
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft
File: 3Y89lj-o0fItV_Tfspq9cNJVjjc.mft (raw, json)
Hash identifier: /nkrEUCrcejlWD12IaQ2n+mseoeL0FjWNm7w2p/P/ns=
Subject key identifier: 7E:CE:F4:10:61:1F:12:7E:9D:E8:88:94:C9:E0:0A:A7:C6:43:D0:5A
Authority key identifier: DD:8F:3D:96:3F:A8:D1:F2:2D:57:F4:DF:B2:9A:BD:70:D2:55:8E:37
Certificate issuer: /CN=A91D506C/serialNumber=DD8F3D963FA8D1F22D57F4DFB29ABD70D2558E37
Certificate serial: 039A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft
Manifest number: 0393
Signing time: Mon 27 Jul 2026 01:50:05 +0000
Manifest this update: Mon 27 Jul 2026 01:50:05 +0000
Manifest next update: Mon 03 Aug 2026 01:50:05 +0000
Files and hashes: 1: 3Y89lj-o0fItV_Tfspq9cNJVjjc.crl (hash: +saSj+CDkvjELIvcfFeB122sHQznqhZX/SmaI2AtM7s=)
2: 76C5241CF47311EC8721C33DC4F9AE02.roa (hash: PJNN23fDPqaEdDsm5vZGPWP/DmPwgv21Z3U/EtL0Bso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.crl
rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 922 (0x39a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D506C, serialNumber=DD8F3D963FA8D1F22D57F4DFB29ABD70D2558E37
Validity
Not Before: Jul 27 01:50:05 2026 GMT
Not After : Aug 3 01:50:05 2026 GMT
Subject: CN=6a66b94d-a218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:0d:e5:57:01:c9:9d:83:3a:8a:ce:dd:29:
b4:97:66:3a:42:b4:1e:7e:d5:72:8f:e3:72:cf:69:
b5:47:1a:6f:1a:91:91:8b:83:94:ce:f3:92:20:94:
13:69:54:e0:7d:ec:c6:0f:01:75:6b:15:39:19:bc:
fe:78:ca:7e:c4:e9:5a:7e:e8:e7:2b:87:62:3d:3b:
b3:e6:7b:c5:c2:37:53:1f:0e:3c:87:d5:df:09:a7:
7f:7a:91:ab:20:0b:1e:3d:cc:34:73:3b:a9:b4:ac:
ed:2c:e5:32:ac:35:5f:1e:91:13:b9:6c:52:f3:f6:
3a:70:d8:d2:6f:5c:ea:ba:90:fe:01:34:9e:bd:38:
52:91:a2:a0:46:f1:35:61:f4:e7:60:61:3b:44:04:
f4:a5:23:86:55:da:ac:ea:e8:ba:1c:1e:7a:f7:44:
d2:74:2e:71:ac:83:08:18:2c:57:73:59:95:3c:ae:
70:ef:94:d8:e0:c5:61:b7:08:b0:bf:07:dc:1e:10:
f5:69:49:52:c4:c6:06:be:18:43:2b:7d:20:2a:ac:
3c:f8:94:01:8d:d2:b5:74:60:bc:20:2b:cd:3a:e9:
c9:52:f7:cb:f6:ff:50:b1:83:9c:d6:a8:73:b5:4e:
b3:f6:72:3a:c8:2e:9e:c7:28:00:20:35:e2:19:ee:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CE:F4:10:61:1F:12:7E:9D:E8:88:94:C9:E0:0A:A7:C6:43:D0:5A
X509v3 Authority Key Identifier:
keyid:DD:8F:3D:96:3F:A8:D1:F2:2D:57:F4:DF:B2:9A:BD:70:D2:55:8E:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:ed:92:30:15:66:0c:36:41:7d:18:e2:01:a7:a4:cc:8a:7f:
c7:a3:dd:00:53:b1:7a:d0:a4:88:9a:fd:32:5c:ff:08:5a:ec:
fe:52:82:86:2a:af:64:47:04:ee:0f:97:76:0e:b6:63:64:65:
de:6a:01:86:10:d4:76:b3:88:11:1a:4a:e9:67:15:9b:79:d1:
72:5d:0f:9a:7f:21:b9:05:34:4e:76:da:fa:bd:ed:8a:52:50:
9d:47:a8:08:ed:21:dc:90:e6:9c:6d:2e:03:4c:54:58:43:6a:
fb:77:42:3d:bb:fe:18:29:8f:c8:6b:cc:3c:e4:c3:0e:f6:31:
30:3f:98:7b:9f:ba:0d:4a:5d:77:97:72:08:db:9c:af:94:d2:
1f:59:1e:38:0c:dd:4c:8d:f2:9c:98:36:0f:f9:e8:a8:b5:6b:
fc:93:d8:cb:4d:20:a6:c9:80:58:64:1d:65:17:54:39:a3:be:
4a:b5:8d:e8:ca:20:81:63:09:c5:9a:18:81:6b:22:aa:f3:89:
37:75:38:3a:a4:b0:56:9e:b7:6a:f6:9c:0d:09:7b:f2:73:bb:
3e:41:b9:00:84:6e:0a:ad:15:1a:59:65:e7:0a:db:66:7e:86:
df:c0:87:e4:ff:7d:6b:83:a4:0b:b6:1a:3c:4a:ee:2d:a4:f6:
a2:76:ac:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:42 2026 by rpki-client