
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
File: g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json)
Hash identifier: pJmJUL3Fd2rlZAh081hBV+YCiLhI15PSyIgJDRm7NGU=
Subject key identifier: 8A:78:7A:4F:B2:C1:B3:E2:C1:0E:F1:CC:C0:3C:08:B7:2A:42:30:C4
Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76
Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
Certificate serial: 0239
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
Manifest number: 022B
Signing time: Thu 11 Jun 2026 04:54:47 +0000
Manifest this update: Thu 11 Jun 2026 04:54:47 +0000
Manifest next update: Thu 18 Jun 2026 04:54:47 +0000
Files and hashes: 1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: BRa+63Zh/UmSxScGHywR9UUw1wpsoSeF8y0NjBIAvJo=)
2: 3A7527ECC1F711EF8B510B86C4F9AE02.roa (hash: jH3pUBKK5O5PFYi47D0568PqN1VNWUwbSLEuD5F8T1Q=)
3: 79FC546E326611F08478D72AC4F9AE02.roa (hash: zz0/+1mPK1uuhtSz3L6I5TM++EHZrh4Brc7QpBBGUqY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl
rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 04:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
Validity
Not Before: Jun 11 04:54:47 2026 GMT
Not After : Jun 18 04:54:47 2026 GMT
Subject: CN=6a2a3f97-d0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5b:32:45:af:f2:c5:0a:14:ce:2f:77:79:d4:
4e:28:4a:bc:f2:9f:d4:b2:a5:6a:55:c9:b3:fa:d3:
19:22:cb:55:7a:ee:3f:fb:d4:4c:e2:d5:e9:5d:1b:
92:4e:df:d8:6e:91:8f:84:30:2a:8e:7f:22:08:d2:
e2:e4:4f:a3:d2:d7:f0:b8:14:60:e5:95:0d:13:d6:
60:6d:ff:46:c6:13:0a:ea:54:06:2e:b0:ce:e9:69:
7a:39:ec:53:6e:c5:b0:2c:84:ce:ce:11:c3:c6:08:
43:cc:46:25:5f:e1:e7:5b:1e:01:f9:29:b2:85:4f:
41:ba:34:27:b0:92:74:05:5c:ee:5d:32:b9:76:f7:
78:c7:aa:d1:f8:dc:53:df:76:92:ac:89:0d:8c:f4:
25:9f:96:0d:f8:61:68:95:36:45:47:2b:4e:e8:cb:
22:5f:67:ef:07:65:26:06:09:d7:e9:86:61:de:dc:
b5:c0:50:23:bb:4f:b4:b5:25:15:f9:50:29:81:03:
9d:23:d1:ec:51:a7:68:e0:1b:f6:57:0a:2a:b0:ba:
38:f7:87:fe:44:88:35:d3:aa:3f:9a:13:64:58:b8:
b1:66:b0:4e:bf:01:80:cf:29:cd:4d:8d:f4:a3:a1:
6f:b0:14:e7:37:44:02:34:59:14:03:71:7e:b5:b3:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:78:7A:4F:B2:C1:B3:E2:C1:0E:F1:CC:C0:3C:08:B7:2A:42:30:C4
X509v3 Authority Key Identifier:
keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:3d:9a:4a:91:b5:22:c9:e8:7b:f2:14:96:e7:52:a1:ad:22:
7c:60:3b:cc:cf:ca:52:dd:cc:fb:36:1b:cc:b7:e8:a0:0d:a7:
14:ca:34:5f:3c:b4:1f:06:e4:fc:4b:21:2b:67:30:e2:5c:d8:
f1:9c:30:f9:f4:b4:e8:69:38:21:41:42:39:36:5e:3f:76:0b:
19:bc:00:9b:09:99:49:6c:00:75:32:57:e7:63:e9:a9:28:9f:
de:8e:a4:68:df:60:aa:b6:7a:de:b6:58:40:7b:b4:15:6e:78:
be:72:dc:b2:83:4c:7c:6f:e0:bc:cb:a4:e6:ef:4f:3b:87:ba:
aa:05:b0:cb:ff:e1:93:6a:52:de:6e:7d:8f:93:91:f6:be:0a:
cc:03:3b:73:b6:b2:52:a2:08:62:4d:75:bf:8e:1a:34:bf:a2:
32:dd:39:25:4e:a3:a9:b9:37:4d:96:7c:d1:90:53:12:36:d7:
4d:3a:b9:b1:fb:8c:51:05:12:39:3e:ff:ef:84:69:3e:b2:39:
93:54:cd:30:f9:02:a2:cb:81:8c:ae:ab:3e:f1:24:b7:0a:ca:
65:e2:e0:76:36:e9:e2:02:a2:64:15:27:f5:d8:75:ef:7d:a5:
a4:25:16:0d:e8:66:49:0a:84:57:c1:81:d7:ff:31:8c:ef:73:
52:07:7e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 17:12:28 2026 by rpki-client