
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
File: gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft (raw, json)
Hash identifier: uLrbEOcDuIxohRg6NFjXmn+JHAl38qqt4h9JmKID8FI=
Subject key identifier: AB:AC:DB:4A:F0:8D:A1:FD:84:79:E5:AD:16:B4:58:04:DA:52:E8:01
Authority key identifier: 81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
Certificate issuer: /CN=A91E6BEF/serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Certificate serial: 0E76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
Manifest number: 0E6A
Signing time: Tue 28 Jul 2026 17:52:35 +0000
Manifest this update: Tue 28 Jul 2026 17:52:34 +0000
Manifest next update: Tue 04 Aug 2026 17:52:34 +0000
Files and hashes: 1: gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl (hash: LkJlPkhUEwoICWG6sFYLPJEd70Lq3x8d0SeyOjnYAjo=)
2: FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa (hash: DD1ADaREQj4FZ7nnow63JObODw7KCChH9CO7F5RCGA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:52:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3702 (0xe76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6BEF, serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Validity
Not Before: Jul 28 17:52:34 2026 GMT
Not After : Aug 4 17:52:34 2026 GMT
Subject: CN=6a68ec63-758d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:6f:e7:7b:37:76:5f:69:ae:56:04:9c:3c:
11:13:2f:ce:27:10:0c:48:dd:5c:b7:cd:96:cc:df:
ff:5c:a7:db:b4:e1:33:1b:e2:d8:d7:63:53:b4:f4:
9e:89:73:25:69:71:1a:c6:fb:2e:f9:91:49:b8:5b:
ab:fc:01:65:38:28:80:4e:49:5a:f4:1d:33:6b:49:
76:4d:36:bc:f6:9a:e9:85:7a:7d:2c:7a:07:87:93:
8a:bc:7a:31:bf:dd:9b:aa:8a:f6:a0:80:53:67:a1:
c8:46:18:f6:fe:97:81:e8:02:3d:0b:d5:ac:51:7d:
79:77:d3:81:7d:e4:13:f2:00:1a:99:3f:a2:ae:05:
dd:ac:14:29:9b:5f:e2:f4:ad:6a:24:b2:73:8b:56:
73:1d:fc:4a:10:aa:51:92:81:1c:6a:f6:7d:90:80:
21:8b:92:1f:7a:fd:98:0a:0b:bf:f6:b4:00:d9:ed:
2f:b1:c9:b0:22:83:14:40:84:97:99:15:1e:27:d5:
60:c8:d8:7c:82:94:4c:f1:ee:d1:e1:4d:7d:9d:ed:
27:ea:49:f6:7d:5d:42:55:e8:6f:09:87:82:4c:42:
f9:9a:1c:85:a6:53:73:8a:d6:3d:4e:77:05:85:f1:
9b:58:d5:cd:84:68:c2:19:ea:6d:06:b3:26:23:b2:
24:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AC:DB:4A:F0:8D:A1:FD:84:79:E5:AD:16:B4:58:04:DA:52:E8:01
X509v3 Authority Key Identifier:
keyid:81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:59:2c:df:92:91:a1:95:08:76:80:5b:5b:32:d6:00:ed:ee:
74:01:68:a0:b7:85:7f:c3:b5:fd:4a:cb:b1:5d:3d:14:6b:f7:
bf:bc:05:d7:51:d1:49:39:6a:9c:cf:7d:46:63:30:2a:23:30:
37:e4:f3:f1:c7:49:7d:06:1f:77:0c:3c:f9:c6:7b:29:db:d0:
fc:69:76:7e:cd:e7:12:7f:84:f6:77:d2:88:85:07:f1:56:ad:
31:c6:8c:f3:48:4d:73:bb:6f:89:ea:d0:40:70:eb:b4:e2:70:
81:d4:86:bf:4c:30:34:08:6d:44:65:a4:a0:af:05:86:e4:91:
86:9e:c2:99:ba:80:74:64:30:1e:ce:00:38:24:a4:0f:e1:54:
98:c6:ba:78:73:ad:13:cd:83:02:33:c2:40:a3:b0:3f:d0:59:
4f:cb:08:e0:62:7a:27:ea:49:90:a3:aa:d9:fc:8b:ae:38:ba:
b2:ae:52:2f:42:af:55:86:7e:8a:61:98:48:23:b5:ee:7b:45:
b0:54:59:78:2a:8a:cd:af:4e:8c:8c:35:07:21:f3:38:0b:61:
f8:39:10:09:c1:9f:eb:f4:c1:c9:0e:d1:dd:5f:be:6d:2a:1f:
04:de:af:19:c7:8a:b5:6c:d0:9d:a5:2e:76:c8:dc:af:11:3e:
e6:2d:26:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:53:42 2026 by rpki-client