
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
File: 3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft (raw, json)
Hash identifier: Z9OQpFkKtno0AsbjHB/jAvwxYt5/CkRaQWvzHSlqGvo=
Subject key identifier: 0C:E1:28:6D:28:D9:09:4D:CD:CE:1B:F1:E6:2C:66:0E:93:C9:E4:28
Authority key identifier: DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4
Certificate issuer: /CN=A91BA447/serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4
Certificate serial: 0BF4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
Manifest number: 0BE9
Signing time: Sun 26 Jul 2026 19:20:39 +0000
Manifest this update: Sun 26 Jul 2026 19:20:38 +0000
Manifest next update: Sun 02 Aug 2026 19:20:38 +0000
Files and hashes: 1: 3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl (hash: 4BJ1gh5JXJzc5vkGa1kAH0+wFFjHlt37X1MG0wELCw0=)
2: 07F14B9C426411EABA91B569C4F9AE02.roa (hash: TLQrPa6Wnmcc5hDPXNeBaqLx4fF41y0Y3S23GLJDJic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl
rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 19:20:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3060 (0xbf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA447, serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4
Validity
Not Before: Jul 26 19:20:38 2026 GMT
Not After : Aug 2 19:20:38 2026 GMT
Subject: CN=6a665e06-83a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:57:68:5b:6c:00:fb:09:94:68:e1:9b:18:
06:22:da:27:e8:b5:3a:5a:68:62:56:60:0f:10:64:
24:4c:1b:08:01:68:a4:c2:56:e4:d3:12:f0:9b:6d:
9d:64:83:4c:2c:d2:11:2d:8c:af:54:18:06:38:89:
11:e1:db:53:cd:7b:e6:17:f8:9d:cb:35:4b:8d:11:
6d:0e:80:b4:d6:8f:88:5c:31:7c:ba:ee:92:ef:b3:
18:05:10:38:36:3c:52:44:00:f7:b0:7d:f6:3d:f9:
84:41:57:bd:cd:df:bc:8b:e0:3e:f2:38:63:5f:aa:
ac:6c:06:f2:1b:35:37:fa:d5:d9:4b:14:83:5b:0b:
80:35:70:02:67:99:63:18:f3:29:2f:0b:6a:0e:df:
a6:63:bd:3b:a1:eb:6a:56:eb:e4:eb:a7:0c:22:ff:
a3:85:59:65:20:1c:a5:72:93:72:94:d4:61:93:5c:
b1:b1:30:65:0e:44:b0:ef:6e:94:97:9f:33:fb:2a:
10:49:36:d2:e4:32:b0:60:37:ca:4b:86:a8:c7:32:
a7:cb:45:8e:cb:fb:f3:8c:dc:37:40:a6:82:66:6a:
5b:93:f6:ff:dc:5e:23:1f:ce:63:3f:08:72:67:77:
37:b3:11:e4:90:43:c8:6a:38:0d:2f:3b:87:e0:87:
e8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E1:28:6D:28:D9:09:4D:CD:CE:1B:F1:E6:2C:66:0E:93:C9:E4:28
X509v3 Authority Key Identifier:
keyid:DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ad:fb:fd:c3:26:1d:1e:70:66:f9:14:3e:d3:62:a8:00:e6:
bf:d6:1c:e1:a4:48:99:14:a1:ef:30:12:48:e9:b0:35:d0:e2:
77:ea:13:3e:00:3a:05:15:cf:d7:50:c0:d4:84:e8:ae:32:9f:
c4:cc:7e:47:0e:fa:f1:49:27:17:58:57:31:fa:0b:09:67:bb:
29:87:6b:cc:6b:c8:3a:7e:d0:a2:13:8e:b6:f8:8d:05:dc:1d:
93:38:47:56:71:47:69:64:5c:58:60:2d:50:e5:bd:bc:5e:21:
09:67:c0:0c:10:43:42:93:a7:75:22:1a:5b:75:78:d7:f1:96:
85:db:64:7d:b5:59:5a:ef:b1:5c:07:a3:e1:70:64:49:b7:2e:
e4:25:67:39:1d:9a:5d:1e:f1:cb:a8:e4:82:87:65:96:5b:40:
d7:da:b9:41:42:7c:6e:ca:2f:a7:00:3f:73:9e:19:05:70:40:
51:4a:d9:83:a6:0f:f0:32:03:5c:81:8a:df:95:45:0d:dd:5a:
5f:30:7a:4a:51:8e:9b:41:a2:d3:4f:9f:68:a5:78:70:bf:d4:
23:3c:41:1f:da:e1:12:7f:8e:2e:73:bf:3b:d2:96:3f:6e:72:
93:bb:03:b4:83:82:4c:8a:42:07:ec:6d:c2:dc:c0:c7:a9:9f:
53:81:fb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:27:36 2026 by rpki-client