
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft
File: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft (raw, json)
Hash identifier: CmVS0gCqNofb25s7EjFgmeM3oVmH3pXANTCzTmub4JI=
Subject key identifier: 72:3A:A5:D2:4F:62:75:BB:08:29:B5:74:2A:72:DD:31:7C:A6:7B:80
Authority key identifier: DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24
Certificate issuer: /CN=A91B31CB/serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft
Manifest number: 0150
Signing time: Mon 27 Jul 2026 07:05:19 +0000
Manifest this update: Mon 27 Jul 2026 07:05:19 +0000
Manifest next update: Mon 03 Aug 2026 07:05:19 +0000
Files and hashes: 1: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl (hash: D/XtTBEzbBbcxbObsVlVi8pbpAVONZE3C9GHaF78ifM=)
2: 67030B7889F111EFB3186A7BC4F9AE02.roa (hash: d7xVs3t7CcfMe/ajdsTZTFxRrOglm1vaW7xirB1AT90=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl
rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B31CB, serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524
Validity
Not Before: Jul 27 07:05:19 2026 GMT
Not After : Aug 3 07:05:19 2026 GMT
Subject: CN=6a67032f-eec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7e:8e:b5:8e:d9:b9:37:ef:07:e1:3d:1d:b7:
81:7a:af:e9:67:54:2e:c6:16:e5:e7:29:36:5f:51:
d3:fd:03:87:e8:1a:29:2e:9c:73:71:7a:7d:0b:f0:
43:9b:19:9d:b7:fd:fa:92:a3:f7:b6:de:49:38:aa:
8b:64:5e:e8:3e:37:6a:52:59:29:54:91:d3:89:d9:
3d:24:72:55:ac:ed:58:2a:98:54:9f:4e:54:c2:4b:
74:a3:80:f4:f6:ad:9e:30:7d:55:9e:b7:87:82:2a:
c5:11:8e:0a:a6:e3:59:0e:d1:e3:9c:a6:0c:6b:59:
bb:a6:f1:04:7b:eb:d2:b4:48:f1:83:61:69:a0:da:
49:53:42:47:52:2d:b0:8f:51:0b:8f:29:ad:77:90:
ad:c0:59:06:f2:c0:83:96:2f:64:00:96:30:84:10:
93:57:2b:57:45:62:71:da:aa:26:5d:3b:22:22:f1:
59:21:70:96:72:ea:93:86:bf:b1:bb:91:8d:27:17:
3e:d6:ae:46:8c:35:93:75:6e:d8:17:cc:b8:7b:57:
30:10:a4:42:4d:f2:d8:78:bc:97:d8:17:7b:e9:90:
e6:48:d0:2b:c0:89:fd:e7:3c:f0:fb:55:35:28:e3:
2f:a5:db:35:f6:3d:02:06:e8:13:35:33:4c:d2:fd:
31:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3A:A5:D2:4F:62:75:BB:08:29:B5:74:2A:72:DD:31:7C:A6:7B:80
X509v3 Authority Key Identifier:
keyid:DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:84:2e:bf:da:5e:1a:69:6e:0c:ba:2d:28:33:50:3c:81:e7:
21:fa:a6:05:39:39:dd:41:f5:5c:92:a2:11:96:d2:ce:77:d5:
ef:b0:31:b1:0d:f7:b4:8c:8e:d8:98:09:03:9e:83:3d:0b:3f:
a6:e5:3f:9f:61:45:c1:95:fb:6c:89:a4:ae:d0:5b:6f:f7:02:
b6:e7:e9:56:ef:3e:0b:30:15:9d:2d:0d:b5:d7:b9:d7:db:f4:
2a:a4:41:26:62:9b:54:32:68:f7:b3:8c:dd:0b:a4:d6:c8:f0:
be:c7:07:4e:dd:34:2f:f9:56:4c:1d:ab:0b:5d:31:0d:57:af:
49:74:fa:67:4c:8d:73:e0:08:83:c5:df:b0:1b:8f:3a:09:11:
fe:8c:15:77:d6:13:8d:a9:e1:12:d8:ee:cc:c5:ad:54:57:a4:
8f:d4:dd:51:18:70:c0:3d:99:11:92:06:55:37:a0:90:1a:14:
c1:39:c2:6b:16:42:58:49:39:25:b3:cc:76:ed:8f:ff:f2:c5:
8e:f3:4e:64:b2:f4:55:60:f4:f0:40:ce:cf:9d:de:58:75:04:
36:c3:77:09:8f:4d:5c:ed:a6:ad:07:c8:0c:67:38:d8:2f:49:
ef:a1:1c:3b:2b:03:fe:c6:52:70:57:04:19:8e:92:07:db:73:
b8:9f:ec:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:30:11 2026 by rpki-client