
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft
File: 3rTAuQf6yhxdN3a9SUb0uqjKazA.mft (raw, json)
Hash identifier: GR0zOkrM8zVUkqmFCyF5fq/5JUpupMkyabfG0cY6cb0=
Subject key identifier: 6E:87:CE:DB:77:E8:19:25:96:90:26:D9:C0:E8:AD:D7:99:6F:FC:99
Authority key identifier: DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30
Certificate issuer: /CN=A91F3B5F/serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft
Manifest number: E2
Signing time: Tue 02 Jun 2026 07:31:06 +0000
Manifest this update: Tue 02 Jun 2026 07:31:05 +0000
Manifest next update: Tue 09 Jun 2026 07:31:05 +0000
Files and hashes: 1: 3rTAuQf6yhxdN3a9SUb0uqjKazA.crl (hash: CX0o4wkawFRU5yO14NzBIBzogfAhxq1dD5f5qi2LL+4=)
2: 938098BE5CFE11F18D5CD5949D833773.roa (hash: YvlCWf4B4N82K2Tsi4Q18rzepQF2VZtfQl38u6FADjY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl
rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 07:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B5F, serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30
Validity
Not Before: Jun 2 07:31:05 2026 GMT
Not After : Jun 9 07:31:05 2026 GMT
Subject: CN=6a1e86ba-8e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:33:23:71:8c:fb:43:e1:2c:1f:61:a2:02:
fe:1b:68:9a:d3:91:b1:3e:8d:83:96:8e:8d:80:dc:
10:0d:82:d2:9b:ba:20:98:33:1c:4e:d3:92:6f:79:
a0:ad:bf:50:cc:78:8c:93:1a:1e:3c:18:d0:a1:93:
a1:5d:4c:72:62:b0:d2:d5:fe:b7:88:e3:ee:30:69:
f4:6f:b4:48:fd:0f:d2:7c:63:5f:84:2e:d0:d1:40:
95:25:67:ec:32:c5:ad:09:67:8d:9c:b5:88:c5:77:
6c:f4:41:67:e1:63:c0:76:e4:af:75:93:66:9b:0b:
e5:7b:5a:6c:6c:8e:d7:bf:ab:f3:1b:ed:6c:ce:f9:
53:79:2b:9a:52:f5:5b:fa:1f:4d:70:2e:ca:21:a8:
11:e7:3d:77:e8:f7:fb:b9:e1:78:2f:74:a1:95:b5:
c5:63:20:41:cc:89:7a:0b:bd:3e:83:e4:b8:ac:95:
b4:98:a6:b9:d1:13:65:c6:84:c9:5c:aa:14:a0:fc:
05:6c:e3:a0:ff:2a:14:99:87:fb:a6:bb:cf:9e:62:
dd:cc:c2:00:10:4c:cc:c9:5b:88:3d:fa:5d:f1:92:
9e:17:43:46:7c:f2:44:e2:ec:4b:8f:f2:a6:b0:e2:
3b:d1:ea:5e:5d:2f:1f:c2:3b:14:fe:17:a5:30:91:
69:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:87:CE:DB:77:E8:19:25:96:90:26:D9:C0:E8:AD:D7:99:6F:FC:99
X509v3 Authority Key Identifier:
keyid:DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:57:45:87:e3:d5:ec:67:cb:b0:0f:b2:7f:04:a4:4a:50:fa:
98:02:ce:8c:dd:d0:91:3f:59:62:4d:e2:23:25:b6:90:d9:04:
3c:e9:d5:2a:13:44:62:61:5e:4a:e6:ed:17:04:38:92:14:45:
89:7f:58:e7:63:1a:8c:5b:98:43:58:00:17:64:6c:3f:b3:b2:
b6:e1:e9:30:63:c9:b4:2f:47:d8:f5:42:f7:24:7f:93:45:ff:
aa:97:41:45:23:18:fc:4f:f2:ef:e8:87:65:23:49:15:64:77:
53:ab:68:b8:12:f1:40:9f:32:83:87:94:51:3a:f3:b8:2c:81:
0c:bb:3d:e7:3a:45:06:49:c3:bd:77:40:6f:f1:da:86:d3:e5:
a2:43:11:05:c7:6e:39:ac:4a:3a:52:d5:a4:14:d1:12:43:96:
af:b7:5d:3e:79:d8:56:b6:2c:f7:6f:01:12:e2:73:bb:e2:04:
c7:5b:67:c7:5e:a3:3f:e9:97:4f:a1:cb:25:2a:b7:c1:54:61:
24:56:12:9b:9d:f0:46:d1:9c:f7:dc:3b:82:b9:c9:01:c7:33:
2a:d4:0e:0b:fc:37:2d:4d:ab:0b:13:ed:3a:42:5a:e4:2e:2d:
c0:16:c7:70:67:2e:bc:f5:95:2c:54:53:36:49:6c:2d:ee:10:
c6:74:e0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:58 2026 by rpki-client