:2c:b4:64:af:df:5d:b4:ab:
26:bb:1f:a6:0c:4f:6d:ba:fd:29:f1:a2:f7:d9:93:
cc:1a:9d:a1:da:9c:e9:24:81:5c:1f:f4:7b:3c:cd:
cb:80:bc:02:d7:f5:c5:7a:e2:c4:52:65:52:db:66:
e5:3b:d6:fb:dd:25:0a:05:f1:e3:da:9c:3a:3a:b9:
08:49:af:d3:bb:58:74:c5:46:7f:ac:36:34:2d:33:
95:13:98:fe:89:65:0b:a2:94:11:e2:81:be:70:ab:
77:77:a3:6a:e6:27:a1:66:72:60:a2:93:b1:10:82:
c0:ec:42:50:d5:16:e7:11:d9:77:77:c8:70:45:ae:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EB:7A:74:3B:F4:F7:68:DF:53:92:D0:5C:2E:F9:EF:52:40:27:76
X509v3 Authority Key Identifier:
keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:78:61:e3:1e:8d:4b:70:0c:be:03:f3:a0:11:1b:bf:5f:1a:
c4:f1:04:7c:26:12:27:16:aa:d8:28:dc:1a:f2:13:bb:ff:67:
1d:aa:bb:75:32:6c:52:d4:ac:21:49:e2:94:ce:23:be:23:5d:
03:5b:8e:a0:df:25:ef:e5:63:8d:91:76:4c:f5:54:fa:c8:61:
6c:5a:78:b9:5d:7d:05:22:e6:db:35:d1:6f:83:7e:02:ff:88:
ee:5b:ff:6b:2f:fb:2b:cb:b2:65:21:f3:dd:21:47:1f:64:3a:
de:75:c2:24:0b:4c:2d:da:14:35:f2:82:7a:80:6f:48:1c:13:
72:b0:5c:79:c6:48:e4:6a:18:43:a3:ee:ad:17:b7:07:b7:6c:
ea:40:59:0b:09:30:fe:50:ae:82:9a:75:d4:e7:ca:e7:ef:29:
1a:0f:05:0d:12:8e:35:ab:6c:5c:da:b7:7a:01:f3:aa:dc:75:
9b:fd:9a:49:78:4a:ce:dd:b5:5c:07:ba:a8:be:fe:eb:58:b3:
c6:0e:c7:8d:71:ca:85:84:73:32:e1:78:1f:af:9a:c4:35:16:
dd:da:de:93:99:41:f4:1d:50:47:b7:e5:8c:63:f3:74:13:33:
b1:29:2b:af:6a:82:71:fc:bf:fc:24:10:2f:94:06:a7:b8:a8:
e3:1f:7c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:40 2026 by rpki-client