
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
File: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft (raw, json)
Hash identifier: Pqg1Umli9aucG3aDlYPxyUISMuZswZ43ArB9lonHpyM=
Subject key identifier: C5:B1:13:73:D2:6D:34:ED:E6:B5:C9:5A:A1:47:E0:22:77:40:25:60
Authority key identifier: DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6
Certificate issuer: /CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6
Certificate serial: 025A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
Manifest number: 0250
Signing time: Wed 19 Aug 2026 02:56:53 +0000
Manifest this update: Wed 19 Aug 2026 02:56:53 +0000
Manifest next update: Wed 26 Aug 2026 02:56:53 +0000
Files and hashes: 1: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl (hash: j9rqG9oXORSTV9RQZCRt/pmbsg5emwhAPAtTyKFOd0c=)
2: 6F882FB01D5211EE94C36C2FC4F9AE02.roa (hash: NXDoT4OlUYq2pn7T1c4gGP0I8F4wFZ9IHq9xnpLAKD8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl
rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F716F, serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6
Validity
Not Before: Aug 19 02:56:53 2026 GMT
Not After : Aug 26 02:56:53 2026 GMT
Subject: CN=6a851b75-9f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:86:85:10:b3:dd:ee:cd:f8:07:3b:8d:78:
cb:fd:ba:7d:82:bb:ab:2b:a0:07:69:68:45:c2:29:
5c:fa:56:b6:59:1d:88:fb:4b:18:8e:dc:54:c0:f7:
24:ac:e3:4f:25:4f:f6:bb:43:cb:a3:c6:5b:71:c8:
b4:cb:47:1a:fc:a1:f2:67:56:a7:03:1e:a1:20:6a:
a4:03:bf:d3:2d:61:9b:cc:f8:46:63:e5:98:0c:b0:
f0:dd:82:6c:2b:92:59:10:b1:7e:6a:a4:de:b0:c8:
f9:8e:af:82:04:a4:63:1a:62:48:d6:43:8a:39:80:
fb:4f:74:f0:92:0a:7d:f5:97:7c:f3:4b:9b:54:f2:
9b:4e:2e:69:93:16:91:ac:99:06:06:93:2b:69:c0:
b8:50:80:bf:3f:50:dd:96:af:58:6b:c0:ba:c2:80:
45:0f:aa:ce:fa:98:04:89:29:c9:2a:2c:95:fe:78:
b4:60:27:05:93:64:f4:d0:d0:be:93:fb:02:43:5f:
3c:64:45:07:a0:2d:f3:59:35:bb:4e:8d:60:5f:4c:
5c:70:fb:98:f7:8d:73:b9:91:d1:8c:e7:12:98:fc:
b2:cc:32:d4:b6:60:86:06:67:46:4c:43:b3:c2:91:
b9:14:03:b2:5e:30:ee:60:a8:0e:f6:fc:06:78:b9:
e5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B1:13:73:D2:6D:34:ED:E6:B5:C9:5A:A1:47:E0:22:77:40:25:60
X509v3 Authority Key Identifier:
keyid:DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7b:09:e6:ef:58:dc:0e:41:a4:ac:b2:56:15:7e:35:f8:85:
ff:bd:3a:0b:31:48:55:d1:ba:f5:ef:f8:94:e3:af:b7:06:f1:
76:33:87:82:13:77:40:df:99:10:e4:58:cd:76:2a:a5:e1:50:
18:e0:3a:15:72:25:18:22:25:39:ed:a9:71:f4:14:b7:57:3f:
e3:36:7a:1f:c4:01:f5:08:de:8d:53:53:5d:0e:a0:f9:76:86:
f8:96:4e:d8:a4:73:02:62:56:91:22:90:c0:96:f8:0e:5f:e0:
b0:d5:09:8b:6f:b3:47:ff:6d:66:ba:a4:3e:5a:5b:68:58:a1:
dc:cf:bc:6f:61:33:21:e5:71:a1:b8:b3:b2:b8:db:d1:93:aa:
55:45:96:c6:1c:4f:72:9d:96:26:28:49:28:ca:a6:51:76:06:
e0:65:bd:1c:56:8f:08:fd:af:86:04:5e:35:90:86:de:74:49:
f7:21:36:2a:19:77:f3:fc:8f:46:ac:3c:28:78:82:a7:1c:56:
20:04:57:f7:fd:25:15:e0:21:79:eb:84:e6:7d:dd:97:75:a1:
f2:d4:ca:30:9b:47:dc:80:28:cd:35:29:78:6c:ec:e2:e0:ba:
95:03:74:fb:83:ee:9d:5f:d4:b6:19:84:00:c5:18:d2:2c:70:
7b:a4:37:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:04 2026 by rpki-client