
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
File: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft (raw, json)
Hash identifier: 3oaNkbW+Xktgo7+2vCUNDDse2sFx9edq95LMlg+SMOU=
Subject key identifier: 74:B2:0A:B6:2C:83:AB:E0:FE:82:44:0D:46:34:B5:B6:99:B9:38:FA
Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
Certificate issuer: /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Certificate serial: 195B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
Manifest number: 1952
Signing time: Fri 12 Jun 2026 15:45:27 +0000
Manifest this update: Fri 12 Jun 2026 15:45:26 +0000
Manifest next update: Fri 19 Jun 2026 15:45:26 +0000
Files and hashes: 1: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl (hash: 8DSz/NWhbrA9lJWiWgVQkovJOygIxv9pWk0QTFirftc=)
2: AEA7C9C0818911EA81577016C4F9AE02.roa (hash: huSx5kpORQn0tkU4TRAPmVkFRxR4g/qvraibL4XJAo8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6491 (0x195b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Validity
Not Before: Jun 12 15:45:26 2026 GMT
Not After : Jun 19 15:45:26 2026 GMT
Subject: CN=6a2c2997-e2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:83:54:d6:84:99:7f:af:82:aa:5d:ec:aa:
cc:a6:c2:24:41:74:15:a3:3a:92:51:f5:7c:94:a3:
ed:fa:ed:33:29:76:b5:c8:ae:b6:19:63:ed:bd:5f:
c6:90:85:a2:07:8e:1a:c7:7b:52:9d:f4:2b:34:72:
3d:83:26:5c:33:4e:3e:5c:79:1f:1d:b5:17:52:a5:
8e:ac:d9:06:1b:aa:60:2b:f3:4b:82:85:f1:4a:74:
ee:f8:1b:bb:54:9e:46:c3:2e:94:bc:0c:dd:d9:29:
c8:6f:f9:05:dc:1b:54:43:34:fd:fe:3e:35:cf:ac:
1c:a9:f2:03:4a:26:49:fa:1e:58:c1:c9:f7:8d:14:
11:32:5e:27:f2:67:2c:7b:30:02:02:06:f0:ef:15:
82:e7:b1:e5:85:a2:e8:af:11:21:f3:af:9c:d1:b9:
dc:1b:5f:38:58:0d:c5:58:2c:09:8c:b6:4e:93:c8:
62:6f:76:a1:c0:ac:2c:17:64:33:19:7b:3a:fd:f4:
1a:13:30:fa:76:16:d5:df:f9:8c:6e:ba:04:46:e3:
47:91:2d:09:c8:62:9d:30:4d:1f:06:47:3b:c1:a7:
fc:7b:c3:5e:36:3e:5b:05:79:d1:d4:a6:4d:a2:63:
22:16:4d:cc:24:b4:03:2f:95:e4:a3:e1:87:41:27:
04:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B2:0A:B6:2C:83:AB:E0:FE:82:44:0D:46:34:B5:B6:99:B9:38:FA
X509v3 Authority Key Identifier:
keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:9a:51:79:da:86:12:01:5d:51:f8:30:53:89:2b:0c:84:0a:
cd:12:48:06:9b:7f:1f:ed:2f:34:55:19:be:b6:bf:de:90:7f:
e2:e9:36:f4:7f:45:bc:fe:05:39:4e:ad:d0:bb:f4:f1:4c:fc:
52:d1:89:ac:88:4c:26:45:6c:99:de:34:96:7f:5a:85:86:0f:
8f:1a:91:7c:e1:de:0d:e0:93:0b:5c:76:55:1f:d0:05:32:3e:
e6:16:9b:64:10:ee:c5:d0:6e:7e:7a:f0:34:44:92:cd:3a:a0:
28:d3:fe:ba:37:05:96:83:c5:39:d2:e5:9f:b3:14:f6:2e:65:
2c:9f:b1:4e:54:3b:41:9f:ae:e9:41:d9:0d:5e:2a:c9:1b:d7:
b9:32:19:4c:6d:b3:e1:54:c9:d8:4e:d0:01:7e:b5:f7:2c:ab:
a4:2f:4b:33:29:15:cd:09:eb:be:fa:d5:c8:9c:0e:97:b1:c7:
5a:6f:e0:dd:6c:c1:29:8e:f4:97:5c:b3:ae:f3:6b:db:90:87:
46:88:ae:4d:1c:14:0f:40:00:4c:a5:a5:bf:f3:f5:01:5b:c9:
7d:95:96:01:8e:e5:e7:5a:ea:76:a2:8c:46:c8:97:d7:c2:9c:
cf:cc:9c:14:30:b6:58:cb:0b:68:a3:48:12:1b:94:b8:03:c4:
f6:0e:28:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:40:11 2026 by rpki-client