
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
File: 3oPHbNtE9PeURxkgK-OvqIPTSU0.mft (raw, json)
Hash identifier: yW+uB0j9TKynG8dVeBEanMEYeZ7Mjl+FwbPpyXdn/XM=
Subject key identifier: 99:CF:DC:BC:C1:D7:37:5E:8B:26:15:63:6A:CD:EE:7F:2C:6A:58:3D
Authority key identifier: DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D
Certificate issuer: /CN=A91EAE28/serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
Manifest number: 85
Signing time: Wed 19 Aug 2026 08:24:59 +0000
Manifest this update: Wed 19 Aug 2026 08:24:59 +0000
Manifest next update: Wed 26 Aug 2026 08:24:59 +0000
Files and hashes: 1: 3oPHbNtE9PeURxkgK-OvqIPTSU0.crl (hash: E5O4UqRJquVgm8t9Hr1dayGOD1f8atQ4AVyzv2T58k8=)
2: E9CC4952DBB711F09A595FAD4E641951.roa (hash: wYT2EQO9tWff1SLhMXGfdomgltEhqCKkHfWiewZBsdE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.crl
rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE28, serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D
Validity
Not Before: Aug 19 08:24:59 2026 GMT
Not After : Aug 26 08:24:59 2026 GMT
Subject: CN=6a85685b-027a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:2f:6e:49:89:b7:f0:54:2d:b7:97:c4:fa:
5d:a0:1d:38:df:ca:50:f4:66:90:04:0f:7f:59:3e:
e4:c9:8e:e7:1c:ce:1d:a9:1b:0f:c5:83:55:de:f2:
17:29:77:37:03:31:d6:a0:2e:f9:fd:55:77:cc:47:
b4:e7:d8:7f:f8:3a:5f:90:52:2d:f2:f4:88:1a:fe:
e2:39:83:16:6a:6b:e2:55:10:a3:90:26:f7:5a:d9:
cf:aa:d1:f1:13:b0:17:93:bf:6a:ae:d3:af:c5:8a:
33:b9:76:96:2e:84:ed:e3:55:b4:59:8a:7f:c9:7c:
35:57:04:42:71:be:6c:96:9d:c9:b6:7a:e5:47:f9:
eb:15:5a:36:66:f6:e4:8e:b7:77:3d:d0:0e:1e:1c:
68:be:22:2a:4b:7c:69:4e:5e:7c:54:23:d8:b5:52:
de:c8:47:bc:51:40:c3:fd:7d:22:c6:a5:a6:1a:80:
0c:fd:5b:e6:79:de:0b:81:35:16:a7:ce:04:2a:1d:
9d:00:0f:47:72:93:cf:2a:46:48:f0:7d:13:ae:2e:
e7:57:6e:d5:43:be:52:08:f2:11:9f:9c:55:4f:66:
f9:61:42:53:6c:dc:30:30:7e:f8:1c:a6:b4:d1:90:
be:21:76:f3:b9:a4:64:62:c7:9f:8b:37:60:8f:08:
89:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CF:DC:BC:C1:D7:37:5E:8B:26:15:63:6A:CD:EE:7F:2C:6A:58:3D
X509v3 Authority Key Identifier:
keyid:DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f5:d0:59:b1:10:03:ab:74:fc:56:f2:d6:fa:2c:53:50:4c:
5a:1f:e8:eb:5c:c8:5a:2d:ec:99:f7:ef:d1:9f:03:91:d0:bd:
ee:59:69:b5:27:00:04:3c:cf:27:e2:ab:53:d4:cb:25:3e:33:
16:56:37:f6:57:61:ed:3e:5a:a9:9d:ee:2f:71:1f:3c:26:b0:
be:eb:c1:6b:e6:7f:09:d1:81:21:ad:e7:79:9f:43:03:dd:bc:
9a:eb:34:8a:8b:82:72:b9:a3:78:41:2a:c8:f5:30:ee:28:30:
c6:51:8b:d6:4c:61:b7:b5:45:e2:2a:83:86:10:c9:56:cb:25:
8d:f7:ab:fd:e0:63:54:5e:b8:5e:c2:1f:da:39:22:88:91:fa:
b1:fe:c3:e7:65:db:66:1e:c5:f6:16:97:4f:22:c9:d9:95:63:
69:41:aa:4c:28:18:1c:50:b7:26:f9:27:f9:fc:50:99:f5:c1:
76:d1:dd:6d:45:6d:c2:05:1c:65:a9:01:df:1a:22:7a:f1:81:
25:92:96:bf:a0:9d:37:47:0d:51:6e:38:8a:3b:9b:d7:2c:63:
c4:66:ee:60:8c:44:d2:de:00:30:b6:2e:4a:c7:af:e2:de:60:
24:3c:a4:c9:44:f1:ca:8f:45:86:7a:ef:d3:d2:9e:9f:a8:3b:
ed:ec:1b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:44 2026 by rpki-client