
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft
File: sE3Hq0gjM4kMKKdlddit5kKcP8s.mft (raw, json)
Hash identifier: vLoc/fPY+VZZ/1NqLb/QedfIhwcgTKnJHEJsCcawQ+k=
Subject key identifier: 3A:19:A5:43:FD:1B:F4:57:32:DE:B6:3C:30:AD:26:A9:91:C8:56:7B
Authority key identifier: B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB
Certificate issuer: /CN=A91FFBAF/serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft
Manifest number: 7F
Signing time: Fri 17 Jul 2026 08:53:51 +0000
Manifest this update: Fri 17 Jul 2026 08:53:50 +0000
Manifest next update: Fri 24 Jul 2026 08:53:50 +0000
Files and hashes: 1: sE3Hq0gjM4kMKKdlddit5kKcP8s.crl (hash: TaGvGJuZiCWy8M5oDY4sMErgulLuU9O7TcDtWR6rp2k=)
2: F29881C82D2811F19656BE60B9833773.roa (hash: j49xZ/pNE+6bd9Li6teEM+llvM2db9Ji2DZmBv8OAyg=)
3: 961A909E2D2811F181F3AA41B9833773.roa (hash: dYzmlzKtC22HQCzv3r68DO5+DJnISkpljTZWCe4Wn+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl
rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:53:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFBAF, serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB
Validity
Not Before: Jul 17 08:53:50 2026 GMT
Not After : Jul 24 08:53:50 2026 GMT
Subject: CN=6a59ed9f-4880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:f1:1d:19:e9:92:fd:09:fc:6e:07:38:91:
d4:e3:5c:43:14:8b:50:6b:ed:5d:e1:c7:62:2f:c1:
da:bd:88:44:1b:1d:60:e5:d6:25:08:a9:fa:0d:61:
a1:d6:a6:af:e1:ab:46:2e:8b:26:50:9d:e8:9c:a1:
cc:f8:20:f9:86:66:a8:26:38:db:75:97:9f:31:31:
ba:c0:c0:20:38:e9:07:50:5e:69:26:f2:c1:38:a5:
ff:ef:17:4a:1b:5b:46:b4:5f:41:ac:b7:f2:b5:65:
fc:6a:e2:f9:e8:d2:16:31:90:5e:15:55:bf:07:95:
a1:12:f0:2d:77:4b:9d:05:ae:a4:b9:b3:51:2e:2f:
4b:50:84:db:39:3a:c1:86:a9:03:88:da:20:7c:0c:
5d:00:8b:03:f5:a1:4f:8b:f5:f4:e7:70:9e:56:54:
a1:71:4c:5c:4a:6e:21:06:a3:6c:81:35:2f:4d:d3:
28:dd:e0:15:49:f2:9d:04:b6:8b:21:f6:01:2c:dd:
a1:0b:55:eb:3f:43:48:4a:23:a1:f8:04:ef:d5:75:
70:06:af:76:57:47:fd:e1:02:b0:ec:7e:c0:83:38:
f5:16:e8:10:ee:48:21:59:c6:ce:33:e8:ea:af:ef:
4a:08:a4:76:47:0e:d6:2c:4e:42:15:90:26:ea:69:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:19:A5:43:FD:1B:F4:57:32:DE:B6:3C:30:AD:26:A9:91:C8:56:7B
X509v3 Authority Key Identifier:
keyid:B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:08:42:3f:45:bd:ea:63:9c:a1:92:b2:ad:76:63:57:68:3a:
