
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
File: 3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json)
Hash identifier: 6fyutI6KPiSww+PvIeK7cQvVVkX2NuCvJkBbAI0jnik=
Subject key identifier: CB:0D:81:CC:8E:EA:65:7F:9A:C1:D5:66:A5:B2:E5:37:23:F1:32:94
Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7
Certificate issuer: /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7
Certificate serial: 01BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
Manifest number: 01B1
Signing time: Mon 27 Jul 2026 05:44:42 +0000
Manifest this update: Mon 27 Jul 2026 05:44:42 +0000
Manifest next update: Mon 03 Aug 2026 05:44:42 +0000
Files and hashes: 1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: kL1x2Pya7y16YGUci5Kgqp+cLWBiYGWgocWACDPuq90=)
2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: opYVyfVrf8nOteK7/xjEMUl4M6X/BkvRe3zd604oEu4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl
rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:44:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE2E, serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7
Validity
Not Before: Jul 27 05:44:42 2026 GMT
Not After : Aug 3 05:44:42 2026 GMT
Subject: CN=6a66f04a-f7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:a5:9c:69:33:f7:1b:69:ec:13:ac:c5:f9:
e9:84:6e:bf:03:cf:13:2e:00:1c:4f:e3:5f:fe:22:
f7:6a:98:b5:cd:5d:11:a7:46:fd:1a:61:c9:76:8b:
32:2e:c7:90:95:95:c9:52:2b:e5:12:5a:22:0b:77:
26:c2:0f:ba:6d:cc:6a:27:0b:61:0d:2e:c3:01:c5:
26:47:62:b4:ef:6f:14:5d:b2:12:8e:67:c7:25:5f:
c4:5b:7f:73:a2:d1:f4:ae:84:4f:b7:8d:d1:03:fe:
98:3d:62:93:16:3e:11:1b:a6:d4:20:f8:46:3d:0e:
86:a8:65:3f:5f:af:2c:c3:e9:3f:af:85:83:4e:da:
75:ca:e0:41:66:51:b5:5c:9f:bd:5b:71:f2:5d:bf:
7d:fa:84:fc:39:6e:df:2e:41:85:df:2d:b7:2c:4f:
91:3d:cf:7d:28:ac:f9:19:93:d8:d9:00:37:16:5d:
8a:15:ef:5b:14:e3:e6:71:37:b3:f5:3c:4b:ff:ad:
40:27:04:96:e1:ce:a9:d9:f5:6a:03:c0:07:ed:7d:
8f:f3:b8:db:8b:ec:52:a7:75:5a:57:74:28:f2:38:
88:f9:06:6b:66:ed:ca:3d:57:68:1f:04:d5:9f:21:
4e:89:e6:e6:e5:b0:93:16:53:de:92:4c:fc:9d:9f:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0D:81:CC:8E:EA:65:7F:9A:C1:D5:66:A5:B2:E5:37:23:F1:32:94
X509v3 Authority Key Identifier:
keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:80:ab:7e:ec:49:d4:46:1c:12:2c:a4:be:fc:fa:3c:c5:5e:
23:0e:2d:05:0e:5a:dd:24:fd:9d:41:d3:db:17:49:92:80:8d:
e2:d0:7a:3c:d7:33:28:ef:23:1a:d4:ef:4b:e1:a8:a2:62:6d:
7a:59:a3:9b:b2:9d:6b:84:33:3c:b6:c9:e2:62:21:44:c2:4c:
fe:3d:cb:dd:c0:33:6c:7b:6f:fc:cb:60:4a:78:38:61:94:d2:
47:01:b1:09:7e:b4:85:73:84:65:8e:ca:6a:b2:bd:1e:4f:b4:
ec:97:e6:86:af:66:cc:e1:c6:d5:61:a4:b2:a2:99:90:8e:4f:
0a:66:04:0a:a1:bf:c7:52:4e:0b:1c:7c:f0:37:d5:ab:7a:1a:
f3:83:d7:e3:2f:35:23:a9:29:76:7b:ed:fd:53:39:53:05:9f:
63:0f:f7:ae:ef:1e:f6:7e:3b:4d:4b:6a:7d:f1:04:9a:04:04:
08:f2:b7:88:a9:94:11:de:4a:75:28:8a:05:4a:f3:e1:de:4a:
3f:cc:cf:40:bb:ee:a8:0a:b5:c7:1c:0c:ef:78:ea:6b:1e:32:
7a:5a:aa:58:82:58:d5:7e:c0:a0:b9:ed:34:ab:99:1b:0f:0c:
41:e7:0a:6b:0b:22:65:b7:ea:f9:90:ad:6d:47:3f:14:1d:14:
cf:fb:5f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:28:31 2026 by rpki-client