
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft
File: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft (raw, json)
Hash identifier: g/sZFgj28C4JCpA1n1N1OPRgtUCQgwkUXP046vAKgWg=
Subject key identifier: 2A:FB:C0:55:D6:8F:EE:6F:C1:19:E2:A6:59:10:D9:CB:6B:6C:21:ED
Authority key identifier: DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24
Certificate issuer: /CN=A91B31CB/serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524
Certificate serial: 013F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft
Manifest number: 013A
Signing time: Sat 13 Jun 2026 05:25:32 +0000
Manifest this update: Sat 13 Jun 2026 05:25:32 +0000
Manifest next update: Sat 20 Jun 2026 05:25:32 +0000
Files and hashes: 1: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl (hash: e4Tay86XEDa/q0hlVs5SDNrO/lGIVvf+64y0d38nguk=)
2: 67030B7889F111EFB3186A7BC4F9AE02.roa (hash: d7xVs3t7CcfMe/ajdsTZTFxRrOglm1vaW7xirB1AT90=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl
rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319 (0x13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B31CB, serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524
Validity
Not Before: Jun 13 05:25:32 2026 GMT
Not After : Jun 20 05:25:32 2026 GMT
Subject: CN=6a2ce9cc-de2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:13:2e:87:65:7b:94:c0:e3:ef:6d:01:15:
d4:52:6f:50:db:0b:ef:d6:4f:82:4c:83:5a:76:b7:
fa:ef:f7:35:12:92:c3:bc:bc:78:b0:e5:2e:9b:5b:
8f:3c:d0:66:ae:4f:0f:b4:9a:88:bc:b2:5c:e8:e0:
33:18:70:ad:37:88:0d:1a:e6:c1:71:5b:c6:8a:3e:
ce:da:b3:71:73:a1:5b:30:19:c7:57:0e:e0:1d:70:
e8:fa:1d:69:b7:ff:b2:b6:2f:9d:1d:25:5f:d2:7f:
49:cb:ba:1c:22:2c:00:70:d1:e4:8f:f5:99:42:8a:
92:2b:69:3b:98:06:12:0f:b6:3c:24:ae:1f:cd:43:
9d:c2:6c:26:4c:e0:46:7d:6d:f8:ca:80:94:ec:c6:
3e:43:1a:6c:94:4c:c1:44:d8:b0:d2:e7:f7:54:48:
ac:54:78:ce:d9:e6:c4:1d:94:44:79:85:dc:6b:78:
6e:e8:1a:c7:f0:4b:e4:50:cb:49:23:34:9a:f4:66:
9c:cc:46:fc:96:4b:dd:b5:48:03:e6:71:32:de:ae:
9a:94:b0:41:5b:9c:34:4a:f5:87:08:50:7b:a4:ce:
9a:e6:72:89:4b:bf:1e:52:a6:d9:42:7f:0d:c7:d4:
b2:2e:c9:06:2b:48:84:cc:3d:f6:83:3a:2f:14:9d:
fc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FB:C0:55:D6:8F:EE:6F:C1:19:E2:A6:59:10:D9:CB:6B:6C:21:ED
X509v3 Authority Key Identifier:
keyid:DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:60:84:8f:4e:23:f1:e7:62:2d:fa:e5:6b:2f:1c:ef:2f:ce:
10:3f:c0:67:bf:39:f9:be:79:7d:cc:8c:74:2c:4c:8d:70:3b:
59:45:e6:8b:8b:25:2b:5c:7a:20:81:44:27:a8:ee:07:5c:1f:
8c:0e:e7:28:ac:1b:73:ab:7d:14:60:bf:82:49:68:b3:70:a6:
4e:e0:b1:7a:6b:fa:8d:ef:43:c1:26:6f:b0:52:f1:f2:22:f4:
ac:4f:b7:c8:a1:d3:56:4d:fb:c6:25:b5:be:a6:58:f5:2a:50:
5f:5a:fc:49:f4:83:24:70:e9:ea:07:2e:e1:ab:bf:49:86:c4:
96:9a:c2:95:8e:31:1a:ad:57:3d:f7:b5:62:bf:28:94:0b:09:
cf:3d:3f:2b:3c:e2:69:95:0a:f3:bb:2b:2a:80:74:fb:03:9e:
84:60:4e:20:4a:57:6d:d6:5c:18:4e:e7:bd:de:78:c6:57:fc:
f3:9f:14:7d:60:3a:2b:48:e2:59:18:c9:48:10:cc:53:d9:06:
ad:9a:ab:fb:e4:ad:9c:51:d7:51:20:68:a3:01:e2:0f:8a:d2:
86:fc:bd:d5:7d:fd:8c:0e:21:91:5f:47:08:fc:cd:aa:c9:61:
7f:a0:87:c9:b2:57:e0:ab:cb:82:31:e8:8b:0a:d9:77:a4:05:
2e:86:41:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:20:49 2026 by rpki-client