
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json)
Hash identifier: bJiIOGYgqb50AdP45O0aHzMYMUr2LR8ImOXTtyzJUAU=
Subject key identifier: DE:27:6B:AE:79:92:74:E6:6D:09:BB:1E:BC:6D:26:69:5C:1C:00:B7
Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1
Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1
Certificate serial: 053F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
Manifest number: 0531
Signing time: Thu 16 Apr 2026 23:25:57 +0000
Manifest this update: Thu 16 Apr 2026 23:25:56 +0000
Manifest next update: Thu 23 Apr 2026 23:25:56 +0000
Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: QNiCOJ1JbYIeR/RLCdjjwr3Vywk7JBeqsT9u5YkXfVk=)
2: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: jAa33zySKD0mAn7r2v7MBjntJgbOB3pz/8LhzG43AK8=)
3: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: NzLjTxl1M87dajrYUnMMeCTuzc6b9MgyWvlgrea5Itk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl
rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1343 (0x53f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1
Validity
Not Before: Apr 16 23:25:56 2026 GMT
Not After : Apr 23 23:25:56 2026 GMT
Subject: CN=69e17005-9156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e1:9a:d9:af:fb:e2:e2:8d:dc:88:34:7f:e1:
d8:fd:82:38:43:03:f8:28:52:c8:52:5d:f3:ae:03:
b0:bf:3e:79:c5:44:5d:35:5f:4f:32:45:1b:eb:0d:
b7:e1:8d:30:74:ba:03:aa:53:38:7d:5d:85:70:bb:
58:c3:cf:36:37:66:6b:44:c7:c7:e4:d6:7b:7f:57:
1a:8d:21:8f:3c:5d:0a:cc:9a:7a:87:40:9e:fe:da:
24:a9:6c:a7:96:f1:20:54:d1:1c:8c:4c:4b:a5:86:
8d:b3:83:b4:e7:5b:c2:b0:b6:21:b1:8f:1b:d6:bc:
a0:14:3b:78:a1:c5:2c:53:39:6f:00:56:00:72:68:
e1:f4:fc:69:42:73:0e:f5:63:2f:83:fa:bb:5b:7d:
1f:dd:48:e1:eb:95:f7:36:58:31:68:12:da:39:44:
31:f5:cf:94:51:e1:11:a5:13:08:07:97:89:29:f5:
40:86:de:b8:4b:c3:88:fd:91:cd:4f:1c:87:4e:a9:
41:a7:37:df:f1:42:07:3f:86:72:44:06:db:21:f1:
43:ae:5c:af:91:11:ad:9d:b3:40:6f:4b:4d:7d:00:
86:c9:d5:19:5a:d7:45:11:e7:43:89:c9:2a:f8:31:
b9:8c:f0:9f:ea:43:6a:05:a5:3d:29:d3:75:df:f2:
7a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:27:6B:AE:79:92:74:E6:6D:09:BB:1E:BC:6D:26:69:5C:1C:00:B7
X509v3 Authority Key Identifier:
keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1c:ce:f5:fa:63:fa:79:19:aa:0d:94:80:81:54:ed:81:96:
d9:64:4e:c5:94:e2:d4:3f:8f:6f:9d:be:b3:ce:1e:06:75:ad:
af:89:dd:d4:01:f4:df:b5:08:cb:c5:1c:9a:c3:5e:60:58:7e:
1c:96:7c:eb:84:4f:66:a5:6b:72:b1:94:fb:22:ba:b2:a6:3e:
4e:ee:3d:82:d0:50:6a:f0:99:9e:79:39:28:3b:f6:d8:15:b7:
2f:74:bc:83:13:56:8b:a0:82:b5:d9:e1:a9:bd:94:24:8e:64:
ac:36:27:79:f7:a2:38:38:9a:97:e3:70:1f:77:ff:e0:6c:06:
84:51:79:4a:94:35:21:d3:82:68:6e:f0:b4:ab:5d:b3:0b:37:
8b:d0:52:90:b2:ba:20:ae:a4:22:be:15:e3:b1:bb:74:c0:81:
64:e9:33:82:a8:37:b9:2e:5a:e7:93:01:40:ea:16:74:4e:42:
8b:71:58:c8:d3:19:0e:89:30:69:e5:05:88:a8:0b:11:50:1e:
be:84:79:8a:81:26:7d:2e:93:74:a4:a0:b3:11:03:f9:5d:a7:
8c:56:5c:b9:bf:84:bd:58:e0:3b:9c:22:5c:d2:bc:ca:c4:ae:
7d:c0:2d:ab:91:ce:be:7c:2f:88:7c:d0:3e:13:99:c5:15:2d:
f4:5a:85:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:48:46 2026 by rpki-client