
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
File: As_3eY8FPpyB_czteWLsu3bB0ho.mft (raw, json)
Hash identifier: G7Esm8ymuDJtnAgjb4zASWZgMrZfLUSsFuhNUqj13Ro=
Subject key identifier: 97:1B:65:B1:2A:10:29:A3:CA:34:3D:B6:49:69:AE:DA:A0:86:DA:48
Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A
Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
Manifest number: 0140
Signing time: Wed 15 Apr 2026 04:56:47 +0000
Manifest this update: Wed 15 Apr 2026 04:56:47 +0000
Manifest next update: Wed 22 Apr 2026 04:56:47 +0000
Files and hashes: 1: As_3eY8FPpyB_czteWLsu3bB0ho.crl (hash: TeddfB1RVAxtbVogeUZiNmBMLEu9bYpdrHireru5cjw=)
2: 18C1AED0ABD111F0A1D84812C4F9AE02.roa (hash: onsHSEw2gBQvyT6GIE8r+szJ0Eco/4I+9evLtNgxa0M=)
3: A8F5426250E311F09F3F2B1BC4F9AE02.roa (hash: /ylmPLoqNPkXI0WwNkgwXyjpwWePDXl4PjOB+BkYIxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl
rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 04:56:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A
Validity
Not Before: Apr 15 04:56:47 2026 GMT
Not After : Apr 22 04:56:47 2026 GMT
Subject: CN=69df1a8f-18d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c9:da:ad:b5:d9:0b:1d:52:af:74:1d:e5:0c:
b7:5a:d3:c0:70:70:17:26:d1:49:c7:7d:de:c8:62:
39:2d:bd:ad:ac:5b:3a:07:e4:20:3f:fb:cf:21:de:
5c:89:a7:a2:85:84:9f:fc:36:63:5c:71:43:18:02:
d6:75:59:f5:7e:15:88:1b:e1:fd:55:28:2e:a1:c7:
46:79:4d:65:6f:a7:8a:81:56:65:05:ac:9a:34:cf:
56:55:f7:e6:b1:42:02:3a:be:2e:0e:e8:86:93:b2:
25:99:3a:0c:00:83:10:78:8b:a9:ef:83:a0:8a:93:
30:0a:40:1e:8f:a7:f7:07:b6:39:7c:a1:9d:84:bd:
74:46:72:e8:ec:e1:ed:73:e0:17:38:6a:83:71:6f:
74:d7:a5:a0:64:82:68:42:71:9a:59:35:a1:9c:93:
a1:dc:35:eb:8c:ec:63:56:5b:16:91:1d:6c:18:a7:
13:1b:ac:a7:75:41:49:d9:07:ec:dc:3c:71:6f:89:
5f:c3:ac:82:10:20:09:ed:10:5d:cf:52:b9:d5:d3:
1b:31:74:a4:c0:27:b7:f9:90:d7:f9:c6:e5:33:76:
b6:64:c7:f6:b6:9d:fb:b3:ed:d2:25:09:36:4a:f6:
ee:f1:57:53:a8:f5:fa:0f:81:e8:93:8a:e8:c6:ee:
1a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1B:65:B1:2A:10:29:A3:CA:34:3D:B6:49:69:AE:DA:A0:86:DA:48
X509v3 Authority Key Identifier:
keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:09:cf:48:59:a5:18:d5:d2:fe:b6:47:4c:c6:bb:b1:f7:07:
b4:1e:e8:88:1e:01:c8:ea:9b:29:c8:14:b9:d6:80:3e:bd:c5:
84:25:2f:b7:27:55:a0:7c:ac:f4:92:11:b0:06:02:93:92:8b:
64:e3:16:d7:4e:0d:c6:d4:95:c8:d3:d2:8a:90:86:33:75:95:
d5:72:e9:12:bd:63:44:d2:13:53:95:c5:f0:d8:88:ff:13:aa:
6d:ed:ac:59:90:7f:f7:7f:94:be:03:18:3c:d2:7b:63:f9:6a:
cd:ab:6b:9c:17:77:47:86:7b:f1:01:85:7f:7b:e7:c2:9a:5e:
9a:1d:37:68:09:96:60:7c:33:0f:51:69:5d:33:8f:9e:c2:10:
3e:09:94:f9:c1:6c:c5:60:e8:1a:cb:6f:5d:c3:f0:f2:39:51:
08:4d:9e:0d:31:93:77:a9:0d:12:1f:25:fe:02:95:54:b7:1d:
e8:f7:30:93:32:00:07:04:d5:e2:ee:9d:b9:01:7e:59:9f:c6:
03:6e:fe:14:07:0e:d1:42:e6:ba:7f:db:2b:1f:70:0f:8b:8d:
3b:18:09:9f:56:87:da:a4:f8:35:df:8e:b2:eb:8d:0e:1d:96:
5b:b2:1e:4c:80:d5:8d:6d:9e:27:77:a8:51:f9:72:a4:b0:49:
fc:99:b4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:05 2026 by rpki-client