
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
File: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft (raw, json)
Hash identifier: 9t4tuDM/Ps8MuUX+Ci+XbrQRK5eH6/vBhbJr1I530Bk=
Subject key identifier: 0D:53:D0:C8:13:3F:4F:E1:65:3A:A9:05:F4:40:C8:DD:39:FB:62:81
Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
Certificate issuer: /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Certificate serial: 0409
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
Manifest number: 03F5
Signing time: Sat 13 Jun 2026 00:30:57 +0000
Manifest this update: Sat 13 Jun 2026 00:30:56 +0000
Manifest next update: Sat 20 Jun 2026 00:30:56 +0000
Files and hashes: 1: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl (hash: MAZBpLU1FoaUtATCiwyhTcwIBTKprjfOD28oCy+QDQA=)
2: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (hash: k2oBvP0OHpEhn0rFjfJBUkA03yXoD6fncIA5rTRi8ZU=)
3: 67A55414D56911EFB3E08134C4F9AE02.roa (hash: kAzpZUfwrPPULu39+opOJk6qvp1ijsjz0hw+Ol5r+ds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl
rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1033 (0x409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6DB3, serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Validity
Not Before: Jun 13 00:30:56 2026 GMT
Not After : Jun 20 00:30:56 2026 GMT
Subject: CN=6a2ca4c1-451c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:49:a4:70:f3:bf:28:8c:4d:e3:52:ed:b8:
75:dd:12:56:96:a3:f0:c3:90:b7:dd:f2:38:d9:a4:
47:c5:ca:39:56:62:3e:ee:3e:59:f0:d5:7b:a3:63:
7e:4f:56:9c:42:35:c6:aa:80:27:3a:ed:37:52:be:
e8:49:88:f1:30:79:3e:5e:80:ea:11:38:e5:ee:c4:
9d:d6:93:90:25:7c:6c:76:37:fa:fc:17:cc:c3:6f:
8a:a0:53:69:34:af:7e:dc:93:5d:87:4b:be:6d:e2:
d4:f1:d3:cc:ce:df:8a:15:48:f3:1b:93:1f:80:91:
80:93:c2:a8:c4:19:90:3e:09:4d:26:ee:9b:4e:1b:
1a:33:d6:47:e8:9f:90:22:9e:96:a3:e8:bb:53:3a:
9b:f4:e0:2d:4b:f9:3e:53:98:a2:4c:4d:67:33:a2:
d7:90:64:e2:68:7e:d6:1d:62:ad:7c:29:64:33:3c:
1a:cb:03:16:ca:83:cf:08:af:ff:7b:a6:88:17:96:
2d:33:d1:f7:f3:d1:d2:79:64:8d:ff:0c:3e:f2:07:
b4:4f:b7:88:5c:a9:5b:3d:8e:70:fa:b8:a0:cf:9f:
fb:10:51:43:88:d1:a5:f4:cb:2f:b9:de:d5:ae:fd:
4a:b4:36:ae:a1:96:23:d3:83:74:b3:e8:e8:d3:72:
3d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:53:D0:C8:13:3F:4F:E1:65:3A:A9:05:F4:40:C8:DD:39:FB:62:81
X509v3 Authority Key Identifier:
keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:73:42:fc:20:61:9c:93:36:29:81:4f:29:17:72:58:3e:10:
d1:3f:db:70:26:01:ef:f9:d0:58:8c:7e:00:d9:70:80:3a:41:
72:13:98:e6:71:71:94:06:86:bb:0f:88:d6:0a:2e:39:c5:09:
7e:c7:42:dd:7a:8a:45:aa:ca:39:45:a8:4f:13:b4:fd:d1:19:
cd:40:50:25:39:bb:ec:02:23:3e:ef:0c:74:eb:e9:dd:2b:61:
80:04:04:63:d9:23:7f:37:c6:57:19:d1:3b:6d:dc:87:b6:c3:
87:36:ba:10:b4:1d:dd:8e:eb:b0:60:0b:0e:0c:76:1b:2d:d7:
93:0e:73:82:20:7f:99:d4:57:cf:96:ed:f7:70:64:db:dd:52:
8d:1d:9c:93:48:84:81:5b:24:7f:ed:4e:39:26:51:c9:20:df:
c7:1b:f3:c9:3f:f8:a5:5b:af:03:fd:0f:95:e0:b6:8e:1b:26:
18:b6:85:4a:25:57:cd:ff:56:15:93:d0:3c:54:a5:04:43:fd:
be:2d:9b:13:5e:77:80:45:5c:57:da:1b:b9:ff:12:15:18:b7:
19:6d:70:68:e4:25:c5:a1:af:6c:6e:4a:d4:f5:00:22:7f:b3:
63:cd:da:16:c0:94:68:c0:11:6e:43:31:75:04:50:bc:fa:93:
08:e2:b5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:27:40 2026 by rpki-client