
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
File: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft (raw, json)
Hash identifier: cQvBeWXN5My3Pb3eVQoJYVdG9Mi8Z1dkuaRzgcCs19o=
Subject key identifier: 62:C3:11:AC:C6:5A:19:13:CB:4E:35:8C:4D:48:4F:9C:FB:FE:63:EC
Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
Certificate issuer: /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Certificate serial: 1922
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
Manifest number: 191B
Signing time: Sat 28 Feb 2026 15:48:42 +0000
Manifest this update: Sat 28 Feb 2026 15:48:42 +0000
Manifest next update: Sat 07 Mar 2026 15:48:42 +0000
Files and hashes: 1: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl (hash: YjUQ+bmb59hUhH4m9+pdzcxUHVt43YlLJEe+dxFPMZ0=)
2: AEA7C9C0818911EA81577016C4F9AE02.roa (hash: iFM56WrKeXwdoA2Uh6qPu0ZtIRkJDq6/ES1KC7jnXoA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6434 (0x1922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Validity
Not Before: Feb 28 15:48:42 2026 GMT
Not After : Mar 7 15:48:42 2026 GMT
Subject: CN=69a30e5a-3fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6c:c6:bd:b8:b8:d7:f8:5d:dd:fc:e7:07:b5:
09:e2:a4:9f:74:bb:c9:ed:71:e6:40:f0:0f:c5:17:
2f:cd:54:8d:9d:af:4e:97:b0:fd:a6:24:47:ad:84:
d8:26:fa:0a:53:98:2e:cd:90:2e:a4:ec:30:92:af:
d9:73:84:eb:b7:48:78:88:1d:3f:47:41:50:0f:98:
d2:ab:2d:b1:1c:7b:e9:e4:97:7b:45:9c:64:38:26:
c1:60:44:62:54:da:9e:c9:d8:26:67:dd:36:09:f2:
2e:bc:47:72:28:36:49:f4:84:21:37:6a:4c:86:49:
12:c4:e5:ac:17:4d:57:38:2a:54:07:6f:4e:01:70:
4a:af:69:97:22:75:cd:c8:e3:63:75:73:12:cd:cc:
61:93:90:61:78:ad:dc:4a:28:c7:3e:2f:0e:b7:fd:
b0:ae:30:5a:46:6a:63:c2:1d:e9:fa:2c:19:dc:c5:
af:40:3e:83:6c:33:6e:6d:5e:40:ba:36:b6:37:aa:
cd:86:f1:83:d1:fd:5a:6b:49:a6:99:a2:bb:57:58:
02:75:eb:cf:71:24:57:81:16:be:26:3e:2f:03:05:
42:0a:7b:9f:08:aa:e1:b0:d4:52:00:1e:31:d1:2a:
d1:a5:7c:48:5f:f8:41:ac:e5:0e:32:cf:49:ee:2d:
48:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C3:11:AC:C6:5A:19:13:CB:4E:35:8C:4D:48:4F:9C:FB:FE:63:EC
X509v3 Authority Key Identifier:
keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:19:9d:95:ce:39:ff:29:8e:04:81:f9:a9:dc:93:76:f2:c0:
3a:59:a5:39:bc:6e:fc:38:82:e0:0a:b9:65:ad:5e:46:f9:98:
58:50:49:d9:3e:7f:e1:33:d1:0c:28:0f:6a:23:9c:59:cf:cb:
fa:40:9d:7d:39:88:40:f8:60:99:8b:05:09:29:9e:4d:61:a1:
9b:a6:b5:25:09:6b:74:06:73:a2:2b:88:0d:cc:f9:e6:67:0d:
7d:a6:f0:9f:de:7f:ba:0b:71:d3:bc:44:73:e2:22:66:60:cb:
97:1c:f9:b2:51:31:4f:41:1d:ba:a4:6d:eb:b1:4e:9e:3a:a3:
66:5c:43:b7:2b:ca:51:5f:fa:e0:de:51:f8:4e:12:df:93:2f:
9e:5e:13:a9:ee:d2:2d:2c:77:51:06:ed:a5:34:10:f6:b6:6e:
a7:c3:7f:be:b2:64:50:77:0a:6f:6a:f5:db:58:47:df:60:fc:
ba:e2:90:ba:89:69:9d:8a:96:93:46:ed:62:a4:3e:28:f3:b0:
2e:5e:d9:90:a9:c0:dc:f7:62:a4:81:96:f1:d9:15:a6:5d:eb:
00:3f:2d:b4:73:3a:18:0f:1a:01:d2:89:f0:1e:4a:92:08:b5:
f0:ce:35:af:75:a2:ec:fc:35:ca:b8:2b:c2:b9:d8:bf:c6:38:
09:0c:e7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:03:07 2026 by rpki-client