
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft
File: t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft (raw, json)
Hash identifier: 3st5N+x2TOyK9RRXdL2an7AAKz7rR/UWcrv/hcKcCtc=
Subject key identifier: F2:64:3C:75:39:9D:AE:35:E3:E7:C9:D1:25:DB:AB:3B:64:24:0D:B0
Authority key identifier: B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A
Certificate issuer: /CN=A91EF72D/serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A
Certificate serial: 04C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft
Manifest number: 04C2
Signing time: Fri 12 Jun 2026 23:52:33 +0000
Manifest this update: Fri 12 Jun 2026 23:52:33 +0000
Manifest next update: Fri 19 Jun 2026 23:52:33 +0000
Files and hashes: 1: t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl (hash: BZQkMB0uWh912Huac/lHGh+aWjnAezJSropfuWECtaI=)
2: 46F09F74546A11EF9B82D11DC4F9AE02.roa (hash: 2RXStLDjyOeuSTsmkifmHRekLcbCRcqX4watjvDv81g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl
rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:52:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1224 (0x4c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF72D, serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A
Validity
Not Before: Jun 12 23:52:33 2026 GMT
Not After : Jun 19 23:52:33 2026 GMT
Subject: CN=6a2c9bc1-c533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6c:72:3c:47:45:ad:c4:8d:19:06:c5:ec:96:
60:ce:a7:c3:bc:af:e5:6e:92:60:80:99:76:cd:b8:
72:53:f7:3c:2f:3e:ff:c4:8b:c5:f5:cb:1b:a9:08:
0a:57:96:e3:d2:a5:aa:38:7f:8f:b2:33:36:28:10:
e2:b3:35:d9:fc:4a:fe:0a:90:7d:00:f4:42:29:55:
b4:af:43:e9:9e:64:3b:39:4f:94:3d:84:40:30:3f:
f6:b1:57:e7:72:22:3f:8b:70:6d:b6:ce:54:e7:0b:
4d:ea:dc:a9:68:66:62:da:4b:d5:5c:5f:2a:8d:79:
ae:55:03:73:24:54:68:57:00:78:75:28:03:87:d7:
e8:85:e5:06:74:9e:7f:59:71:19:02:04:df:0c:cd:
a9:f4:1d:be:6f:dc:7b:ef:7d:dc:29:18:27:02:e7:
fc:0e:78:2f:de:5e:87:c4:24:2d:85:1b:ae:3d:5f:
be:ed:ce:bf:42:24:fe:27:d5:d5:18:a4:0e:3b:7a:
ba:cf:1d:5d:fe:ee:9b:e3:27:d6:ec:2e:22:f2:71:
d6:3e:de:cf:73:26:96:9a:03:23:b6:f0:93:ab:8f:
2f:de:c2:c5:50:31:98:59:7e:6f:ca:8f:3b:0c:39:
b7:9a:bf:d6:4c:08:c7:50:63:4d:67:fc:c1:8e:94:
13:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:64:3C:75:39:9D:AE:35:E3:E7:C9:D1:25:DB:AB:3B:64:24:0D:B0
X509v3 Authority Key Identifier:
keyid:B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:d7:bf:0b:ed:16:11:7f:07:a6:d1:e8:4f:e9:3f:98:bd:46:
03:3c:d1:13:ac:fb:74:c0:fc:ba:7a:be:79:4a:6d:3a:d9:21:
08:4b:29:ae:4b:6e:13:8d:a6:1e:0b:2a:51:30:2b:2e:e4:4f:
bf:0c:c0:0a:46:96:ad:65:24:ab:05:57:7e:e0:41:f2:c4:e8:
d0:4b:d2:29:0e:23:b9:3d:83:b2:ce:a0:56:6f:ab:3d:9c:c9:
7b:8b:bd:63:9f:a3:5a:04:eb:ae:0a:ef:07:01:c9:8a:17:b8:
c6:2e:bd:8f:3f:b5:3d:33:9e:c1:c5:77:09:4b:52:85:c3:24:
96:3a:31:5e:76:1c:80:03:0b:ed:2b:15:c6:e3:a1:cd:a5:64:
24:c5:96:68:09:35:29:3a:7e:96:4c:62:f9:0d:7a:09:5b:2e:
6b:9b:b7:e7:8c:05:d1:78:4d:44:4b:d6:72:14:a7:15:ce:d5:
9c:05:ad:4a:b8:1c:c6:ce:c6:79:ad:70:99:9d:aa:fa:29:47:
5a:80:88:cc:91:25:17:66:ed:c0:7b:94:2c:b2:11:9f:57:4d:
4e:e1:c6:12:98:9b:b9:b0:4b:8d:91:5a:55:ec:3b:1b:30:ee:
ed:dc:03:d3:43:24:78:78:84:3a:db:ce:bc:b1:8e:02:cc:0e:
e7:4f:91:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY3MkQxMTAvBgNVBAUTKEI3NzI5MTdDQjVDMDc2N0REOEI5RTk0QzQwQzFBN0FB
QTY1OURGMkEwHhcNMjYwNjEyMjM1MjMzWhcNMjYwNjE5MjM1MjMzWjAYMRYwFAYD
VQQDEw02YTJjOWJjMS1jNTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA02xyPEdFrcSNGQbF7JZgzqfDvK/lbpJggJl2zbhyU/c8Lz7/xIvF9csbqQgK
V5bj0qWqOH+PsjM2KBDiszXZ/Er+CpB9APRCKVW0r0PpnmQ7OU+UPYRAMD/2sVfn
ciI/i3Btts5U5wtN6typaGZi2kvVXF8qjXmuVQNzJFRoVwB4dSgDh9foheUGdJ5/
WXEZAgTfDM2p9B2+b9x7733cKRgnAuf8Dngv3l6HxCQthRuuPV++7c6/QiT+J9XV
GKQOO3q6zx1d/u6b4yfW7C4i8nHWPt7PcyaWmgMjtvCTq48v3sLFUDGYWX5vyo87
DDm3mr/WTAjHUGNNZ/zBjpQTDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPJkPHU5
na414+fJ0SXbqztkJA2wMB8GA1UdIwQYMBaAFLdykXy1wHZ92LnpTEDBp6qmWd8q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjcyRC84NDg1RjI0QTcz
Q0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRuM1l1ZWxNUU1HbnFxWloz
eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3QzS1JmTFhBZG4zWXVlbE1RTUducXFaWjN5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjcyRC84NDg1RjI0QTczQ0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRu
M1l1ZWxNUU1HbnFxWlozeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI9e/C+0WEX8HptHoT+k/mL1GAzzRE6z7dMD8unq+eUptOtkhCEsprktuE42m
HgsqUTArLuRPvwzACkaWrWUkqwVXfuBB8sTo0EvSKQ4juT2Dss6gVm+rPZzJe4u9
Y5+jWgTrrgrvBwHJihe4xi69jz+1PTOewcV3CUtShcMkljoxXnYcgAML7SsVxuOh
zaVkJMWWaAk1KTp+lkxi+Q16CVsua5u354wF0XhNREvWchSnFc7VnAWtSrgcxs7G
ea1wmZ2q+ilHWoCIzJElF2btwHuULLIRn1dNTuHGEpibubBLjZFaVew7GzDu7dwD
00MkeHiEOtvOvLGOAswO50+REw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:55:15 2026 by rpki-client