
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
File: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft (raw, json)
Hash identifier: yTIUBf+EMCnKGV0dYmIxFguDIggLsR23T2dZSCwjRac=
Subject key identifier: 67:53:11:73:4F:37:0F:96:14:FC:84:40:1B:10:A5:7B:8B:31:DE:5D
Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
Certificate issuer: /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Certificate serial: 0423
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
Manifest number: 040D
Signing time: Mon 27 Jul 2026 01:28:09 +0000
Manifest this update: Mon 27 Jul 2026 01:28:09 +0000
Manifest next update: Mon 03 Aug 2026 01:28:09 +0000
Files and hashes: 1: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl (hash: wdOGl7iSqN+HBIMtXIK9q2dInAnXxr7D+mR8H1S1o1E=)
2: 67A55414D56911EFB3E08134C4F9AE02.roa (hash: 6gyuElfq0PIA/FM7aREUsNAU/exyPDZQFt/Bj2F34gs=)
3: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (hash: 2w8tzihYxteSAWlYehFedS9pPwNpZwA6Ufz/Jy6ET4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl
rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:28:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1059 (0x423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6DB3, serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Validity
Not Before: Jul 27 01:28:09 2026 GMT
Not After : Aug 3 01:28:09 2026 GMT
Subject: CN=6a66b429-f70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:00:bd:1b:81:08:72:05:84:1c:f8:20:85:65:
23:51:fb:81:9e:25:0b:bb:75:50:92:f1:53:50:cf:
16:6a:16:13:b1:45:23:f2:5a:f7:82:89:07:2f:fd:
8a:64:03:7e:09:91:cd:07:b1:a2:ea:63:ad:8c:b9:
54:3a:ec:6c:9c:03:80:5a:41:3e:b8:f3:da:98:95:
07:1b:bc:1d:bd:4b:29:51:8f:24:b9:3d:93:65:f1:
f9:3e:15:d9:a9:18:4f:50:d6:3a:99:a9:92:53:2e:
6c:e0:4d:29:8e:aa:c7:4c:5b:90:8d:77:53:6e:3b:
62:ab:8c:2b:de:8f:6d:ff:a1:03:b1:3c:fc:87:79:
77:f8:33:ba:bb:76:33:c8:cf:2a:a3:0f:a2:df:df:
56:66:19:55:c6:bc:dd:b4:4c:ce:85:cc:e5:ac:28:
51:d9:63:ff:c8:b7:b1:7b:5a:1a:d9:c8:eb:50:22:
4f:98:47:0b:aa:cc:d5:4d:3e:7c:61:71:14:45:76:
0c:0f:0a:ca:9b:76:d8:07:dd:d6:18:8f:e8:62:18:
f2:d7:1b:60:83:db:0c:47:fa:f4:64:03:cd:42:5d:
9f:92:a5:fb:51:66:41:0b:73:79:e0:de:9d:4c:36:
3d:94:f6:97:e7:c3:05:03:fe:b4:88:be:4a:ce:b7:
41:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:53:11:73:4F:37:0F:96:14:FC:84:40:1B:10:A5:7B:8B:31:DE:5D
X509v3 Authority Key Identifier:
keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:5d:1a:ac:d7:09:14:5b:a3:b5:36:64:dd:c9:3f:5e:44:25:
c8:f6:14:c9:4f:21:ca:13:50:45:b6:6e:80:ac:28:10:f7:71:
22:b8:6f:99:c7:20:6d:82:d5:24:55:51:54:cf:f5:88:45:eb:
21:57:db:8d:cb:26:c5:90:30:55:a4:fe:67:c0:a4:e1:40:55:
58:ea:03:12:6c:85:a9:3a:28:33:da:28:64:75:e6:cf:81:db:
17:c2:e4:90:f8:43:58:15:b7:ae:6f:af:52:b6:84:9c:a8:15:
95:22:cd:1c:0a:ab:67:29:c2:31:35:81:50:8d:6a:82:7a:74:
22:a8:5f:58:0e:38:fe:a5:f3:09:3d:d4:74:cd:be:ff:63:c9:
68:b8:52:83:bf:2c:a7:03:8d:f3:2f:e5:60:a4:19:46:ed:c0:
38:36:90:33:56:3b:66:e0:e8:7d:58:32:74:7c:1b:24:a1:4f:
bb:54:3a:17:33:c2:15:6e:dc:85:16:35:a4:28:04:d7:c9:6e:
4e:c9:5d:9c:14:a1:a3:f1:d9:d6:62:0e:69:f1:1c:b5:e0:56:
1f:98:6d:a5:0b:59:47:b2:d6:08:45:d9:8f:71:a1:43:fc:c8:
85:36:13:8f:2f:5e:bb:b2:60:66:ab:9c:81:2b:b4:7b:77:a1:
36:ab:a0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:38:56 2026 by rpki-client