
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft
File: 3W8BT4rUXahdDhbys3aHZ5REhbM.mft (raw, json)
Hash identifier: /UPKnU4vT8la/pJcjj4QsVfNh1o3g6oLjlgRekv3ETE=
Subject key identifier: 97:8C:D3:FD:76:FC:65:FA:01:38:83:6A:E9:D5:33:81:9A:AA:56:98
Authority key identifier: DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3
Certificate issuer: /CN=A91E8458/serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3
Certificate serial: 0895
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft
Manifest number: 088C
Signing time: Fri 12 Jun 2026 20:39:17 +0000
Manifest this update: Fri 12 Jun 2026 20:39:17 +0000
Manifest next update: Fri 19 Jun 2026 20:39:17 +0000
Files and hashes: 1: 3W8BT4rUXahdDhbys3aHZ5REhbM.crl (hash: NYqA1Ky5XedNFKH7EWCGlm5DNtLa1gvMSg7dxaTtD2U=)
2: FAE7339CF7B911EA91318653C4F9AE02.roa (hash: gjXk5FJ28SiJiqatM16BZg/99HgL3HEPLn3XZb4vIWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl
rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2197 (0x895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8458, serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3
Validity
Not Before: Jun 12 20:39:17 2026 GMT
Not After : Jun 19 20:39:17 2026 GMT
Subject: CN=6a2c6e75-c9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0a:24:15:c7:a4:5b:69:07:83:15:f1:ef:f0:
b6:34:ca:23:80:07:3e:60:9c:7c:0f:aa:9e:13:27:
66:58:45:1e:c2:12:0b:84:09:ec:23:ba:2f:f0:c9:
48:6e:8f:47:9b:2c:d8:45:c2:2f:7c:bd:8b:6b:1f:
26:b9:48:cc:ba:fd:02:cb:15:2c:23:e1:0d:b8:90:
a8:0e:ad:f4:e7:d8:4c:49:c5:38:34:7c:f5:29:c1:
e8:ab:f8:28:06:3f:97:9a:1f:57:cf:95:96:3f:53:
59:8b:37:c6:d4:95:af:03:ee:7f:da:f6:19:d9:ad:
34:56:7b:88:93:93:41:10:15:fa:de:ff:d1:37:91:
6a:86:8d:c5:67:d1:6b:d4:09:a3:57:39:99:b0:a2:
39:43:37:91:b7:cc:c3:77:1a:aa:d0:5e:60:0e:e0:
1b:b7:40:bc:53:e6:5f:24:81:5c:03:3b:70:4f:54:
6a:b4:2d:3d:9f:de:22:82:2a:52:86:7e:5e:14:ce:
3d:8a:83:92:f6:06:2d:19:04:ef:5c:65:06:fa:34:
9d:98:b7:74:98:e8:65:d3:f3:08:40:51:f6:38:1c:
12:f4:48:b1:f7:fb:96:17:16:8b:6d:2b:11:7c:bb:
75:40:8c:78:19:af:66:9d:7f:bd:12:21:bb:78:1f:
0a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8C:D3:FD:76:FC:65:FA:01:38:83:6A:E9:D5:33:81:9A:AA:56:98
X509v3 Authority Key Identifier:
keyid:DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:28:1e:75:d3:6a:7b:66:be:17:e1:7a:d3:d7:f6:e9:65:4b:
ca:51:f8:65:b5:40:fa:56:e0:61:f4:72:41:24:ea:87:b8:e7:
a6:fe:76:b5:f2:91:27:f8:2b:2e:ba:b6:6c:79:57:d9:f3:ac:
e0:13:72:29:fa:ff:a3:50:03:c1:5a:fb:da:32:a5:66:b1:3e:
2b:eb:6b:b8:91:9f:85:9e:32:9a:3d:d5:95:2d:48:38:fa:30:
5f:e7:de:31:ac:5f:35:dd:d7:60:39:d9:53:de:88:c1:b2:70:
81:b9:4d:9a:0b:38:ec:06:d5:e9:4b:e0:99:3c:a8:9d:47:37:
a0:bf:df:1c:b7:2a:a3:6e:c2:9f:87:4a:06:49:6b:db:ff:8f:
bf:80:af:70:65:58:e5:d0:34:e2:80:0c:6c:8c:69:de:fb:19:
fd:33:bc:e0:af:e3:e5:29:87:35:de:a8:b6:93:9f:95:1d:87:
9b:8a:9e:25:ef:c4:c2:5c:70:19:13:47:0e:f4:63:b7:c2:b0:
0d:00:99:c4:40:8d:ec:25:ae:91:ea:6a:b6:3d:6e:29:b2:71:
d4:2a:b2:43:c6:7b:26:62:3e:c9:a9:c3:37:3b:f0:31:75:19:
a1:ba:b4:fd:c3:87:1e:4c:1b:de:0e:29:6e:39:48:1b:96:13:
57:6b:3c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:05 2026 by rpki-client