
$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
File: 3JAYFdyRlzyvoZqLV2-GjphBPjk.mft (raw, json)
Hash identifier: L7zIf6LHaSrTZVC4eqsCVxfXGozs2j89TebIPdcCohk=
Subject key identifier: A8:49:55:1B:2D:C0:6D:66:A6:8E:FA:E4:BF:84:C4:D1:46:D2:80:15
Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39
Certificate issuer: /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39
Certificate serial: 1C96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
Manifest number: 1C94
Signing time: Fri 12 Jun 2026 16:08:23 +0000
Manifest this update: Fri 12 Jun 2026 16:08:23 +0000
Manifest next update: Fri 19 Jun 2026 16:08:23 +0000
Files and hashes: 1: 3JAYFdyRlzyvoZqLV2-GjphBPjk.crl (hash: BYRrBkv89QROKMy5MftP72qrWQXZp2313BFhbSZ91RQ=)
2: 947F9724B93411F0909C206FC4F9AE02.roa (hash: 0EFTU/dv0CDsv/1McWF5wFSfQbHyynwC/0ZL4k27h+4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl
rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7318 (0x1c96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91168B5, serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39
Validity
Not Before: Jun 12 16:08:23 2026 GMT
Not After : Jun 19 16:08:23 2026 GMT
Subject: CN=6a2c2ef7-a682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:4a:f3:dd:7d:a4:e0:cd:5b:5f:eb:8a:52:
0c:94:1b:71:de:5e:49:09:22:ac:38:14:0f:23:8e:
2a:66:b4:50:75:36:3c:f1:d6:60:e0:4c:de:a0:d9:
43:28:00:5e:89:51:21:f4:20:b3:21:93:47:8d:da:
0f:8d:32:92:ab:57:ca:dd:82:eb:a3:86:cb:c6:5b:
07:90:28:4d:9e:e9:2a:f3:46:0d:8b:bf:b5:c8:0f:
79:f9:c3:ba:2f:ea:08:47:a7:7c:7a:38:65:bb:c6:
1e:7c:f8:bc:ef:67:49:a8:c0:b8:61:0a:74:3c:74:
1d:46:c0:89:84:f1:0f:b0:50:17:3c:8b:c7:6d:df:
7f:99:c8:25:d8:7a:f1:26:96:f2:9b:a3:ed:7d:cc:
48:f9:f6:b6:22:e9:05:12:c2:4c:0b:d4:fb:1c:f4:
7c:f9:91:16:1d:4b:17:7b:58:ef:d8:10:64:48:eb:
6d:8e:38:dd:f2:84:c7:9a:b8:6f:71:f2:bf:2a:6b:
b1:4d:32:4f:8c:4c:3b:07:ee:e3:22:c9:d5:24:f8:
e5:d6:fa:96:76:b8:8b:9d:73:9e:be:b3:9c:b1:be:
03:a9:5b:0f:c5:ae:bd:7b:04:a4:02:7f:da:24:c7:
53:83:6b:5b:8d:f0:56:96:63:e3:7e:75:ec:5f:c4:
a8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:49:55:1B:2D:C0:6D:66:A6:8E:FA:E4:BF:84:C4:D1:46:D2:80:15
X509v3 Authority Key Identifier:
keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:ad:8f:f4:86:4d:ea:42:27:91:b1:a3:6a:89:4e:4a:18:fd:
3a:be:98:14:22:f5:f5:6e:bf:c6:3d:56:97:7b:bb:38:38:3e:
7e:36:e1:40:69:cb:87:87:71:28:34:26:6e:81:37:80:15:fb:
0d:d8:4a:9b:76:da:04:54:b8:8d:37:c4:ef:1e:9d:7c:27:a8:
1d:22:d3:5f:b7:c2:ec:ec:e5:a6:c4:00:85:be:08:38:e0:4b:
66:97:f9:85:cc:6a:58:75:a3:8f:fd:c1:13:a4:6e:a1:70:5c:
cf:27:95:2e:88:ab:dd:ed:4e:63:dd:55:b0:40:d7:cc:d7:3b:
e4:75:9d:d4:a4:ed:ec:a8:2f:49:10:db:79:78:dd:26:db:22:
32:49:84:13:00:a4:ab:6e:24:bc:ce:38:fd:2a:2b:3e:b1:2c:
2e:0f:b4:02:87:28:d6:6d:d7:a5:68:51:6a:1e:69:97:dd:53:
67:68:94:cb:4c:77:78:3d:9d:18:9b:0d:27:aa:db:14:dc:98:
72:5b:da:fa:60:1f:80:46:f9:17:1f:1b:3a:75:7f:62:59:f3:
c0:4c:a7:eb:1e:5d:1d:69:88:dc:23:65:5e:96:27:5e:8e:88:
68:41:0b:d4:f9:fa:d0:2d:4c:bb:93:c4:49:17:e3:4c:98:3f:
f9:0f:0e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:54:37 2026 by rpki-client