
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft
File: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft (raw, json)
Hash identifier: eoAhz9xIK2FkpA82u62Sw3YbVXnLgQdI3wf1xawJM/Q=
Subject key identifier: CD:AA:D9:ED:B6:6D:E8:64:8B:4D:9E:21:7D:08:F0:4F:62:6E:95:28
Authority key identifier: DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46
Certificate issuer: /CN=A91CDCF5/serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246
Certificate serial: 68
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft
Manifest number: 66
Signing time: Mon 27 Jul 2026 10:18:07 +0000
Manifest this update: Mon 27 Jul 2026 10:18:06 +0000
Manifest next update: Mon 03 Aug 2026 10:18:06 +0000
Files and hashes: 1: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl (hash: JZntLXJbNQ56mjVZerfNyBNN7dkmm6IXVpmJ7jSR6Lc=)
2: D7C273FAF1EF11F0A394FA90446F56BC.roa (hash: A79k1yFYKBfdbEJpqBRI+HCzddA3FuLd0fdzTClpX6Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl
rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:18:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDCF5, serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246
Validity
Not Before: Jul 27 10:18:06 2026 GMT
Not After : Aug 3 10:18:06 2026 GMT
Subject: CN=6a67305e-5094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:ad:ae:ba:0d:2b:54:a9:04:7a:b2:c6:ac:
6a:c4:b2:4a:8c:83:2b:62:27:5b:05:48:00:25:74:
9a:46:70:31:9e:ec:a9:48:af:26:58:3c:f5:3a:5f:
60:23:91:27:ae:d7:55:02:0c:e4:d0:4c:c7:12:6c:
b4:c6:5c:8c:ec:a8:47:dc:a8:32:c8:57:c4:00:b1:
1f:16:7c:1e:91:ac:48:4e:4c:96:b5:2a:2f:bb:57:
6e:64:0d:7c:04:c8:01:bb:44:f2:c5:0e:b2:3d:09:
e8:2e:5c:76:ef:c1:f3:fe:f5:67:2c:bd:5b:f1:a6:
d6:a1:bd:f3:f4:2f:43:ae:38:13:bc:53:fa:8b:f0:
39:9d:d5:16:a2:47:bc:5a:41:27:24:60:58:18:96:
47:75:d6:9b:41:39:ff:21:0c:60:e5:ca:44:b0:27:
e7:5c:19:84:b3:df:42:5a:8a:0e:94:77:cf:ed:d1:
f8:13:97:bf:8a:5b:9a:4e:2d:0f:e5:0a:a5:4e:72:
9e:d9:1d:1a:e4:8d:f4:21:85:8c:0c:db:63:10:d8:
ec:22:96:62:c5:13:c4:5d:00:42:e8:d5:70:d0:2f:
d8:b0:4a:ae:7d:3c:a1:da:ba:12:2c:fd:a0:46:ee:
f1:27:74:92:c9:21:fe:82:46:df:c5:5f:0e:43:ba:
71:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AA:D9:ED:B6:6D:E8:64:8B:4D:9E:21:7D:08:F0:4F:62:6E:95:28
X509v3 Authority Key Identifier:
keyid:DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:54:b3:2c:7d:49:33:a4:38:ea:25:fd:17:2b:a7:7e:46:c7:
41:d7:55:e1:8f:99:24:31:92:15:28:ec:4f:b6:05:c4:b6:d0:
f6:b4:33:8d:b8:3f:38:91:f8:4c:a2:8a:a4:78:b0:a9:32:ea:
52:b3:68:64:10:d1:7d:6b:ea:06:05:24:b3:b7:41:54:dd:fd:
51:97:9b:9d:1c:bf:e5:e4:ed:d9:39:7a:5d:32:87:04:15:68:
2e:1d:5c:b8:bd:77:29:5e:78:70:d3:1c:34:89:46:76:0a:db:
be:11:5c:23:97:9e:cf:b3:e1:4b:e1:59:ac:6a:00:31:0e:19:
79:86:ad:5d:db:44:7b:fe:4e:b4:a7:ee:aa:a4:84:b3:f9:7a:
4e:52:27:b9:a3:fb:80:c6:17:38:9b:99:cf:5c:e0:30:18:f7:
cd:93:77:f8:fd:7c:0e:58:21:60:37:c2:da:b4:aa:e8:25:88:
f3:a6:74:97:03:a1:67:6b:df:6e:a4:54:6d:22:bd:12:cc:b9:
75:24:cb:d1:83:61:15:24:4a:80:bd:ba:48:91:4b:27:02:0f:
b8:48:3c:6a:d5:89:21:c5:00:c8:83:e5:bf:48:f0:0b:49:92:
b2:dd:8f:96:66:88:e4:9d:7f:c7:54:a1:17:64:78:43:a2:11:
35:fb:a7:73
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
RENGNTExMC8GA1UEBRMoREYwRDUwQzdFRTJCMTE3NkQ1OEQxOEQ4NUQyNTkyOTM2
QUQ3QjI0NjAeFw0yNjA3MjcxMDE4MDZaFw0yNjA4MDMxMDE4MDZaMBgxFjAUBgNV
BAMTDTZhNjczMDVlLTUwOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9C62uug0rVKkEerLGrGrEskqMgytiJ1sFSAAldJpGcDGe7KlIryZYPPU6X2Aj
kSeu11UCDOTQTMcSbLTGXIzsqEfcqDLIV8QAsR8WfB6RrEhOTJa1Ki+7V25kDXwE
yAG7RPLFDrI9CeguXHbvwfP+9WcsvVvxptahvfP0L0OuOBO8U/qL8Dmd1RaiR7xa
QSckYFgYlkd11ptBOf8hDGDlykSwJ+dcGYSz30Jaig6Ud8/t0fgTl7+KW5pOLQ/l
CqVOcp7ZHRrkjfQhhYwM22MQ2OwilmLFE8RdAELo1XDQL9iwSq59PKHauhIs/aBG
7vEndJLJIf6CRt/FXw5DunHHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzarZ7bZt
6GSLTZ4hfQjwT2JulSgwHwYDVR0jBBgwFoAU3w1Qx+4rEXbVjRjYXSWSk2rXskYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQ0Y1Lzc1RkU2RjRBRjFF
MzExRjBCREVDNzJCNTQxNkY1NkJDLzN3MVF4LTRyRVhiVmpSallYU1dTazJyWHNr
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvM3cxUXgtNHJFWGJWalJqWVhTV1NrMnJYc2tZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE
Q0Y1Lzc1RkU2RjRBRjFFMzExRjBCREVDNzJCNTQxNkY1NkJDLzN3MVF4LTRyRVhi
VmpSallYU1dTazJyWHNrWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBQVLMsfUkzpDjqJf0XK6d+RsdB11Xhj5kkMZIVKOxPtgXEttD2tDONuD84kfhM
ooqkeLCpMupSs2hkENF9a+oGBSSzt0FU3f1Rl5udHL/l5O3ZOXpdMocEFWguHVy4
vXcpXnhw0xw0iUZ2Ctu+EVwjl57Ps+FL4VmsagAxDhl5hq1d20R7/k60p+6qpISz
+XpOUie5o/uAxhc4m5nPXOAwGPfNk3f4/XwOWCFgN8LatKroJYjzpnSXA6Fna99u
pFRtIr0SzLl1JMvRg2EVJEqAvbpIkUsnAg+4SDxq1YkhxQDIg+W/SPALSZKy3Y+W
ZojknX/HVKEXZHhDohE1+6dz
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:25:06 2026 by rpki-client