
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json)
Hash identifier: GA8rcVodCz3WhxOwvEfzdJx/DvZ6ko+RT/aBq+24vyo=
Subject key identifier: 28:A2:91:D0:1A:D8:81:F3:31:69:74:EE:04:65:0E:93:A5:AC:D6:C4
Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1
Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1
Certificate serial: 055C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
Manifest number: 054E
Signing time: Fri 12 Jun 2026 23:28:21 +0000
Manifest this update: Fri 12 Jun 2026 23:28:21 +0000
Manifest next update: Fri 19 Jun 2026 23:28:21 +0000
Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: Oo6/Fb2VQY5rlFQRrKRtloBm/kXwg2nL+Ocw9UZs9mU=)
2: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: jAa33zySKD0mAn7r2v7MBjntJgbOB3pz/8LhzG43AK8=)
3: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: NzLjTxl1M87dajrYUnMMeCTuzc6b9MgyWvlgrea5Itk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl
rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1372 (0x55c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1
Validity
Not Before: Jun 12 23:28:21 2026 GMT
Not After : Jun 19 23:28:21 2026 GMT
Subject: CN=6a2c9615-18eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:2c:a0:2d:99:bb:cb:08:a5:ce:d0:55:7b:
eb:a1:5c:57:e4:25:c2:58:6d:c0:b3:02:aa:54:aa:
54:e1:6f:f5:9d:52:09:3b:d8:08:25:83:f0:46:04:
de:92:6f:85:85:6b:4e:30:a8:c8:a8:38:1c:36:1c:
62:42:f2:9b:90:76:ee:23:d9:2c:3b:3c:c6:f9:42:
0e:9a:e0:02:2b:6e:b8:00:3b:fd:a8:6b:74:cf:1f:
e5:aa:68:da:0d:7d:4e:3a:a3:d2:9f:ec:ce:f7:71:
85:6b:99:2d:c3:d7:9d:d2:ea:d7:85:ab:4f:e9:c6:
43:32:79:1d:0b:73:11:0a:0e:ee:0f:96:b7:ab:b4:
79:ec:57:78:e7:cb:c6:a8:93:90:28:4e:77:16:11:
65:ad:e4:ca:4e:d0:91:53:86:8e:d7:93:ce:2b:1c:
14:6f:7c:d0:d8:5a:89:d2:df:04:6c:85:ea:11:0d:
c5:7c:64:72:3d:6e:5b:62:0b:97:dd:6e:e9:df:a0:
d7:f2:5f:0b:88:b2:cc:4a:19:40:2e:1d:7b:4b:00:
da:52:76:9e:87:1a:10:b0:d7:8d:26:86:e1:3e:b9:
48:5d:ae:31:de:b2:75:c2:98:2a:bc:48:7f:ab:a9:
c0:9f:5c:cf:b7:d1:8e:c2:a7:0d:5b:cf:cc:ba:61:
b3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A2:91:D0:1A:D8:81:F3:31:69:74:EE:04:65:0E:93:A5:AC:D6:C4
X509v3 Authority Key Identifier:
keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:af:20:a2:05:57:be:46:f8:86:7c:c7:ed:86:9c:d5:5f:93:
5f:3f:3a:4c:5a:d2:ee:86:75:b2:5a:de:88:2b:af:4d:c1:54:
43:41:25:6d:bf:f4:e4:19:2c:a8:16:f2:ed:48:83:0a:87:63:
07:c1:93:74:41:88:41:18:27:83:c6:fa:65:90:a3:6f:67:24:
55:f5:7d:97:9c:3e:00:58:b5:75:b8:a3:c4:30:fd:89:5e:18:
67:5f:cc:14:d0:4d:f5:68:ba:cf:ae:36:c6:1c:5c:62:01:df:
8d:35:ab:0b:f0:86:4b:52:d4:98:f5:d1:2e:e6:c3:4e:41:86:
7c:dd:23:63:cf:d6:b8:30:65:43:ab:7c:ba:11:d6:f1:21:bc:
5d:b8:61:b8:d5:38:d9:ee:07:55:72:bf:4b:fb:cb:6a:68:ff:
94:73:7e:87:17:5f:09:b5:11:aa:f3:2d:22:71:58:82:68:c9:
7f:8e:a7:94:bb:7c:2c:6b:0b:5f:18:21:8c:cb:5a:76:eb:96:
9e:fc:0f:51:88:d2:e8:75:cf:2f:8b:a8:7d:32:d7:86:ae:2b:
0d:d1:73:71:50:aa:0b:d9:be:8e:f1:8e:bd:e8:d3:8a:38:9a:
d4:b0:ea:d3:f1:63:f4:f2:a5:5a:69:87:58:3d:71:4a:30:67:
6b:ea:32:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:07 2026 by rpki-client