
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
File: I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft (raw, json)
Hash identifier: ywLU9trgrDb0GhGwbXmPUdIPxTt2x+iwFdB2zAR90dE=
Subject key identifier: 3C:7C:2B:EC:E9:14:D8:55:C9:41:55:F8:F6:7A:E5:3F:C9:10:AD:9E
Authority key identifier: 23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15
Certificate issuer: /CN=A91E22E5/serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
Certificate serial: 02F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
Manifest number: 02F1
Signing time: Mon 27 Jul 2026 02:23:44 +0000
Manifest this update: Mon 27 Jul 2026 02:23:43 +0000
Manifest next update: Mon 03 Aug 2026 02:23:43 +0000
Files and hashes: 1: I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl (hash: IuWEhK9e1vUPJ3f88jqCCkmjpQcx7c3vHTIdIxl90EY=)
2: 623705DA339111ED9249064BC4F9AE02.roa (hash: roernNB+OJNNt1UVzBh6SQSSqUE+e0U1ZxC3K0oXdnw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl
rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 759 (0x2f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E22E5, serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
Validity
Not Before: Jul 27 02:23:43 2026 GMT
Not After : Aug 3 02:23:43 2026 GMT
Subject: CN=6a66c12f-a807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:4d:95:63:f6:33:f6:68:bd:4e:04:ef:c2:
b0:80:be:06:5b:85:ba:02:fd:ba:e0:96:e1:d7:c6:
5c:d6:a8:24:2b:3f:22:14:ed:80:a4:5e:27:19:c5:
ff:9b:5b:3e:62:57:77:a9:ec:bc:b7:cf:29:7d:04:
36:7c:cb:86:0e:34:63:1b:41:56:0d:89:bb:26:d0:
1a:4d:75:80:09:af:d3:1f:f9:46:15:e4:b2:e9:09:
7d:90:b5:e4:0b:74:26:09:39:8d:8b:d5:1b:08:7c:
93:f3:35:c4:34:e1:ce:39:5d:5c:1a:9f:a0:99:c3:
ec:f8:b4:25:1f:13:33:3c:3f:2c:c4:4a:5e:85:f6:
4b:52:cd:a6:ed:23:bd:59:31:64:75:d3:1a:bf:57:
09:17:d4:81:15:88:b0:1d:97:00:9e:00:54:62:73:
5e:d4:0d:87:21:57:cb:0d:99:b8:d8:31:30:c3:60:
51:f9:05:1a:34:9f:76:c7:83:d3:61:16:62:3a:48:
03:e7:08:06:bc:7e:be:0d:6f:63:bf:12:ab:ee:bd:
4b:e9:34:6e:0f:c0:ac:d9:3a:1b:1e:c1:3c:40:5b:
5a:be:2a:09:9d:d2:f6:7c:ff:26:0c:72:c5:f5:00:
83:27:57:60:bd:26:11:36:6b:eb:3a:5b:8f:2d:46:
34:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7C:2B:EC:E9:14:D8:55:C9:41:55:F8:F6:7A:E5:3F:C9:10:AD:9E
X509v3 Authority Key Identifier:
keyid:23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:aa:df:30:33:27:e0:f2:8e:5c:ec:c2:78:2f:c9:ef:8f:b2:
66:ad:d2:61:5f:d6:ab:49:e2:ff:bc:49:9f:11:25:7d:b9:c3:
27:e1:cb:62:c6:9e:f3:4b:43:49:c2:d7:84:45:d4:c7:ff:b7:
c2:53:fa:da:c8:52:d9:2d:d5:22:1e:f6:a6:0a:b8:c9:2b:88:
e8:7e:c9:1d:37:c7:fc:d2:06:3c:44:77:54:67:a6:6f:d5:a9:
9b:a7:4b:9d:86:69:ea:42:98:0b:5d:18:11:49:4d:47:9a:29:
5c:24:a5:72:3c:1e:a8:26:ab:f2:b7:d7:19:7c:5c:23:ac:fe:
24:df:d7:f3:bb:99:cf:89:9a:cb:64:9c:1e:9b:38:ec:dc:0c:
44:51:70:68:c9:1f:f2:46:ff:95:c7:64:b0:88:83:38:ed:15:
e2:27:57:3f:9b:5d:aa:25:37:c6:74:02:78:d4:12:6f:41:9b:
6a:51:71:c3:27:80:be:90:ee:a6:d3:13:33:cf:1c:3b:72:d1:
3f:1a:ca:ee:84:eb:96:89:95:a7:1d:49:d0:b8:3f:1d:28:d3:
3f:cb:3d:3c:4b:7b:f5:a9:bb:a8:6d:ee:67:e1:46:be:f7:c8:
77:50:8b:31:cd:4e:b8:46:4c:c6:0c:8b:52:8f:dd:fa:34:18:
8f:35:e9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:59 2026 by rpki-client