
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
File: r3YSV94snaXzPnHGQZ4meoYt-2I.mft (raw, json)
Hash identifier: jX1edTsULoJlDc+Y3NdEimEoA7BKDeuEBs48JKPvcnQ=
Subject key identifier: 7C:C2:58:F8:7E:D0:2E:00:E4:0B:BA:2C:48:B0:CC:38:10:57:5A:69
Authority key identifier: AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62
Certificate issuer: /CN=A91F4D54/serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62
Certificate serial: F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
Manifest number: F0
Signing time: Thu 21 May 2026 06:28:14 +0000
Manifest this update: Thu 21 May 2026 06:28:14 +0000
Manifest next update: Thu 28 May 2026 06:28:14 +0000
Files and hashes: 1: r3YSV94snaXzPnHGQZ4meoYt-2I.crl (hash: ZW0cPoSb1kRN2sPsZT3htcjsfTDyCc/Wb0sHg157E0A=)
2: 61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa (hash: TBjFZLoAcX8XTz4OXPD8ohPadAtZD+uq/tBStT0J3HQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl
rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4D54, serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62
Validity
Not Before: May 21 06:28:14 2026 GMT
Not After : May 28 06:28:14 2026 GMT
Subject: CN=6a0ea5fe-b3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b4:87:d1:fd:19:ff:6c:ca:dc:a8:9a:de:cb:
08:43:c0:08:10:97:15:5b:f6:ae:eb:8a:54:5c:01:
0e:57:c6:26:73:93:5d:52:da:a2:d6:83:9e:cf:3e:
d7:32:c5:65:cf:3e:eb:21:86:29:51:ef:df:49:86:
d7:ff:5f:11:ae:15:10:e6:5b:08:8e:38:d2:d0:e3:
4d:ab:79:b1:9c:5a:12:a3:81:d5:1a:cc:50:48:05:
09:76:46:ea:8a:1d:7a:9a:db:05:3a:6f:79:83:26:
44:f0:86:39:bb:a7:34:3d:6c:c5:54:1e:00:3e:e4:
e5:be:f4:c8:ce:ff:35:91:f3:d2:3a:ee:eb:e2:5f:
af:25:ab:7e:25:36:77:87:e2:28:ba:ca:29:f0:cd:
53:14:2e:8c:af:73:f7:d3:12:b3:d0:00:81:df:61:
76:d9:59:08:af:73:f7:a7:22:61:4b:5b:7f:1e:a3:
17:19:9a:ae:44:08:0a:e4:dd:81:ca:b1:0b:fe:5e:
e0:70:ed:a9:38:c5:08:45:5a:3c:4a:46:04:39:39:
c9:30:a7:3e:a2:ff:41:7d:ae:d2:31:e7:c9:01:61:
54:72:e4:64:4f:ca:3e:0b:0a:b3:45:af:44:93:ac:
5e:3a:03:52:db:ec:90:cb:91:42:20:7c:58:df:f3:
d2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C2:58:F8:7E:D0:2E:00:E4:0B:BA:2C:48:B0:CC:38:10:57:5A:69
X509v3 Authority Key Identifier:
keyid:AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:01:2b:b8:ae:36:11:41:ff:9e:db:8c:4a:ad:69:23:82:0a:
e9:11:ec:74:14:f0:dd:c0:1b:fa:5a:5d:e7:13:4a:fd:7f:fa:
6c:03:86:e8:2b:f1:82:1e:5a:8d:d2:8e:39:62:2f:bf:71:51:
09:f7:f6:64:2d:9d:d6:7b:19:88:69:be:a0:02:bf:ce:b2:bd:
ec:fd:2d:e0:7f:83:e9:1c:0e:7b:3c:9b:e1:1b:ef:2f:9d:31:
57:c7:ad:e7:26:8b:d5:45:8a:5b:fc:1c:14:6d:99:60:4e:1f:
5c:48:eb:14:bd:ed:a9:09:30:08:ed:21:b8:eb:c7:56:a3:3e:
4a:c7:67:f1:85:75:0e:4d:3f:d9:2f:ac:aa:ea:2d:e5:de:e5:
cd:e9:46:cd:60:aa:7f:53:de:47:76:79:9d:60:77:22:55:cb:
9a:3d:9c:9a:cc:25:14:92:ca:2f:cd:97:5d:bb:91:b4:b9:23:
88:4c:30:e0:4e:54:35:81:43:d3:59:3b:ef:a1:bb:bc:03:fa:
81:32:51:f9:28:d2:ab:28:43:9e:e9:a1:dd:a9:03:29:84:0e:
97:a6:34:ca:ac:f4:02:26:f0:9b:3d:de:c0:14:bf:ed:d0:96:
a9:fd:4e:00:28:e1:b9:de:ae:9a:82:f6:62:e4:29:08:d3:2f:
f7:04:4d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:55 2026 by rpki-client