
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft
File: 3IDIXlEBCJqyQl0_yRd5haASXG4.mft (raw, json)
Hash identifier: 1WoC/FHH4hADML3tgSw8vx6Djcd+//lYs2tZYOBrx5U=
Subject key identifier: 21:8E:66:B1:D2:4E:0B:BC:27:7A:3A:FB:47:BE:86:12:7E:1F:F4:EB
Authority key identifier: DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E
Certificate issuer: /CN=A91D74A6/serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft
Manifest number: 012E
Signing time: Mon 27 Jul 2026 07:47:26 +0000
Manifest this update: Mon 27 Jul 2026 07:47:25 +0000
Manifest next update: Mon 03 Aug 2026 07:47:25 +0000
Files and hashes: 1: 3IDIXlEBCJqyQl0_yRd5haASXG4.crl (hash: dGmldEpWxX6X7ydgmBolsKOrDcGKcJhTw4zVSmLqqc4=)
2: 727850D8D3EF11EFB596E00CC4F9AE02.roa (hash: q0DHa5Wl8wyW8RcDFN0Qyu7ppbrZZWsxIyNW/w1xs0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl
rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D74A6, serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E
Validity
Not Before: Jul 27 07:47:25 2026 GMT
Not After : Aug 3 07:47:25 2026 GMT
Subject: CN=6a670d0e-efd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:0c:0a:f9:a2:90:60:3f:9d:8e:fb:bd:20:
f9:30:42:62:36:d7:dc:4a:3b:a7:e4:47:5f:27:90:
50:47:f5:73:6d:fd:60:52:c0:dc:6f:f8:9b:dc:c2:
b9:41:0a:fb:1e:ef:55:5b:d3:f9:d6:26:48:b1:27:
bc:c2:d8:ef:b8:40:0d:55:58:b8:0b:76:e7:7b:d0:
ae:fa:b1:52:6c:34:6b:77:b4:3d:cd:20:86:9e:77:
56:7b:c5:f2:09:7b:10:a8:cb:d6:d6:65:c1:c7:51:
d8:c1:43:5d:18:ad:cb:00:56:ef:d6:b0:21:46:0d:
6f:60:9d:18:33:19:66:4b:28:34:38:84:32:37:ea:
8a:1e:c9:ef:fe:6f:25:12:77:a6:3a:76:43:8a:d4:
1f:cb:25:f4:40:0f:7a:e2:d9:fc:ef:13:a5:d4:ee:
06:9a:b9:a4:b9:4a:bf:50:6a:35:cc:33:d6:5d:d0:
6e:cc:74:6b:a4:58:c6:df:a9:1d:43:74:88:51:ef:
74:35:cc:bb:e6:95:cb:73:0f:7f:39:53:f9:12:65:
80:7e:90:91:01:e1:3d:40:15:28:5c:8f:62:98:38:
4f:c9:48:67:89:80:35:05:77:e1:b1:b7:72:c9:1f:
1d:12:fb:04:f2:e2:10:ac:22:81:c1:7f:79:c7:ae:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8E:66:B1:D2:4E:0B:BC:27:7A:3A:FB:47:BE:86:12:7E:1F:F4:EB
X509v3 Authority Key Identifier:
keyid:DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f7:f4:d3:94:f7:46:25:3f:63:2a:12:6f:28:e9:ff:3f:12:
59:f1:ea:87:f3:98:8c:25:a0:42:75:1b:c9:ee:8b:9e:8b:d5:
66:6b:12:30:1a:d0:ad:71:d6:c0:46:59:e3:d9:a9:f0:42:a2:
98:05:3f:31:1f:1c:da:b1:d2:cc:f3:ef:a5:b1:3b:7f:d6:33:
ae:5c:ea:03:6e:39:72:c1:a4:6c:61:df:24:be:ac:13:20:2a:
57:0d:c6:7e:9b:6b:8c:0d:d4:90:f6:76:00:07:55:30:d9:ea:
0a:ca:c1:ae:02:ff:3f:7e:a6:bf:f4:79:23:5d:13:98:21:50:
d1:e4:0d:6f:cf:ce:c0:38:d9:fd:83:e2:37:61:10:8d:dd:38:
d1:3e:94:7f:c5:80:c4:88:55:20:cc:39:1e:e8:cb:03:6a:f6:
96:c2:33:aa:ff:d0:c1:06:4c:6e:58:d7:0f:85:99:a5:d9:fb:
f8:4a:52:ea:eb:62:b6:d3:ac:cf:56:46:46:77:57:d4:d8:15:
f4:fe:a9:6a:4c:78:6a:6e:71:37:b1:10:2b:fd:4c:a6:23:2d:
4d:f2:f1:35:a1:e8:74:d1:77:65:7a:34:0c:cb:61:66:a4:ba:
b1:9b:69:7f:59:49:6d:b7:46:31:66:d9:28:83:36:fe:c9:36:
35:04:fd:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDc0QTYxMTAvBgNVBAUTKERDODBDODVFNTEwMTA4OUFCMjQyNUQzRkM5MTc3OTg1
QTAxMjVDNkUwHhcNMjYwNzI3MDc0NzI1WhcNMjYwODAzMDc0NzI1WjAYMRYwFAYD
VQQDEw02YTY3MGQwZS1lZmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxlkMCvmikGA/nY77vSD5MEJiNtfcSjun5EdfJ5BQR/Vzbf1gUsDcb/ib3MK5
QQr7Hu9VW9P51iZIsSe8wtjvuEANVVi4C3bne9Cu+rFSbDRrd7Q9zSCGnndWe8Xy
CXsQqMvW1mXBx1HYwUNdGK3LAFbv1rAhRg1vYJ0YMxlmSyg0OIQyN+qKHsnv/m8l
EnemOnZDitQfyyX0QA964tn87xOl1O4GmrmkuUq/UGo1zDPWXdBuzHRrpFjG36kd
Q3SIUe90Ncy75pXLcw9/OVP5EmWAfpCRAeE9QBUoXI9imDhPyUhniYA1BXfhsbdy
yR8dEvsE8uIQrCKBwX95x679EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCGOZrHS
Tgu8J3o6+0e+hhJ+H/TrMB8GA1UdIwQYMBaAFNyAyF5RAQiaskJdP8kXeYWgElxu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzRBNi83MTcxQkJGMkQx
OUMxMUVGODNDRUFEM0NDNEY5QUUwMi8zSURJWGxFQkNKcXlRbDBfeVJkNWhhQVNY
RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzNJRElYbEVCQ0pxeVFsMF95UmQ1aGFBU1hHNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NzRBNi83MTcxQkJGMkQxOUMxMUVGODNDRUFEM0NDNEY5QUUwMi8zSURJWGxFQkNK
cXlRbDBfeVJkNWhhQVNYRzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnff005T3RiU/YyoSbyjp/z8SWfHqh/OYjCWgQnUbye6LnovVZmsSMBrQrXHW
wEZZ49mp8EKimAU/MR8c2rHSzPPvpbE7f9YzrlzqA245csGkbGHfJL6sEyAqVw3G
fptrjA3UkPZ2AAdVMNnqCsrBrgL/P36mv/R5I10TmCFQ0eQNb8/OwDjZ/YPiN2EQ
jd040T6Uf8WAxIhVIMw5HujLA2r2lsIzqv/QwQZMbljXD4WZpdn7+EpS6utittOs
z1ZGRndX1NgV9P6pakx4am5xN7EQK/1MpiMtTfLxNaHodNF3ZXo0DMthZqS6sZtp
f1lJbbdGMWbZKIM2/sk2NQT99w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:39 2026 by rpki-client