
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft
File: 3vCat-atSADQZ9cCq_MCJincVuA.mft (raw, json)
Hash identifier: 9/TkQ0CI03dT/3nQYAzvuIxdvR7xSJcA1FE0w96aHko=
Subject key identifier: 6E:C1:A7:EA:51:84:DB:09:40:32:AD:CB:3F:CA:EF:48:4D:97:05:0F
Authority key identifier: DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0
Certificate issuer: /CN=A91B7B32/serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0
Certificate serial: 0207
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft
Manifest number: 0202
Signing time: Sat 13 Jun 2026 03:04:55 +0000
Manifest this update: Sat 13 Jun 2026 03:04:55 +0000
Manifest next update: Sat 20 Jun 2026 03:04:55 +0000
Files and hashes: 1: 3vCat-atSADQZ9cCq_MCJincVuA.crl (hash: pESwnSx1YYvzAXAbstauF0DlpHQSOpRjGnJ413ZnXcQ=)
2: 2B7210D251F211EEA079D567C4F9AE02.roa (hash: 3OfQkZDecj37kpIJDpaiVFI+t0R7obLrmLE1YM1JJH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl
rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7B32, serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0
Validity
Not Before: Jun 13 03:04:55 2026 GMT
Not After : Jun 20 03:04:55 2026 GMT
Subject: CN=6a2cc8d7-525d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:c0:df:49:41:a1:77:c9:c2:b7:36:03:eb:
28:9b:1b:05:48:68:2b:66:2e:d2:91:d6:95:e2:33:
60:b6:57:e0:82:4f:11:ce:ad:bc:02:26:c4:9f:89:
24:98:6b:12:94:65:ea:22:62:4b:f6:17:ef:02:6f:
6e:be:c4:f7:27:5f:aa:d4:fd:25:63:07:01:5c:e5:
89:c3:6b:6b:86:ba:57:1c:fe:ca:5b:36:9b:6e:88:
53:d9:c3:40:af:05:4b:ff:70:9f:5b:1e:af:4b:da:
c9:90:88:23:27:41:a1:68:9b:0a:1d:98:a7:8c:35:
72:fb:58:94:1c:30:bd:79:72:a0:51:de:c5:59:f9:
5f:38:6e:d1:91:ce:42:1f:a7:34:90:0e:4b:10:f2:
4d:bb:b3:46:69:c5:c2:e8:46:c3:2c:e6:63:59:a2:
2b:07:95:2f:ea:b1:92:51:55:09:46:ac:2c:2a:1b:
2e:12:70:62:cb:2b:d8:ac:b5:72:d8:04:f6:70:2e:
59:f6:66:19:ac:16:b7:9f:ae:44:cb:20:9b:1a:08:
5c:4b:fc:d8:89:1c:76:0c:c5:85:18:a5:5b:b6:87:
ac:3b:c2:83:da:88:f9:f7:da:b5:82:69:e4:c6:cc:
e6:74:23:a5:b9:01:d6:a2:3d:0d:25:8a:86:53:0d:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C1:A7:EA:51:84:DB:09:40:32:AD:CB:3F:CA:EF:48:4D:97:05:0F
X509v3 Authority Key Identifier:
keyid:DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:c5:15:4f:eb:2a:d6:05:32:24:e3:ed:3c:17:0b:94:d5:b5:
19:53:70:ec:09:0e:53:f6:28:d2:da:0b:53:50:3c:57:35:9e:
8a:8c:7b:35:0a:8c:56:be:cf:d0:87:d9:ff:36:05:d7:e3:20:
95:bd:5d:56:17:0e:ef:3d:c4:21:06:42:42:f5:71:ef:c3:f0:
18:9c:34:b7:cf:0a:d4:9d:6d:29:ce:eb:98:eb:55:81:94:9f:
3c:9c:4b:48:2b:ef:b4:d7:cb:bf:ec:6a:b7:10:70:e2:83:7d:
8f:3b:d2:e6:a4:7a:e9:a9:fc:86:d8:9a:0f:6e:75:a2:c8:a4:
cc:c2:61:21:b2:7c:90:fb:71:44:e3:16:8a:c4:a3:90:41:74:
96:7e:54:6f:b1:fd:67:b5:82:2c:6b:3d:a0:e8:db:13:cc:6e:
18:17:5f:41:f3:a8:a6:04:d2:e9:b9:3a:cc:f1:94:25:5b:19:
76:f7:a0:01:e1:ec:38:27:5e:3d:4c:4a:dd:36:e9:9b:53:55:
16:40:4a:2e:07:91:56:45:7e:fd:b1:35:51:40:a8:31:bb:fa:
51:23:e5:ca:68:61:bf:c1:0b:c0:83:df:93:b2:97:6d:7d:e5:
dd:37:53:18:ad:b3:6e:4d:58:f3:78:01:d9:88:22:76:ab:7d:
42:c8:34:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:02:28 2026 by rpki-client