
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft
File: 3UAamS3TKfk027INWAtMpyeQ37E.mft (raw, json)
Hash identifier: zTY2Bhnhymv9kSjtjyK9GDwjgjdvy+5CuhElhTNJSWQ=
Subject key identifier: 4C:D0:98:37:C6:2D:8E:D6:FC:6E:BF:51:37:49:9A:4E:09:A4:EB:A0
Authority key identifier: DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1
Certificate issuer: /CN=A91EAB64/serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1
Certificate serial: 0487
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft
Manifest number: 06E8
Signing time: Tue 23 Jun 2026 00:06:54 +0000
Manifest this update: Tue 23 Jun 2026 00:06:53 +0000
Manifest next update: Tue 30 Jun 2026 00:06:53 +0000
Files and hashes: 1: 3UAamS3TKfk027INWAtMpyeQ37E.crl (hash: JgdKlNXpa9ppIycWPuhDqsSNQMsByMWhieHsBZdBtbw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl
rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 00:06:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1159 (0x487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAB64, serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1
Validity
Not Before: Jun 23 00:06:53 2026 GMT
Not After : Jun 30 00:06:53 2026 GMT
Subject: CN=6a39ce1e-2e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7d:0f:58:1f:e6:d5:28:16:d7:0d:d7:43:53:
ac:1a:27:6c:6f:09:da:0d:97:cb:46:2b:84:34:61:
20:f0:0e:0d:99:e0:32:ae:61:e8:7b:16:4b:66:19:
8a:4b:4f:a2:2f:21:72:e6:59:64:35:fc:5c:c7:2f:
ae:19:25:e6:d9:14:4c:1e:bc:f7:3a:5d:ea:80:ea:
c7:23:08:41:f5:ff:3b:6e:36:6e:b0:9e:f7:26:5d:
c8:36:a0:8e:22:d1:55:1e:79:55:b3:f7:3c:4f:dc:
d1:46:3d:9f:86:f5:4b:00:23:e3:ab:0d:d0:62:2d:
b0:e4:be:0a:54:d4:eb:fe:5c:ef:d3:c3:11:c4:c9:
d3:35:a2:38:45:2c:82:19:71:cf:10:b8:1c:6a:cf:
28:63:97:12:f0:8f:39:f5:b4:87:67:90:59:e1:21:
de:b2:8e:c6:c7:73:d5:38:ac:45:b4:01:95:68:cb:
56:b2:3b:b9:c9:56:fa:62:cc:a7:9b:91:6c:76:c7:
8f:25:2d:55:96:3b:c1:c6:d4:82:09:84:5c:bd:f8:
e6:b1:b2:77:99:a9:c2:01:9c:27:ef:8f:fe:e1:38:
3d:70:5f:f0:99:4f:aa:2b:4b:47:13:f8:aa:a5:32:
7e:84:cf:86:ed:d7:de:d3:de:bd:2b:6c:5e:20:6a:
ab:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D0:98:37:C6:2D:8E:D6:FC:6E:BF:51:37:49:9A:4E:09:A4:EB:A0
X509v3 Authority Key Identifier:
keyid:DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e5:49:82:ef:66:a4:74:ad:21:2c:c0:3e:18:df:7e:78:1c:cf:
fc:90:3c:66:54:61:f6:c6:ee:98:1e:1e:43:1c:75:64:93:fa:
78:52:af:4d:a2:65:01:d3:60:71:4e:00:fd:b0:de:62:fc:b0:
5d:ac:86:94:29:18:6d:87:a1:9d:61:3c:ab:92:bc:c6:db:7c:
89:c2:f8:86:81:55:d1:92:79:be:99:57:85:7e:97:5d:e5:59:
a3:dd:ad:53:2c:2e:f2:f7:82:0f:42:b3:12:02:2e:e3:46:37:
f0:b4:6d:97:7c:38:21:de:57:1e:a3:98:f1:d0:dc:57:c1:42:
ec:a3:52:98:ae:0a:73:d5:40:33:98:4f:06:1d:5a:14:c0:4b:
66:92:6a:9b:cc:e2:07:d9:ae:7a:d6:71:d7:5d:c2:ec:b5:5b:
93:39:7a:ff:53:e5:ed:25:1d:91:6e:ae:ba:7b:cd:45:0d:af:
95:ed:4a:5e:ce:af:36:b4:26:67:f0:4b:43:ff:53:b2:c7:80:
10:49:9d:52:fb:f2:ad:83:29:30:fa:4c:45:8a:2c:f4:36:1c:
a6:9f:e1:d8:79:77:18:0a:e0:e9:ec:bc:a0:bf:55:9c:69:ef:
15:0a:fd:ab:66:d8:7a:05:cb:71:6b:bc:cd:81:35:da:ff:57:
49:95:8b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:30 2026 by rpki-client