
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft
File: 3rTAuQf6yhxdN3a9SUb0uqjKazA.mft (raw, json)
Hash identifier: dI1PmVT5yqLBZEr6o4dlF1PKmA6LOExHweCEoHNuyyk=
Subject key identifier: E2:A8:99:F9:E7:CD:AB:18:D1:B4:CF:B2:A5:6B:DA:4E:51:D2:0B:F0
Authority key identifier: DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30
Certificate issuer: /CN=A91F3B5F/serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft
Manifest number: E5
Signing time: Tue 09 Jun 2026 06:48:53 +0000
Manifest this update: Tue 09 Jun 2026 06:48:52 +0000
Manifest next update: Tue 16 Jun 2026 06:48:52 +0000
Files and hashes: 1: 3rTAuQf6yhxdN3a9SUb0uqjKazA.crl (hash: a+0DOujW32bSuw2NVWexvmK32lJH9ina5hH7NpNqX7M=)
2: 938098BE5CFE11F18D5CD5949D833773.roa (hash: YvlCWf4B4N82K2Tsi4Q18rzepQF2VZtfQl38u6FADjY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl
rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Jun 2026 06:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B5F, serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30
Validity
Not Before: Jun 9 06:48:52 2026 GMT
Not After : Jun 16 06:48:52 2026 GMT
Subject: CN=6a27b754-6638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:a3:74:32:7b:be:1a:3a:35:37:96:c1:f0:
dd:f1:22:2e:21:40:48:82:93:a2:7e:ed:9c:80:0f:
0e:23:17:57:f3:13:24:ab:d1:d3:ca:1d:40:c0:3a:
eb:8e:5b:f2:7e:b1:70:6a:6d:3f:1a:e4:be:01:70:
1d:13:df:4a:05:b4:11:ee:c9:a9:4f:f5:99:71:b5:
21:0b:7c:1f:b8:8c:9e:08:03:0a:c0:bb:45:e5:87:
db:36:c3:ad:c2:80:d4:4f:03:49:65:31:e9:ed:e7:
08:e6:f3:ee:b6:8a:4d:1d:41:9d:f1:3c:99:b5:51:
ff:33:5c:a6:eb:d3:61:78:18:b6:f1:99:16:08:50:
26:4c:48:ec:44:28:7f:f9:e5:5a:c8:85:f0:0b:ba:
b7:30:08:23:c2:2e:16:3a:d2:0c:f7:ab:d0:81:28:
c7:e3:d9:44:82:c7:ca:06:c9:33:63:fe:11:97:1c:
1f:7e:f3:49:e7:06:2f:2d:84:e7:8a:c8:b1:15:96:
8c:e8:c2:9b:26:65:cb:a6:07:9a:25:0b:68:bc:4f:
cb:8e:e9:10:67:13:cd:bb:94:c6:0f:87:a5:8a:23:
b8:fe:9f:a6:38:66:d3:cf:fd:f1:2b:01:94:43:0b:
f7:f3:3a:5e:9e:a6:97:39:23:d1:6b:58:24:1d:a0:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A8:99:F9:E7:CD:AB:18:D1:B4:CF:B2:A5:6B:DA:4E:51:D2:0B:F0
X509v3 Authority Key Identifier:
keyid:DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:65:20:e0:95:8f:8a:82:51:a2:7c:44:04:eb:07:e1:10:36:
54:42:6f:bc:ad:c0:28:81:8d:a5:8d:4d:0e:05:f1:43:49:38:
01:23:ba:1e:54:17:6e:34:c5:12:b7:2e:63:7c:04:d6:92:2d:
42:eb:1c:b4:a9:c7:5b:75:d7:e1:e4:3d:0d:ea:11:e0:3c:65:
a8:a0:56:94:d6:08:f0:3c:58:f8:d0:60:94:96:c8:6f:37:33:
b4:47:44:50:62:95:76:1b:79:d4:d6:83:5f:06:be:ac:2a:41:
a1:a9:52:29:82:9a:eb:84:88:22:38:e6:93:dd:98:96:ae:16:
78:25:6b:6a:21:a8:7c:52:14:8e:97:7d:8a:e4:ff:d7:55:aa:
61:27:0c:df:5a:4f:dc:2e:7c:15:55:e6:01:b2:ef:1a:4b:1e:
35:a6:c8:a3:8f:2f:72:e0:f5:ea:72:5d:7d:2c:cc:de:98:83:
12:1a:86:99:f2:c8:ae:18:e7:fc:13:e2:bb:be:2b:45:84:a1:
e7:dd:6a:e0:76:24:99:fb:c8:e3:26:ab:d9:43:16:ee:7e:41:
3b:b0:f4:21:86:68:37:8e:45:04:6c:6b:3a:cb:da:89:f8:5c:
06:2d:a2:c3:09:41:c8:a1:57:1c:ce:53:52:81:02:d8:c6:09:
d0:d3:2c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:23:54 2026 by rpki-client