
$ rpki-client -vvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
File: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft (raw, json)
Hash identifier: l9yNNUycQw1AYKeI+fGXlLr/ZW8EkjM3ZaOlnPv6iQI=
Subject key identifier: 44:28:05:35:B1:F0:E4:DB:7E:2A:F7:B7:DB:29:46:80:A3:17:07:2E
Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
Certificate issuer: /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Certificate serial: 0C9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
Manifest number: 0C94
Signing time: Fri 12 Jun 2026 18:34:05 +0000
Manifest this update: Fri 12 Jun 2026 18:34:05 +0000
Manifest next update: Fri 19 Jun 2026 18:34:05 +0000
Files and hashes: 1: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl (hash: gP107xXOOO/l899DX9/AGTSNZnZlJpJGjIcHMTFMZE0=)
2: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (hash: 40R+DRWbI6AD7X69y+O2s0U8qVSzuQdPnKR80+3niV8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3229 (0xc9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91822BF, serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Validity
Not Before: Jun 12 18:34:05 2026 GMT
Not After : Jun 19 18:34:05 2026 GMT
Subject: CN=6a2c511d-f10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:7a:2b:ff:7f:39:65:8c:ce:89:55:b5:30:
63:6d:5b:e4:7a:5f:75:21:ec:36:ef:b5:e6:4b:0b:
ee:8e:a5:3e:b2:4c:a6:a4:f9:16:38:51:00:fa:f7:
15:74:3c:69:06:b2:c2:d3:9b:27:91:cf:4e:48:e1:
9b:13:81:9f:ff:aa:d7:ab:22:60:5b:a4:3b:b4:cf:
2b:63:81:ac:e2:ff:65:13:72:a5:65:d6:22:86:d8:
ae:11:16:f8:1c:4c:2e:2a:d4:73:6f:a5:cf:4e:82:
3a:bc:7c:4b:cd:a8:cf:ba:67:71:b4:49:ff:a1:cd:
de:83:6e:12:92:2a:a2:9e:23:12:a8:01:b6:9d:f1:
b2:ae:83:f4:aa:af:d6:88:54:af:8f:f1:46:00:ba:
33:25:ea:72:31:d3:4f:7c:6c:ae:23:f9:e3:a0:ba:
35:dd:2a:2c:50:30:9e:6d:ca:0f:23:17:05:ee:cb:
5f:3d:8a:4b:8f:8f:29:a5:e1:44:ba:1a:50:b7:6c:
20:9f:f7:b7:24:86:f7:ba:16:0a:e6:3b:e4:da:7b:
a3:84:02:32:79:64:0e:e3:df:56:78:c6:57:b2:60:
c5:47:3a:5b:77:e6:26:84:61:2f:19:cc:81:da:56:
3c:b9:16:e5:78:15:70:5f:3a:db:4d:4f:c0:99:b1:
63:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:28:05:35:B1:F0:E4:DB:7E:2A:F7:B7:DB:29:46:80:A3:17:07:2E
X509v3 Authority Key Identifier:
keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:a9:88:6b:62:9e:85:dd:f6:9b:f0:b9:10:10:e6:ed:32:d5:
68:21:14:f4:7a:be:3f:65:c5:f9:b4:4f:43:d2:1a:cc:5d:0d:
bd:32:3a:3b:7a:5d:8f:20:ab:01:98:a8:ed:4d:97:5f:0b:b5:
93:13:d5:42:4a:e8:9f:e0:69:3b:bf:11:ad:18:80:dd:5c:a2:
d8:7d:58:e0:e3:12:17:77:08:b1:a2:ad:b3:01:ef:c9:65:5d:
04:2b:d6:25:4b:e7:f1:8f:18:fc:7c:1f:f9:a2:41:3b:e3:64:
d4:39:b7:b0:fd:a8:d1:74:db:f0:c9:0a:0a:36:70:7e:4f:f1:
2a:4e:2c:05:b8:b7:66:54:46:82:d1:1a:f7:e6:56:6a:00:1d:
89:0f:a8:fb:07:89:ae:56:b0:39:83:85:86:08:8a:d3:2c:2e:
b6:61:63:5d:a2:f5:ec:39:44:20:52:ac:08:0c:27:d2:bf:48:
fa:d5:97:af:ec:72:13:40:cd:2f:28:80:6f:47:17:42:d7:88:
7e:0c:71:38:73:79:92:55:31:0b:b7:4f:cd:45:f8:b5:28:8e:
5e:81:ee:74:0f:93:28:24:24:98:cd:a0:79:4e:f8:36:32:8a:
f5:4a:37:e1:31:48:c1:34:4f:20:37:2c:77:4f:34:0e:8c:67:
af:d3:95:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:31:39 2026 by rpki-client