
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json)
Hash identifier: q00rDEonm0tgetIAjgacd5zKIgYve7N5HhI+7ZIEADI=
Subject key identifier: D2:9B:63:42:1B:4A:E3:B9:66:7D:5A:10:B3:92:57:8E:B3:FB:8B:5B
Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Certificate serial: 062E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
Manifest number: 05D2
Signing time: Fri 26 Jun 2026 23:34:19 +0000
Manifest this update: Fri 26 Jun 2026 23:34:19 +0000
Manifest next update: Fri 03 Jul 2026 23:34:19 +0000
Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: x8ui/vxrQ3qNFaSGLwOg+O0Z7x9ykbvdhXV1/YzvUvQ=)
2: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: EQOEyE+SLA+wjk3YozLTT2h5jMfekQ3SJQwsf3YqYKQ=)
3: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: p0QtasiXfN8/dE9L47jUX4sIVuhY7a3tPfYaZVlyQMU=)
4: 905F258E24F211EEA0863328C4F9AE02.roa (hash: 7eehH6/H/s1e1PgcHRQXB+ABMkIOWQTpfsozjtSna68=)
5: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: 9T7eAkjvrOk7zwMcNgqYoD07VX3V7BOca4enSrOlqyo=)
6: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: 1GbLqjYWrwO+B9i33IFxJ8aHv1NdPvotqSkvEUnCP88=)
7: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: AgzdJ8YeczC0jH58Lt1PJBql93I4ssj/fkdCRiuIJTQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Jul 2026 23:34:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1582 (0x62e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Validity
Not Before: Jun 26 23:34:19 2026 GMT
Not After : Jul 3 23:34:19 2026 GMT
Subject: CN=6a3f0c7b-8e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3a:1c:7f:93:28:4b:57:92:e4:0c:31:11:2c:
19:32:91:5c:16:bc:67:18:2c:69:42:e9:9b:b5:29:
b6:e3:43:08:cc:cd:81:96:09:f1:25:c4:ea:d0:15:
ec:6b:c1:d7:f4:08:7b:e6:58:7a:fc:ec:33:f3:dc:
f2:41:1d:0a:fe:d8:05:97:46:2c:cb:2b:ec:c0:f0:
d8:89:df:37:35:4d:6a:3c:4d:4d:92:b5:ca:40:f5:
ea:8b:a4:80:3a:7d:7f:c2:a6:7f:99:5f:cd:a9:d4:
da:a4:43:96:eb:5f:98:9f:83:23:25:cc:ad:f5:05:
51:c0:08:ca:db:37:56:62:2a:ed:85:3d:88:87:4b:
0d:92:50:a3:98:3a:90:b9:3f:24:d3:f5:4e:58:2e:
d2:0c:af:73:ef:5f:68:57:74:47:c6:64:50:f4:0e:
59:4e:8f:05:0a:ad:2c:59:1f:94:2d:04:a8:17:bb:
73:01:cc:db:68:a4:76:a9:3f:e9:0b:8c:86:fa:dc:
87:aa:cf:ad:51:3b:e6:3e:0c:0d:96:f1:96:a9:64:
ec:de:ad:dc:64:eb:3f:50:f1:4d:cf:8c:1d:08:c6:
6e:cf:e0:93:66:59:5d:52:37:97:9c:9f:c3:35:3e:
39:94:ce:bf:3f:3f:01:d9:d7:d9:9f:44:5b:bd:4e:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9B:63:42:1B:4A:E3:B9:66:7D:5A:10:B3:92:57:8E:B3:FB:8B:5B
X509v3 Authority Key Identifier:
keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:49:5e:ed:a1:5f:33:af:3f:ef:2e:24:bf:d9:3d:f5:28:d7:
49:ff:32:66:0a:e5:b4:d7:55:a1:92:9b:aa:25:25:75:85:6c:
72:63:57:18:4c:4b:ab:1c:6f:a8:b9:09:9d:70:be:25:60:c4:
2c:94:37:7c:c0:ec:c5:6a:9d:be:db:52:39:db:c0:bf:c3:04:
ca:7c:6c:46:de:08:eb:fd:04:55:e6:9c:e8:2c:d6:1a:37:4a:
a6:be:68:71:fb:49:bc:33:5e:4e:38:34:a8:49:09:7b:5e:5b:
ff:1e:e6:bd:fa:78:86:16:39:9f:1c:20:82:60:e6:9e:c2:d6:
6b:c4:c2:87:2c:d9:8a:cc:00:61:53:da:53:f2:bf:88:5a:b9:
12:72:80:c0:bc:15:2c:5c:26:e7:38:aa:08:39:b0:0c:9e:af:
f2:4c:d8:5f:1f:f6:7b:a9:ad:37:38:84:4f:a0:50:d8:2f:9b:
65:a2:4c:8f:33:e6:2a:65:20:59:a9:5e:4c:60:3f:bf:3b:9f:
75:ab:f0:52:04:4a:8d:9a:1c:9a:4c:ad:be:f4:10:36:95:d1:
7f:29:64:10:04:1e:eb:d9:aa:44:02:d7:7b:27:12:70:0b:c9:
d8:54:cd:2a:99:cd:0f:13:67:6c:ad:e5:54:3d:d5:3e:70:1a:
31:de:90:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1
MUNDQUQ4NTcwHhcNMjYwNjI2MjMzNDE5WhcNMjYwNzAzMjMzNDE5WjAYMRYwFAYD
VQQDEw02YTNmMGM3Yi04ZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlzocf5MoS1eS5AwxESwZMpFcFrxnGCxpQumbtSm240MIzM2BlgnxJcTq0BXs
a8HX9Ah75lh6/Owz89zyQR0K/tgFl0YsyyvswPDYid83NU1qPE1NkrXKQPXqi6SA
On1/wqZ/mV/NqdTapEOW61+Yn4MjJcyt9QVRwAjK2zdWYirthT2Ih0sNklCjmDqQ
uT8k0/VOWC7SDK9z719oV3RHxmRQ9A5ZTo8FCq0sWR+ULQSoF7tzAczbaKR2qT/p
C4yG+tyHqs+tUTvmPgwNlvGWqWTs3q3cZOs/UPFNz4wdCMZuz+CTZlldUjeXnJ/D
NT45lM6/Pz8B2dfZn0RbvU71IQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNKbY0Ib
SuO5Zn1aELOSV46z+4tbMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx
OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi
dV9pemVXSkwtUk5SeksyRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY0le7aFfM68/7y4kv9k99SjXSf8yZgrltNdVoZKbqiUldYVscmNXGExLqxxv
qLkJnXC+JWDELJQ3fMDsxWqdvttSOdvAv8MEynxsRt4I6/0EVeac6CzWGjdKpr5o
cftJvDNeTjg0qEkJe15b/x7mvfp4hhY5nxwggmDmnsLWa8TChyzZiswAYVPaU/K/
iFq5EnKAwLwVLFwm5ziqCDmwDJ6v8kzYXx/2e6mtNziET6BQ2C+bZaJMjzPmKmUg
WaleTGA/vzufdavwUgRKjZocmkytvvQQNpXRfylkEAQe69mqRALXeycScAvJ2FTN
KpnNDxNnbK3lVD3VPnAaMd6QpQ==
-----END CERTIFICATE-----
Generated at Sun Jun 28 23:01:09 2026 by rpki-client