
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
File: gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft (raw, json)
Hash identifier: J3Vi0+zjqekrCY3FLodRZ4449bEGp1n6zOZmHmGs9w0=
Subject key identifier: A5:E1:9A:5A:3B:60:F9:FC:8F:D1:E5:0E:F0:D8:29:7F:FD:2E:A5:59
Authority key identifier: 81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
Certificate issuer: /CN=A91E6BEF/serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Certificate serial: 0E81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
Manifest number: 0E75
Signing time: Tue 18 Aug 2026 17:57:35 +0000
Manifest this update: Tue 18 Aug 2026 17:57:35 +0000
Manifest next update: Tue 25 Aug 2026 17:57:35 +0000
Files and hashes: 1: gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl (hash: 8bUuy47wwwoQ6pkvYMCxGkrIWNh49hqwg2eN1iYPQOU=)
2: FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa (hash: DD1ADaREQj4FZ7nnow63JObODw7KCChH9CO7F5RCGA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3713 (0xe81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6BEF, serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Validity
Not Before: Aug 18 17:57:35 2026 GMT
Not After : Aug 25 17:57:35 2026 GMT
Subject: CN=6a849d0f-3129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:e6:01:5c:c5:5a:bf:db:6f:77:2d:2b:9e:
69:47:08:fe:78:cf:ac:4c:5f:93:ef:84:8c:26:55:
af:e0:d8:fd:62:6c:e0:51:43:9e:19:f1:97:d3:78:
4c:01:ca:8f:1e:9d:18:6d:83:1b:a7:c6:72:b6:85:
e9:a3:90:43:99:1c:1c:4b:e5:c4:83:3b:1f:85:a7:
58:1d:8d:94:e2:03:a6:f4:64:56:8f:25:8b:15:5a:
24:2a:c3:46:c5:b0:42:13:57:2e:29:9d:5b:ef:34:
41:85:a2:f9:bd:43:eb:3c:ae:4c:f3:ff:99:6c:51:
72:78:f7:eb:36:09:8b:0e:cc:00:72:cd:01:f2:92:
5d:76:b3:10:6c:a5:cd:1c:79:de:16:98:d4:39:a7:
ed:98:f0:f9:ab:74:3a:27:92:13:07:d3:12:a3:5c:
3e:c0:5a:20:8e:6a:c2:2e:66:7f:01:22:4e:ff:19:
02:3b:fb:4e:81:1b:79:4f:4f:36:80:ec:72:18:ad:
3e:c6:b1:a4:26:ee:fe:cb:91:fe:18:dc:c1:50:25:
6f:cd:82:32:fc:5b:65:d7:17:f5:32:ae:91:2d:77:
81:34:89:d1:ed:65:0a:96:de:54:2a:54:19:71:6f:
96:7b:35:cf:a3:0b:d3:ef:a2:44:e9:c2:fa:cd:2c:
91:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E1:9A:5A:3B:60:F9:FC:8F:D1:E5:0E:F0:D8:29:7F:FD:2E:A5:59
X509v3 Authority Key Identifier:
keyid:81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:ed:52:ca:b4:32:ed:5b:3e:6d:6a:5f:e8:da:c2:0a:28:57:
bc:9c:32:7f:1c:b0:4f:a3:7c:93:61:0d:cc:11:d5:d3:23:99:
03:75:05:58:bf:fe:f1:95:3e:ad:78:2c:7e:13:26:71:06:85:
a9:b8:79:cb:1e:3a:9f:3d:bb:93:8a:bb:38:ad:1c:8d:db:35:
04:67:26:48:37:9f:5a:6a:d5:b8:55:fe:8f:4c:8b:c4:dd:dd:
68:8e:3c:76:66:a4:6e:4a:ad:cd:a4:f0:5a:56:d8:1b:e5:31:
5c:a5:26:57:0d:49:b2:5f:1d:7c:ad:2b:e2:57:5f:3c:2c:ea:
45:34:f0:f3:2f:a0:dd:fa:03:27:8c:07:3e:06:d7:1c:85:fc:
88:7e:6d:95:1b:e5:68:b2:b9:90:6b:57:d8:62:7d:53:16:a9:
9e:3e:86:6a:ff:a5:30:a4:25:26:2a:f5:f7:7e:83:22:9d:59:
6d:c0:52:34:43:d2:b4:9f:24:1b:fc:81:ca:02:39:2c:26:c9:
a6:2e:ad:16:d5:c9:b0:7e:a3:46:18:65:98:03:92:7f:6b:8f:
52:d4:da:18:b0:9e:32:6b:b8:b7:af:ec:f9:95:df:6f:41:2e:
00:0a:f8:8d:db:47:76:dd:cf:63:3e:b0:4e:e3:b8:7e:b2:05:
be:cb:74:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:04:35 2026 by rpki-client