
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft
File: S3Z_4wTU8n9REYZLp0O5R5zhSns.mft (raw, json)
Hash identifier: lh6gvKWeBp6e4Lb1APe9Dm1NkTHbaM/l5lu5VF6Hzq4=
Subject key identifier: D1:A8:05:4D:1E:08:84:23:86:01:82:3F:96:B8:73:CD:BA:D8:4A:C3
Authority key identifier: 4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B
Certificate issuer: /CN=A91D53AC/serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B
Certificate serial: 3555
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft
Manifest number: 354F
Signing time: Fri 12 Jun 2026 14:50:42 +0000
Manifest this update: Fri 12 Jun 2026 14:50:41 +0000
Manifest next update: Fri 19 Jun 2026 14:50:41 +0000
Files and hashes: 1: S3Z_4wTU8n9REYZLp0O5R5zhSns.crl (hash: ZefJw8sroLk1BAG8Nb9GfHKMdnme9eLrexwXg63mHpQ=)
2: 0C9FD154619611EEADD97F70C4F9AE02.roa (hash: nLdLNd1FqbqzPBvmomvzxR8c2GOexrERlWPqFeDBvG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl
rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13653 (0x3555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D53AC, serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B
Validity
Not Before: Jun 12 14:50:41 2026 GMT
Not After : Jun 19 14:50:41 2026 GMT
Subject: CN=6a2c1cc2-6003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:58:78:2a:93:07:ab:9a:a3:a6:bf:ee:94:07:
45:8e:c3:9b:e3:e0:70:d7:fe:2d:f5:30:cf:29:f7:
5f:8c:b1:63:52:ea:34:bc:cc:8c:ab:22:ad:c2:2c:
10:33:0f:fa:24:0c:49:3a:71:69:8f:67:74:e1:c4:
25:52:71:b6:86:ef:2b:73:50:66:ee:54:e8:1c:16:
cf:f9:a3:49:9f:02:3a:41:12:f1:1f:ce:91:9b:5f:
fb:43:a3:be:5e:5c:56:cf:b8:7d:2d:ce:d8:5d:01:
39:df:0a:66:1d:81:31:d6:c3:f8:5c:49:83:a8:91:
29:1a:48:cf:ff:8f:78:b3:e3:70:0c:ae:e5:bc:95:
21:31:05:90:34:8a:28:57:5c:35:70:49:22:4e:18:
90:6c:c8:28:aa:b5:7c:bc:65:93:f0:8d:7c:6c:c1:
16:81:6f:10:22:ed:76:15:a4:b5:e5:68:79:97:75:
3e:18:ad:7e:16:d9:6d:56:2a:fc:75:8c:47:60:da:
6e:7d:cd:3d:94:cb:22:7c:04:bc:6c:78:74:96:44:
76:98:e9:19:ed:1a:35:f2:3f:4a:0f:95:87:54:9e:
d0:53:90:8f:b3:c7:0f:55:42:8c:e6:ab:ae:8b:19:
a9:e9:a6:9c:ba:ef:44:64:9c:92:39:53:f6:95:54:
1f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A8:05:4D:1E:08:84:23:86:01:82:3F:96:B8:73:CD:BA:D8:4A:C3
X509v3 Authority Key Identifier:
keyid:4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2d:65:09:6b:58:ee:aa:79:32:76:24:1f:7c:38:5c:d1:21:
7f:78:b6:96:7f:4c:e9:32:40:d7:ad:48:9f:43:b8:38:95:dd:
05:9e:6d:fa:24:ea:f5:a8:ce:96:12:fb:d4:65:db:5e:9e:f6:
a2:c1:6f:4b:5d:af:c1:19:1a:67:c6:d0:d8:11:f1:93:df:7a:
4f:ec:0a:b0:14:95:45:d6:72:5d:4c:6f:46:d4:be:29:50:9d:
cc:63:82:1f:23:2d:89:6b:fa:c6:2e:a5:14:2f:a0:7f:25:ef:
4d:11:83:69:65:18:4f:72:41:5f:5e:e6:1c:05:f1:37:10:39:
aa:0b:fd:55:e5:fd:d2:d4:70:58:45:af:34:b4:50:07:ae:0c:
a4:ec:a8:2f:e6:b2:02:4e:5f:16:dd:60:a2:3d:12:2b:3a:df:
b3:ff:79:5f:30:70:3d:44:64:14:ad:4f:de:80:5b:81:35:c8:
4e:6a:f0:f7:a8:1a:64:e6:fc:56:10:57:63:d3:bb:17:df:f6:
98:66:a0:50:68:81:3c:44:17:a3:81:c0:1a:2c:09:51:3d:35:
08:4d:5c:0c:20:9c:5d:c9:d5:e7:83:29:d2:11:6d:55:47:a9:
10:15:6f:cf:22:4f:b4:fb:f9:80:9c:e6:59:1a:ae:c2:ed:f1:
98:9b:cd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:22:40 2026 by rpki-client