09:fa:e6:53:15:d9:6e:f9:20:1d:51:0e:f9:dc:cf:cb:f1:21:
72:6b:ab:c2:0e:1e:5e:36:5e:e1:09:15:5b:eb:de:09:6e:99:
6f:56:b8:88:6e:c4:df:0b:8f:e6:51:3f:47:85:28:a6:83:97:
51:02:b9:76:04:4e:e5:71:54:49:2b:bb:dc:a2:fb:b4:5f:d3:
a2:9f:09:ce:e3:54:24:ac:0e:c7:3e:38:ad:f7:dd:13:af:77:
ca:b4:c3:f4:e7:5a:39:ad:69:17:4b:b7:32:c6:7f:4c:ba:44:
14:8e:81:19:04:46:4f:01:c1:82:bd:af:e9:66:05:28:81:b7:
72:6d:e1:5b:dd:c4:c7:64:8c:49:13:17:1a:5c:41:fd:09:2b:
90:6b:ee:02:dd:4d:3f:0f:5d:48:00:91:a9:38:1d:c3:1d:93:
79:a7:46:80:bd:75:f9:b8:c7:3e:cb:97:11:51:61:85:56:dd:
9f:24:ed:c7:eb:55:c4:cd:2e:35:cd:5e:d0:89:6a:71:ca:c1:
79:2e:9e:5a:5b:75:90:d9:09:a6:1f:72:bf:ac:7f:c8:20:72:
97:cc:0d:de:85:c8:58:e0:90:fc:89:37:bb:40:4a:76:24:b5:
f8:94:57:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkZCQUYxMTAvBgNVBAUTKEIwNERDN0FCNDgyMzMzODkwQzI4QTc2NTc1RDhBREU2
NDI5QzNGQ0IwHhcNMjYwNzE3MDg1MzUwWhcNMjYwNzI0MDg1MzUwWjAYMRYwFAYD
VQQDEw02YTU5ZWQ5Zi00ODgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAudTxHRnpkv0J/G4HOJHU41xDFItQa+1d4cdiL8HavYhEGx1g5dYlCKn6DWGh
1qav4atGLosmUJ3onKHM+CD5hmaoJjjbdZefMTG6wMAgOOkHUF5pJvLBOKX/7xdK
G1tGtF9BrLfytWX8auL56NIWMZBeFVW/B5WhEvAtd0udBa6kubNRLi9LUITbOTrB
hqkDiNogfAxdAIsD9aFPi/X053CeVlShcUxcSm4hBqNsgTUvTdMo3eAVSfKdBLaL
IfYBLN2hC1XrP0NISiOh+ATv1XVwBq92V0f94QKw7H7Agzj1FugQ7kghWcbOM+jq
r+9KCKR2Rw7WLE5CFZAm6mnUGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDoZpUP9
G/RXMt62PDCtJqmRyFZ7MB8GA1UdIwQYMBaAFLBNx6tIIzOJDCinZXXYreZCnD/L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkJBRi82ODJCMzlBNkMz
N0MxMUYwOURDNUE1MzJDNEY5QUUwMi9zRTNIcTBnak00a01LS2RsZGRpdDVrS2NQ
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3NFM0hxMGdqTTRrTUtLZGxkZGl0NWtLY1A4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RkJBRi82ODJCMzlBNkMzN0MxMUYwOURDNUE1MzJDNEY5QUUwMi9zRTNIcTBnak00
a01LS2RsZGRpdDVrS2NQOHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxghCP0W96mOcoZKyrXZjV2g6CfrmUxXZbvkgHVEO+dzPy/Ehcmurwg4eXjZe
4QkVW+veCW6Zb1a4iG7E3wuP5lE/R4UopoOXUQK5dgRO5XFUSSu73KL7tF/Top8J
zuNUJKwOxz44rffdE693yrTD9OdaOa1pF0u3MsZ/TLpEFI6BGQRGTwHBgr2v6WYF
KIG3cm3hW93Ex2SMSRMXGlxB/QkrkGvuAt1NPw9dSACRqTgdwx2TeadGgL11+bjH
PsuXEVFhhVbdnyTtx+tVxM0uNc1e0IlqccrBeS6eWlt1kNkJph9yv6x/yCByl8wN
3oXIWOCQ/Ik3u0BKdiS1+JRX0g==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:13 2026 by rpki-client