
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
File: r3YSV94snaXzPnHGQZ4meoYt-2I.mft (raw, json)
Hash identifier: Vh2q6Ei2VRZ0+SFTw7fDq1+bBoQzlU5C8g6r2JGXMiI=
Subject key identifier: E8:98:D0:F3:2D:1A:DB:7E:2D:5B:53:3D:45:D5:8A:BD:D6:29:D3:26
Authority key identifier: AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62
Certificate issuer: /CN=A91F4D54/serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
Manifest number: FA
Signing time: Thu 11 Jun 2026 08:34:00 +0000
Manifest this update: Thu 11 Jun 2026 08:34:00 +0000
Manifest next update: Thu 18 Jun 2026 08:34:00 +0000
Files and hashes: 1: r3YSV94snaXzPnHGQZ4meoYt-2I.crl (hash: pSLJF/33sJ2C7YYvCVIofKjagfRhQ+pOIAeCr7MMxms=)
2: 61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa (hash: TBjFZLoAcX8XTz4OXPD8ohPadAtZD+uq/tBStT0J3HQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl
rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4D54, serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62
Validity
Not Before: Jun 11 08:34:00 2026 GMT
Not After : Jun 18 08:34:00 2026 GMT
Subject: CN=6a2a72f8-d6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:33:66:b6:37:7e:7d:a3:23:2e:1a:31:f5:
f6:55:dd:82:85:ec:a8:0f:b9:f2:23:cd:bd:6a:2d:
0b:a9:24:35:a3:50:27:56:3e:e0:91:15:3c:2b:92:
cb:ed:d0:92:d8:27:4e:22:2c:1c:9f:e7:cd:7e:c3:
f3:03:ef:a8:74:2f:f0:ec:d8:b7:8f:f9:fc:08:c6:
48:20:59:9b:36:90:a6:67:47:5c:97:de:f6:61:a3:
36:19:7d:a4:ec:11:a9:1f:92:41:d4:7f:b3:76:dd:
9b:5f:4e:42:a8:16:72:1b:b6:ae:33:2c:50:37:54:
39:fa:91:d1:94:6b:9d:93:5f:55:bf:19:b9:dc:ae:
e0:30:c9:ff:5e:d5:e8:d2:e0:61:72:2f:f8:d9:e9:
47:29:9c:3f:eb:91:bb:74:0e:d0:7f:5c:b7:d6:c5:
a4:5d:79:0d:eb:a4:34:b3:f6:b6:18:3a:d4:a6:c2:
05:73:b0:71:39:38:05:b6:5f:88:65:4f:6a:02:12:
f0:76:11:89:78:c3:6e:79:5c:2f:4c:3a:12:b2:a0:
46:9f:bd:e4:40:62:25:1e:3a:3b:0b:ab:98:ba:ad:
84:76:29:d5:01:08:7e:30:66:9a:7f:18:80:d8:e5:
f0:bb:c6:9b:79:c1:55:9a:5b:11:c2:46:41:4a:ce:
93:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:98:D0:F3:2D:1A:DB:7E:2D:5B:53:3D:45:D5:8A:BD:D6:29:D3:26
X509v3 Authority Key Identifier:
keyid:AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:7f:03:aa:b2:42:86:e6:c5:20:ef:55:03:2f:0f:46:06:ba:
f6:4a:1f:d3:8b:12:68:33:65:43:76:1c:68:1f:1f:ef:cf:4a:
0e:04:40:80:05:1d:58:e7:bd:97:c0:d0:38:e4:9d:59:4b:f1:
84:a7:4b:99:20:49:9d:d1:67:16:e4:1a:33:92:9c:8f:c6:7f:
d2:01:ae:19:7c:21:07:aa:6f:a8:43:2b:e1:4b:bd:2a:7c:85:
75:1e:16:95:1d:9f:c4:8c:c9:5e:89:67:b1:e7:c1:09:93:30:
55:5c:d5:6e:53:8d:29:35:e2:c6:31:81:f3:9f:b5:1b:16:7e:
f4:6e:9f:68:45:42:38:52:57:7d:12:db:38:1b:3a:a6:f2:20:
9b:0f:95:a7:54:6c:57:7d:b3:e5:b8:9e:1c:1e:0b:3c:d6:6f:
9e:f1:8e:8d:76:98:ed:8a:98:ab:34:92:a6:84:4a:51:a0:42:
98:0b:d6:21:59:18:31:d9:fb:7a:88:56:c3:d1:11:05:3b:63:
2b:4f:2d:0e:52:91:d5:3a:ac:68:0b:29:fe:39:e1:16:00:c3:
23:a2:76:18:ac:0a:ed:47:45:a3:b2:31:f1:7b:65:66:63:c2:
fd:96:28:57:73:56:0e:e2:a9:de:d3:a7:30:89:46:93:00:c5:
af:74:22:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:31:02 2026 by rpki-client