
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
File: N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft (raw, json)
Hash identifier: 0hfGRt+nLQPInsPCATQfz4VCYcl7zDEwiOGti5036Tk=
Subject key identifier: FE:68:A1:B2:63:37:AE:52:96:D5:88:AE:E5:7B:1A:17:EF:E7:27:28
Authority key identifier: 37:74:6A:86:93:B3:B8:3F:50:1D:71:5D:10:30:B9:54:72:BE:3A:F6
Certificate issuer: /CN=A91F53A5/serialNumber=37746A8693B3B83F501D715D1030B95472BE3AF6
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
Manifest number: 2B
Signing time: Wed 29 Jul 2026 01:18:18 +0000
Manifest this update: Wed 29 Jul 2026 01:18:17 +0000
Manifest next update: Wed 05 Aug 2026 01:18:17 +0000
Files and hashes: 1: N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl (hash: qycoRrINhxzxuAqTV5f/Shjq5QL3B+xMdY3oHCyW74Q=)
2: 8F3BB5304DCD11F191088215B4833773.roa (hash: lA3Zts59kRJf+K26QY68A9dBrBr6aTNWe+CFgHwsnZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl
rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:18:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F53A5, serialNumber=37746A8693B3B83F501D715D1030B95472BE3AF6
Validity
Not Before: Jul 29 01:18:17 2026 GMT
Not After : Aug 5 01:18:17 2026 GMT
Subject: CN=6a6954d9-3f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:bb:ff:3c:4d:f2:0d:db:d6:d3:71:29:14:
10:ae:86:22:cd:91:3f:e5:0e:37:ad:83:fb:b6:31:
2a:6d:38:e0:66:ad:c0:2a:ac:1e:e6:dd:34:b8:ef:
42:2d:0f:b7:17:61:46:3f:b2:b8:96:be:3c:b0:1b:
28:04:d7:d5:6f:19:a5:95:88:8b:58:fe:84:8b:14:
89:5c:e8:3a:35:0a:97:74:5b:f0:8c:e8:86:9f:59:
2c:3b:cf:21:8b:a0:78:05:88:4c:57:51:67:d5:9c:
d7:ba:ba:bc:9a:2b:af:8e:86:cb:4b:25:7b:9e:ec:
54:9b:f2:08:f5:c1:2b:ac:2b:de:64:ad:65:68:ad:
54:2b:bb:fb:06:ec:68:3e:ed:70:03:94:43:cf:cf:
e9:8b:c7:35:1d:51:d0:76:31:75:c6:7e:9e:85:2f:
c0:b2:91:39:18:db:82:57:57:51:54:8e:cb:ee:69:
62:ee:cb:f2:7f:0d:64:fa:56:35:f1:65:08:13:ec:
a1:d3:17:ab:a3:6e:07:67:4a:99:ec:18:ba:72:3e:
76:3d:14:d0:fb:8e:12:fa:d1:93:ed:6c:94:2b:22:
3a:05:83:0f:ac:ab:a2:8b:4f:ae:ba:95:10:ff:ba:
13:03:f3:7a:8c:88:3c:d2:35:5a:a8:06:31:21:33:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:68:A1:B2:63:37:AE:52:96:D5:88:AE:E5:7B:1A:17:EF:E7:27:28
X509v3 Authority Key Identifier:
keyid:37:74:6A:86:93:B3:B8:3F:50:1D:71:5D:10:30:B9:54:72:BE:3A:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:f1:a3:8d:6a:0d:de:7c:de:9b:cf:55:33:d4:c2:fe:82:76:
f7:d1:70:c3:66:a0:cf:0c:71:82:5a:4a:62:b3:f4:46:06:a6:
63:b5:4d:47:9c:62:0f:fc:cb:3a:9c:03:83:14:29:91:f6:12:
a8:38:73:33:12:85:93:9d:18:a9:8e:fe:fa:f2:ed:f6:05:c3:
93:96:2b:b6:fa:d2:28:dd:31:ce:a0:85:81:94:27:4d:f0:51:
f4:dd:3b:43:50:09:86:49:fc:3c:99:64:25:11:1f:e9:4f:b9:
1b:09:45:9c:8c:b0:59:0d:a0:a4:e5:9a:fd:31:bd:fa:d1:05:
ab:d5:25:00:a1:69:42:e5:56:8c:19:3a:a4:2d:c9:b7:e6:74:
ab:7b:f1:b5:35:22:ab:ff:77:ca:1a:fb:85:19:d7:64:e2:53:
9f:81:67:7c:7f:88:cb:ec:e1:c3:ef:b4:44:c5:87:32:53:2c:
c5:4f:2a:bc:e6:79:a0:24:fd:a8:d0:ad:04:e2:d0:7c:e3:73:
ef:5e:ac:4c:2b:36:72:a0:f0:7e:f2:b0:6d:86:7f:78:67:67:
fa:80:01:6c:c5:64:86:9a:d0:0e:c1:cb:c4:84:f3:f7:33:1c:
5e:d7:98:14:88:a8:c9:33:32:e2:69:2e:35:34:66:93:33:d6:
c2:d3:99:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:28:18 2026 by rpki-client