
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
File: I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft (raw, json)
Hash identifier: zpCurO0ODPjY/WGw+WFC/lSUCja7Gv1o7cOISpkDFlA=
Subject key identifier: 16:F4:AC:9D:70:04:9C:42:7C:5B:A6:A7:0F:60:23:FE:5A:FA:47:B9
Authority key identifier: 23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15
Certificate issuer: /CN=A91E22E5/serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
Certificate serial: 0303
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
Manifest number: 02FD
Signing time: Wed 19 Aug 2026 01:32:33 +0000
Manifest this update: Wed 19 Aug 2026 01:32:32 +0000
Manifest next update: Wed 26 Aug 2026 01:32:32 +0000
Files and hashes: 1: I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl (hash: ZfCKjvdbsRZZbmkpZqC+q2RpNIVKQResllx8nGJ6eno=)
2: 623705DA339111ED9249064BC4F9AE02.roa (hash: roernNB+OJNNt1UVzBh6SQSSqUE+e0U1ZxC3K0oXdnw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl
rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 771 (0x303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E22E5, serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
Validity
Not Before: Aug 19 01:32:32 2026 GMT
Not After : Aug 26 01:32:32 2026 GMT
Subject: CN=6a8507b1-3bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:73:94:26:f4:f4:40:13:cf:f9:cf:ff:ac:
e1:76:ce:a6:d6:57:b5:35:7c:a6:56:63:d4:3e:be:
da:d5:44:bd:dc:a7:1f:38:f8:82:b8:68:b1:30:3a:
da:68:c6:fc:a1:b1:43:9b:2b:87:03:ee:a9:55:75:
be:40:76:ac:e4:4f:3d:99:35:da:de:fe:b3:bc:be:
85:21:e4:e7:51:93:85:7b:5b:bd:bc:22:f8:b6:e9:
3d:5b:60:fd:63:4d:70:de:c9:b7:f0:75:27:05:d0:
c5:d6:85:65:40:dc:89:3c:8f:6c:20:27:46:91:93:
22:a9:84:1c:e0:45:85:da:6c:26:c7:14:7b:61:41:
4f:64:5f:c9:9c:aa:c8:9d:cd:81:33:3a:fc:27:fd:
4f:6c:d1:53:e3:d1:82:50:60:cd:9a:6a:e5:e7:6e:
7a:9f:6b:13:91:90:63:1b:f8:67:94:24:e5:53:9e:
30:d2:14:e9:22:ae:37:7a:72:ca:cb:65:f6:17:b5:
99:f1:15:8a:4d:91:61:9d:e6:2c:05:88:85:b4:55:
ab:f0:44:71:33:48:1e:90:16:ee:bc:c9:3c:30:38:
cd:58:9c:30:69:71:7f:da:e0:e8:45:e5:17:ce:08:
5b:9b:7d:4e:f4:9b:23:c1:46:ee:ce:4e:95:ea:d8:
4e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F4:AC:9D:70:04:9C:42:7C:5B:A6:A7:0F:60:23:FE:5A:FA:47:B9
X509v3 Authority Key Identifier:
keyid:23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:20:9c:d0:c5:af:26:60:d1:17:c4:24:d0:f2:e4:50:ff:fd:
f1:3c:96:03:b8:27:02:eb:9a:68:00:ce:98:a5:11:a2:e0:b0:
97:de:8a:4f:b0:d8:ae:0f:f9:a1:26:4f:1c:8a:37:eb:d1:0b:
60:6b:8e:e0:8e:a6:34:38:cd:b1:2e:6b:88:98:c2:08:c4:4f:
01:ee:39:89:87:e0:d4:30:17:a5:99:89:4e:15:72:fd:aa:94:
51:7e:d3:9b:e9:b3:9f:62:4f:59:d7:80:13:73:eb:ee:3a:2c:
7d:69:c6:e4:bc:90:f4:76:a0:26:e7:a7:b1:b2:c1:e7:74:54:
71:ee:e3:ef:a3:1b:32:98:37:92:44:35:59:a2:64:00:b9:fa:
f6:6e:aa:b2:0c:bc:a1:e8:ba:c2:05:31:bc:cc:ec:50:70:aa:
b4:9f:7a:a0:98:cd:4f:ed:0d:41:19:50:ca:56:cd:43:2b:b0:
25:1a:98:ae:ec:ea:f0:40:d1:35:52:a0:ae:6d:40:c0:4b:61:
9d:95:c0:56:eb:62:1a:41:fb:f8:8f:aa:fd:ff:8a:58:1f:4d:
86:96:93:8f:96:33:b3:f0:e4:ad:e3:52:0a:5e:54:84:91:87:
a7:37:3c:3d:f0:5e:a7:bc:34:86:b3:cf:05:c2:b9:54:70:e1:
98:5c:d6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:23 2026 by rpki-client