
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
File: I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft (raw, json)
Hash identifier: 5zqEaJJegXIYcr0rphj544I1Cu6/uYycRspNzUQv0T8=
Subject key identifier: B3:70:02:53:57:B1:0D:C5:38:B9:1A:FF:9E:9D:4A:DD:40:C8:64:F0
Authority key identifier: 23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15
Certificate issuer: /CN=A91E22E5/serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
Certificate serial: 02E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
Manifest number: 02E0
Signing time: Tue 23 Jun 2026 01:22:50 +0000
Manifest this update: Tue 23 Jun 2026 01:22:49 +0000
Manifest next update: Tue 30 Jun 2026 01:22:49 +0000
Files and hashes: 1: I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl (hash: 5Rt1pQTCWCCJykxRay1m+YEQohLdAsvRcT6z9BBUBKg=)
2: 623705DA339111ED9249064BC4F9AE02.roa (hash: roernNB+OJNNt1UVzBh6SQSSqUE+e0U1ZxC3K0oXdnw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl
rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 01:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 742 (0x2e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E22E5, serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
Validity
Not Before: Jun 23 01:22:49 2026 GMT
Not After : Jun 30 01:22:49 2026 GMT
Subject: CN=6a39dfea-1ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:53:30:92:d6:a6:1f:54:7d:da:0d:55:a6:fb:
79:9d:28:c4:3d:71:47:a0:fa:a0:50:ec:96:d0:d6:
aa:a0:5b:f3:08:3f:d9:5b:ad:a9:24:c6:65:32:c8:
4c:da:a3:12:08:33:86:d2:2d:47:84:c1:f3:ea:b0:
c8:25:26:0d:c2:5b:ee:a0:90:3c:b1:1f:0b:43:40:
ad:42:40:53:1a:f1:db:2a:b2:3e:be:a0:89:54:da:
78:6a:11:41:3f:9d:0e:7a:e3:16:c8:8e:01:36:1e:
db:c7:77:03:52:b5:1e:ac:0b:fc:fa:35:4f:6c:e3:
10:6d:3c:c4:89:c2:43:c1:4c:d3:23:ae:cf:85:9c:
bd:ba:b3:56:cd:53:d7:4d:31:02:d2:cc:52:bc:f4:
62:f5:07:f2:95:f1:47:67:6b:35:fc:50:99:0d:53:
5a:a5:df:0d:c0:82:b4:b0:a9:e2:c5:ab:f9:3a:55:
02:88:7f:2f:92:92:2c:dd:b6:8c:4b:27:54:e1:45:
61:03:31:7a:fe:ee:a5:a4:5e:60:67:b6:4c:27:db:
a0:29:96:2d:06:a8:9d:8d:d6:fc:0c:ca:a6:1a:dd:
26:89:12:d9:ac:24:65:28:eb:8d:d8:5d:98:7c:b8:
de:e3:72:57:f6:25:e4:81:54:a0:40:31:02:8c:7d:
5c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:70:02:53:57:B1:0D:C5:38:B9:1A:FF:9E:9D:4A:DD:40:C8:64:F0
X509v3 Authority Key Identifier:
keyid:23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ad:96:1d:96:e3:c3:8c:f2:1a:1c:ea:06:16:5f:95:ae:ee:
50:cc:15:dd:0a:41:0a:3f:8d:b7:e5:4c:4f:70:fa:8e:6c:36:
80:c2:42:93:e7:f2:3a:bf:5e:6f:e5:cc:26:07:ee:48:20:30:
bb:52:bd:db:a0:63:20:44:c3:f5:11:68:fd:c1:07:f8:5b:b4:
9f:e7:d9:f2:d8:7b:bf:6f:02:a1:f2:9f:73:bb:c5:57:72:82:
c2:6a:e9:f3:a3:5f:5b:6e:2e:48:25:e3:cc:d1:ff:55:54:58:
a4:3e:90:68:cd:2f:40:e9:a6:4d:a7:10:e0:e8:dc:5c:46:15:
e3:bd:50:00:a1:ca:c7:5b:c5:b2:9d:db:fb:95:d7:e1:53:e0:
8e:6a:41:50:b2:53:ca:b5:1e:ab:37:18:d5:f9:2c:67:16:68:
ce:a4:d5:5e:96:59:99:17:67:38:2e:39:15:a5:a0:a7:99:96:
dd:09:b9:4d:d1:ee:d1:ac:99:8a:3c:98:ca:bf:cb:69:7a:3b:
99:6e:4d:9c:67:c6:20:cd:10:62:6b:93:86:86:cc:32:98:18:
c1:6c:30:af:3e:1b:30:a3:8f:5f:d5:4b:f8:60:07:e9:04:21:
ed:32:f8:6e:91:44:46:45:36:48:27:12:9f:2b:b7:fe:2d:03:
de:28:e1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:51 2026 by rpki-client