
$ rpki-client -vvf rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft
File: v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft (raw, json)
Hash identifier: gOEadvED7/vavXJIFIndyDXffwC299mN7PleBncV8dw=
Subject key identifier: 1A:5A:7F:CB:4E:BB:99:49:95:26:44:6B:D2:48:93:B1:5F:B0:EF:AE
Authority key identifier: BF:7B:CA:F1:90:9C:10:BC:FE:A0:D8:E7:D4:5D:82:54:F2:69:C6:BF
Certificate issuer: /CN=A91401C4/serialNumber=BF7BCAF1909C10BCFEA0D8E7D45D8254F269C6BF
Certificate serial: 35CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft
Manifest number: 3599
Signing time: Tue 28 Jul 2026 14:15:58 +0000
Manifest this update: Tue 28 Jul 2026 14:15:58 +0000
Manifest next update: Tue 04 Aug 2026 14:15:58 +0000
Files and hashes: 1: v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl (hash: xB0Q/8XE5uVtOtLQgUfLhgqb9RWQRsRck8tIxwrdJCU=)
2: 13773D180C8111EB9BD25070C4F9AE02.roa (hash: 3iV0EKq4wQfXSWe2KfpZNIU6xJqtVDMzninH5z6wDn8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl
rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:15:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13775 (0x35cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91401C4, serialNumber=BF7BCAF1909C10BCFEA0D8E7D45D8254F269C6BF
Validity
Not Before: Jul 28 14:15:58 2026 GMT
Not After : Aug 4 14:15:58 2026 GMT
Subject: CN=6a68b99e-a820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d8:4b:98:ed:c6:82:9e:6d:2b:05:e2:1d:1e:
e5:3f:47:e7:e1:18:4e:98:07:c7:f3:82:04:35:09:
c7:d3:cc:3f:07:39:04:49:f3:49:01:ff:bf:31:50:
20:89:18:8a:7e:ed:50:05:bf:76:a4:35:ea:04:4e:
bc:99:61:a6:d4:b2:fb:a3:d2:70:82:1c:f7:f1:30:
ed:60:4b:0c:5a:45:d7:f2:08:c0:e9:4c:94:39:55:
15:d8:37:76:fa:5b:0a:b7:4e:d1:f0:5c:ca:e7:34:
e9:63:d8:21:2c:1e:af:d7:ff:ba:8a:dc:5d:4e:94:
80:eb:33:df:4d:23:74:1a:2f:8f:8e:5b:b5:a5:2b:
de:19:4b:9c:1f:45:f8:ac:61:a0:2a:80:bc:2e:66:
f8:20:4c:f2:6f:6b:eb:6e:d0:bd:ea:dd:45:3c:e9:
54:70:30:cb:16:c9:95:0a:42:12:d4:e3:52:34:74:
62:3f:2e:f5:f9:dd:7c:51:fb:90:51:d6:cb:ee:4a:
5d:cd:a6:28:b8:70:f3:4a:81:c8:2b:90:ab:63:1c:
87:4e:37:bf:c6:65:c0:f4:e9:41:04:be:ab:d2:72:
63:89:fc:bb:66:09:e6:5c:95:ea:7c:f9:b0:f3:3a:
60:08:0a:ae:04:77:58:c3:e4:51:79:ea:d4:67:a2:
0e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5A:7F:CB:4E:BB:99:49:95:26:44:6B:D2:48:93:B1:5F:B0:EF:AE
X509v3 Authority Key Identifier:
keyid:BF:7B:CA:F1:90:9C:10:BC:FE:A0:D8:E7:D4:5D:82:54:F2:69:C6:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:b9:88:b5:2c:6f:72:e9:6a:f6:6e:7c:90:3f:02:64:1a:15:
bb:92:84:8e:9b:25:8d:25:7f:dd:23:ed:dd:f6:4a:82:26:74:
1f:fb:5a:fe:64:d4:14:e1:48:ab:db:08:bf:2e:22:ef:d9:df:
d2:b4:f7:f6:6f:84:c5:8a:81:1e:3e:a1:db:92:6f:1e:57:e4:
02:fa:6d:3a:95:32:44:fc:f6:f3:a1:bb:26:a4:30:02:c9:21:
85:6d:c3:b3:14:c5:19:70:20:b2:6e:3a:3f:8a:5c:07:11:f4:
e3:f1:6b:02:a0:05:65:65:36:73:a4:cd:be:c9:22:2f:26:55:
bc:36:89:1e:77:9b:c2:35:1f:dc:4b:b4:12:e4:63:2e:7d:90:
ea:12:8a:8b:76:8b:b1:e4:c5:b2:9b:ad:28:f4:84:84:c2:a1:
01:84:6a:be:b2:52:1c:d1:ee:76:4f:ba:6a:75:1a:01:6f:e6:
85:12:24:51:42:bb:9e:fb:73:8f:6a:39:19:50:e8:49:58:36:
7b:93:5b:ce:93:af:68:60:a3:80:8b:d1:05:2d:f2:81:4b:1a:
62:02:47:84:4f:93:24:d3:28:37:65:39:7d:97:dc:17:af:60:
6d:c2:5e:01:6c:8b:9b:0c:f8:bc:5d:52:b7:44:00:5d:eb:06:
50:56:35:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:00 2026 by rpki-client