
$ rpki-client -vvf rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
File: fT3bIK_-cUyPNUllHB7oD1VgEbg.mft (raw, json)
Hash identifier: eVl5y0VEla/9+4zcO2rfgn3rtT8TiBPvFrVinf/prOg=
Subject key identifier: 63:3A:50:71:44:DF:83:AD:80:0E:14:D4:03:A2:C5:71:25:AB:AD:3D
Authority key identifier: 7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8
Certificate issuer: /CN=A91319EA/serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8
Certificate serial: 0374
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
Manifest number: 036E
Signing time: Sat 13 Jun 2026 00:51:29 +0000
Manifest this update: Sat 13 Jun 2026 00:51:28 +0000
Manifest next update: Sat 20 Jun 2026 00:51:28 +0000
Files and hashes: 1: fT3bIK_-cUyPNUllHB7oD1VgEbg.crl (hash: ax6Cwx2yxT9Oqbz/n433kPd4c7TBd9QmHovetMAPHiM=)
2: BFD5E8EAF8EB11EC9C39C677C4F9AE02.roa (hash: ogTzdNf1gHD/xTlxA8D6h7pqJeFDXQYw5yT4vowpzqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl
rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:51:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884 (0x374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91319EA, serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8
Validity
Not Before: Jun 13 00:51:28 2026 GMT
Not After : Jun 20 00:51:28 2026 GMT
Subject: CN=6a2ca991-f3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:25:6a:07:cf:2c:8d:dd:b2:6f:a3:69:15:cb:
57:1c:a0:ff:38:a3:dc:64:7b:6b:cc:8f:c3:2d:35:
c9:21:8e:75:14:48:db:b7:6b:68:ed:f0:19:e3:5d:
28:52:49:eb:e7:3e:6c:4c:f0:4b:06:2e:fb:cf:93:
3e:f4:16:19:59:c3:58:5a:fa:3f:77:c7:7d:8c:7c:
0c:68:fc:2f:55:df:37:58:3f:1a:0c:0d:43:59:26:
0e:75:1a:5a:37:6a:dc:61:9a:02:ba:4f:05:b5:db:
0b:4f:4d:a6:bd:7c:16:ca:89:f2:a7:ba:d9:9d:29:
16:d9:a4:fa:8e:22:e5:0b:79:48:bc:8d:ae:6f:98:
6a:52:a1:f1:08:db:3f:4a:81:01:8f:96:a5:4a:53:
71:f2:f1:4e:ce:b5:f9:ee:56:84:32:dc:27:cf:74:
04:ab:56:89:be:f2:17:68:77:0d:d7:7e:0f:96:79:
40:0d:04:12:71:23:4b:1a:aa:74:6a:e5:ef:24:41:
c5:8e:c0:65:6b:cb:fc:c6:db:9a:b4:da:ab:ab:b2:
7f:39:95:fd:c7:d2:b7:9c:37:bd:70:b0:0d:11:73:
2c:5a:8c:e7:93:d9:71:95:7c:11:96:dd:c3:b5:70:
65:29:6a:91:a5:10:8f:4a:d3:6f:dc:89:d9:a4:55:
23:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3A:50:71:44:DF:83:AD:80:0E:14:D4:03:A2:C5:71:25:AB:AD:3D
X509v3 Authority Key Identifier:
keyid:7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:78:bd:c3:c5:d5:00:a0:46:44:86:84:d1:f3:fa:78:bf:4c:
20:c7:27:ee:b1:1f:d1:26:b2:d0:31:c4:e5:19:13:45:5c:54:
69:6e:c2:5f:fe:4c:b2:7e:19:85:de:ed:74:10:1b:b7:d0:8f:
78:73:42:c4:ec:7a:c3:b6:0d:89:cf:73:55:05:77:ee:cf:a4:
5f:84:6f:9a:6e:2b:1b:06:03:5e:eb:27:e9:a4:db:12:62:e7:
89:fe:60:ef:f0:6a:b3:b2:57:4b:a7:90:6d:d9:ea:18:12:96:
af:b2:86:ce:d9:9c:0d:fe:af:e2:ed:57:12:3c:92:be:7d:ff:
dd:03:20:25:fe:e5:fc:05:d8:ef:07:77:04:92:80:bd:4b:a6:
76:c0:c1:66:37:c1:4c:0a:d1:53:a0:fe:0b:45:1f:19:04:e2:
2e:ea:42:d4:1f:03:88:32:1f:3e:fd:86:12:16:1b:44:86:2a:
59:29:f5:d2:65:1d:1d:77:60:ad:6c:2d:e5:f9:ed:09:65:17:
83:30:04:37:e2:ad:19:22:64:dc:cd:2c:bc:c9:ff:7e:57:01:
62:ce:0a:be:66:a4:6e:0f:8c:58:df:01:12:d2:2f:22:63:aa:
60:05:0e:f8:be:2d:19:4a:2a:45:ed:93:2b:8e:86:b6:42:e4:
ab:4a:3c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:46:38 2026 by rpki-client