
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
File: 38UozwAG40FK-3_obR_er2SLXJ0.mft (raw, json)
Hash identifier: f9rpnkg+hsJL9xnNMjvw+xSC6j0N75DLmU4913qqTw8=
Subject key identifier: 97:5E:DF:EB:44:AE:4F:C0:B7:49:7C:9E:C3:D5:F4:A6:6B:28:CE:46
Authority key identifier: DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D
Certificate issuer: /CN=A91B1A3B/serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D
Certificate serial: 013D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
Manifest number: 0135
Signing time: Sat 13 Jun 2026 05:29:19 +0000
Manifest this update: Sat 13 Jun 2026 05:29:19 +0000
Manifest next update: Sat 20 Jun 2026 05:29:19 +0000
Files and hashes: 1: 38UozwAG40FK-3_obR_er2SLXJ0.crl (hash: wR3HfPhHhTzfFL9RJpVr7+4J2BsM4bITZQKdBMAVUiI=)
2: 6CF3FF44901111EF922BFC29C4F9AE02.roa (hash: hvfFWUPLyFvJCXfs1g4giSnFKRGrDpasDj01CVoVhxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl
rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1A3B, serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D
Validity
Not Before: Jun 13 05:29:19 2026 GMT
Not After : Jun 20 05:29:19 2026 GMT
Subject: CN=6a2ceaaf-623e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:43:6b:57:ac:c3:4f:a3:f6:0f:97:45:f8:
19:1a:4b:6f:bb:fc:ea:05:b1:35:4e:5d:d3:fa:46:
aa:34:5f:3d:27:67:07:5b:a2:d8:f2:55:a5:ec:c9:
9c:6f:4c:0c:85:5d:3c:f2:b8:a3:f9:1c:60:e9:80:
36:af:22:40:5d:b0:a1:ca:0f:c5:e0:45:ee:c6:c9:
2f:4b:a2:0c:d9:92:53:5b:1d:60:07:b3:9c:fd:7f:
f1:68:a3:39:83:b5:f3:de:95:c8:93:3b:6a:a4:51:
71:14:df:99:fb:9e:dd:fa:96:e3:3d:3c:32:a6:77:
92:f1:2b:be:bf:8b:3d:07:ed:85:f7:dd:1b:9f:74:
63:9e:70:18:4b:59:9b:eb:77:c3:f3:72:22:50:46:
71:0d:da:1b:23:f0:22:f0:56:7e:b0:09:58:5c:1b:
d8:88:62:6a:15:5a:ca:0f:e3:8a:ce:c7:74:14:d8:
ac:d5:e4:1d:0a:22:a7:78:c1:a9:69:aa:82:eb:63:
ef:40:b5:48:49:12:55:93:80:01:c3:47:86:60:d2:
a3:6d:0f:ae:70:78:c5:ed:83:cd:77:72:84:99:7e:
85:86:6f:f4:ce:35:b7:40:b0:75:47:cc:99:d9:91:
f2:27:71:2c:47:15:98:e5:53:e5:77:a3:3a:76:6b:
a6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5E:DF:EB:44:AE:4F:C0:B7:49:7C:9E:C3:D5:F4:A6:6B:28:CE:46
X509v3 Authority Key Identifier:
keyid:DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:92:75:a0:f6:52:25:b5:1d:96:61:0c:4a:20:e1:54:5b:44:
73:54:b2:ad:b2:bd:49:57:6e:60:97:af:f1:df:0a:04:d6:b4:
a9:88:16:a9:fa:53:e0:f1:d4:d7:ee:8a:d0:b8:af:9f:77:a9:
32:e5:6b:8a:5d:c4:f3:c1:2f:8b:9c:51:38:f3:b4:18:d8:c2:
c9:e8:c0:80:64:72:97:6e:04:a6:68:cd:f5:cb:99:83:77:8b:
f0:81:d7:db:c6:8d:61:ba:b7:c5:d3:92:fd:49:86:23:04:e7:
40:9f:e2:1f:33:2f:45:bd:eb:94:dd:58:0e:f1:cf:da:8d:b9:
f5:51:a2:03:9e:a4:4f:cc:63:ea:2e:2a:97:35:8e:8b:be:f9:
5d:f1:01:b0:00:df:e4:21:40:36:bf:e0:c0:c1:f0:49:9b:f0:
b8:40:6d:0d:a9:53:31:e1:05:d8:30:23:50:66:71:9b:60:e1:
fb:60:a1:da:f5:44:cd:c2:22:fe:98:97:b4:58:4f:ad:77:5c:
00:dc:e4:96:6a:ea:48:0e:86:f6:f6:32:4f:1c:97:23:c8:79:
70:60:4f:00:e0:a6:61:f9:0f:60:17:83:26:ba:90:12:f6:73:
a1:45:ac:63:34:34:17:84:da:e1:7f:5d:5b:89:95:8c:73:28:
a0:e5:5b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:02:56 2026 by rpki-client