
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft
File: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft (raw, json)
Hash identifier: DhFV+NEy/FBKmx5jKqueB2xC029sT2HTPDeL9Ta/ya8=
Subject key identifier: 37:C4:68:BA:10:2F:AE:66:06:4A:D3:8A:9C:DA:04:82:A2:C2:6F:77
Authority key identifier: DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E
Certificate issuer: /CN=A91DC4E1/serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E
Certificate serial: 1C32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft
Manifest number: 1C09
Signing time: Mon 22 Jun 2026 16:12:10 +0000
Manifest this update: Mon 22 Jun 2026 16:12:09 +0000
Manifest next update: Mon 29 Jun 2026 16:12:09 +0000
Files and hashes: 1: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl (hash: 1ed0NIWzJgGxkFLO+SoBpb+xVNWCiebp6h0vs+wXtfs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl
rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 16:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7218 (0x1c32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC4E1, serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E
Validity
Not Before: Jun 22 16:12:09 2026 GMT
Not After : Jun 29 16:12:09 2026 GMT
Subject: CN=6a395ed9-983e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b6:ff:06:7e:bd:5a:6e:f0:a2:8d:6c:78:fe:
2e:3e:d3:e1:48:e0:41:25:79:92:62:d9:40:8f:3d:
92:54:3a:2d:32:0b:d9:87:d7:0e:fe:2b:21:b4:8a:
9d:b8:a0:1c:d2:38:f6:b3:6c:4a:ad:7d:95:cd:17:
97:a4:83:ad:e4:9c:d2:b6:fe:5f:c7:62:2d:cf:61:
34:ec:33:b6:ea:6c:88:49:4c:d1:f2:81:65:96:7c:
4e:a8:fa:43:aa:a6:af:35:a4:a0:1a:b6:7b:fb:72:
89:50:76:6b:1c:c0:7f:99:4b:22:25:f1:f4:01:d5:
c6:d7:7c:05:2b:db:d3:a6:3e:b7:5d:80:39:d7:bb:
ec:72:74:ea:af:49:81:03:d5:be:b4:d6:90:c1:51:
dc:78:fd:a6:df:be:4c:6d:d0:11:0a:13:40:3d:2f:
a3:71:db:a9:66:f3:bc:01:ef:45:29:aa:a3:4b:30:
17:15:11:2b:b1:1f:79:e7:ed:38:f8:29:d3:de:40:
26:d2:8f:6a:57:4c:a7:81:8d:bf:3d:c3:84:da:f4:
37:6f:e7:52:20:5c:f8:4f:40:c9:cc:7b:ce:2d:4c:
85:1e:62:69:76:be:0d:26:0f:8a:bf:1c:78:89:84:
2d:99:44:53:c2:cf:d3:7c:ac:6d:ac:dd:2f:d4:15:
fd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C4:68:BA:10:2F:AE:66:06:4A:D3:8A:9C:DA:04:82:A2:C2:6F:77
X509v3 Authority Key Identifier:
keyid:DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:74:e6:19:38:a2:14:64:7c:6a:08:8d:db:5a:01:a8:a5:35:
15:a8:fe:2d:0e:b9:f3:4a:3b:9c:78:fb:df:d4:f6:5c:e1:da:
93:8c:db:32:2a:1a:dd:b7:d8:ef:66:e2:0c:e7:5f:b9:a0:49:
fe:d8:66:13:31:3e:83:c2:b5:29:dd:65:c6:fb:d9:83:40:80:
1e:7e:98:57:35:dd:c3:7b:89:a9:5d:42:74:04:0d:8d:29:05:
7a:5c:e4:65:33:2c:5a:15:de:4d:5c:15:31:66:89:6c:f5:db:
be:19:41:8f:2b:f4:86:a2:34:7d:be:ba:61:d8:d6:2c:0d:57:
bf:6f:9b:81:51:42:a3:67:2e:dd:ce:36:b2:16:58:87:06:58:
44:5f:f0:fe:78:1d:5d:63:52:0c:c2:4e:47:bc:ae:f6:dc:d3:
6c:0c:96:62:6f:d3:c3:4c:46:bf:f0:c5:46:72:35:d0:fc:96:
f8:20:64:f8:db:05:a3:0e:b0:63:4c:81:23:58:63:7b:4f:a1:
97:ba:25:16:ac:06:b7:a3:ec:da:b9:18:78:2a:2d:5f:3b:60:
69:71:ef:d4:2b:a1:13:6f:c7:27:04:2c:6c:1d:50:06:92:3f:
28:3a:11:7a:b9:cf:a6:3f:4a:b4:4c:0b:ee:eb:2f:05:80:40:
b1:cf:59:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:27:40 2026 by rpki-client