
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
File: N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft (raw, json)
Hash identifier: xb/4eeqK4afSDqHARKa693Jf8irJnpbcZmiXnoXhbTQ=
Subject key identifier: 7F:A8:08:11:8F:14:45:0C:76:B6:D7:2F:9A:C7:2D:15:85:E5:92:ED
Authority key identifier: 37:74:6A:86:93:B3:B8:3F:50:1D:71:5D:10:30:B9:54:72:BE:3A:F6
Certificate issuer: /CN=A91F53A5/serialNumber=37746A8693B3B83F501D715D1030B95472BE3AF6
Certificate serial: 15
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
Manifest number: 14
Signing time: Sat 13 Jun 2026 00:39:30 +0000
Manifest this update: Sat 13 Jun 2026 00:39:30 +0000
Manifest next update: Sat 20 Jun 2026 00:39:30 +0000
Files and hashes: 1: N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl (hash: +arqinjk7FCxo0ctbWOROoF/aOqKV/2P4e0AglHB/OU=)
2: 8F3BB5304DCD11F191088215B4833773.roa (hash: lA3Zts59kRJf+K26QY68A9dBrBr6aTNWe+CFgHwsnZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl
rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F53A5, serialNumber=37746A8693B3B83F501D715D1030B95472BE3AF6
Validity
Not Before: Jun 13 00:39:30 2026 GMT
Not After : Jun 20 00:39:30 2026 GMT
Subject: CN=6a2ca6c2-29f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:33:8d:02:57:bd:99:f3:ba:70:59:af:26:
ee:db:cf:72:4b:f3:f4:cf:50:94:4e:17:c5:0c:d1:
b9:d4:1d:a5:60:c4:e7:b7:4e:ec:8a:47:ff:f7:a0:
ea:9a:5e:97:8b:4f:47:bd:54:c9:3a:ec:42:c1:19:
7e:b4:e3:04:18:df:e9:b1:64:f0:58:7a:b4:90:6b:
fe:f0:41:f4:4e:0f:98:00:e9:e9:a2:ce:e0:68:5c:
19:25:8d:88:cc:3e:cf:d7:30:f6:aa:a7:b4:ab:a3:
89:3d:fd:6b:42:90:5a:05:fa:5f:b1:4c:dd:1a:78:
fd:fc:4a:7d:64:c2:78:75:64:8f:b0:e4:08:91:35:
98:60:a0:0d:be:6b:c6:52:21:cb:72:33:33:f1:93:
4a:7c:d8:ed:af:ba:0c:45:e3:dd:2c:38:1f:5d:ad:
67:b7:fb:04:a4:1e:07:e9:63:03:f2:bd:1e:f4:a6:
9a:0e:4f:d0:73:62:d5:2b:21:29:dc:81:b0:c9:94:
d5:61:bb:0f:3b:20:b5:73:a5:43:c3:0c:8b:66:c6:
4a:e5:45:76:99:a5:5a:00:d3:d1:f9:13:b7:03:c0:
cb:84:df:1e:94:f6:04:23:07:8a:39:b3:0e:98:01:
e0:3a:9a:3b:d5:f5:7d:7f:c2:32:eb:be:7b:8e:e1:
7e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A8:08:11:8F:14:45:0C:76:B6:D7:2F:9A:C7:2D:15:85:E5:92:ED
X509v3 Authority Key Identifier:
keyid:37:74:6A:86:93:B3:B8:3F:50:1D:71:5D:10:30:B9:54:72:BE:3A:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b0:b4:50:f3:56:c3:f0:c9:31:7a:97:5d:42:e5:00:5f:1b:
50:0d:19:5e:f9:72:88:de:91:bf:42:cb:2e:58:5f:79:f2:ce:
9b:a0:5a:67:d5:be:f8:00:78:5b:c0:63:40:7e:1e:3a:c1:2b:
62:27:be:86:10:3b:cc:c1:e0:40:35:03:ca:75:08:e9:61:b1:
7b:30:72:b9:1e:e9:dd:6f:75:ea:40:ee:04:1b:d9:e4:34:a9:
39:3b:f3:5d:b3:c2:ee:57:a7:a8:2a:89:d7:86:a4:4a:4a:52:
af:5a:bd:3f:32:3b:0e:5b:ee:5b:f3:64:84:7a:85:47:25:bd:
a2:e9:bd:29:1a:ab:1d:4a:2f:84:71:50:32:dd:19:2e:08:b9:
60:6b:b8:ee:f9:f3:0a:8e:1a:0a:87:78:ff:cf:21:09:b6:9e:
d5:73:97:0b:00:64:28:a7:79:c6:65:7f:3c:7b:26:f1:a1:17:
fb:0b:ef:b3:ae:79:ca:4b:65:f4:3c:8c:88:5c:c1:21:ce:df:
1c:20:6d:86:69:db:d8:d0:18:15:4e:ac:e6:21:6e:a6:2a:9d:
bd:3c:fb:a0:c2:99:56:73:32:e6:7d:32:91:42:07:d9:c1:aa:
1c:18:a0:32:4a:64:db:04:f2:68:f1:35:8f:a9:d3:d5:5b:25:
57:e5:0a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:52:08 2026 by rpki-client