
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
File: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft (raw, json)
Hash identifier: 0lIxOBc2+yfvWjADPUNDFAZXCpRsZ5MI71IiIHc1KX0=
Subject key identifier: 52:32:CA:66:9C:95:BA:7E:89:9A:CA:47:DA:9D:96:C3:8F:88:B4:2D
Authority key identifier: DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6
Certificate issuer: /CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6
Certificate serial: 0235
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
Manifest number: 022C
Signing time: Sat 13 Jun 2026 02:44:17 +0000
Manifest this update: Sat 13 Jun 2026 02:44:16 +0000
Manifest next update: Sat 20 Jun 2026 02:44:16 +0000
Files and hashes: 1: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl (hash: /xRkK0/KSt0X9uXjb0DgEemzlP4a8fX2piyKABkRtYY=)
2: 6F882FB01D5211EE94C36C2FC4F9AE02.roa (hash: DcXA2eAZGbJr4/hnQ1XPdT8g+RnlXIW8GnA5M9/Nm2E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl
rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F716F, serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6
Validity
Not Before: Jun 13 02:44:16 2026 GMT
Not After : Jun 20 02:44:16 2026 GMT
Subject: CN=6a2cc401-266b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:37:4d:c5:99:34:00:20:8b:94:3f:11:81:
73:89:87:27:51:d8:33:87:08:29:da:0a:9f:92:76:
20:1b:6f:ce:f4:52:30:86:a7:a0:b2:f7:e1:95:fc:
d8:cf:11:77:b4:71:d7:bf:19:98:79:62:a5:f1:a4:
54:1c:c2:f3:07:8d:a0:c2:bd:5e:e8:af:30:f4:7a:
37:e1:26:99:8d:4b:63:48:ee:1b:68:1f:f0:93:76:
20:42:c9:c7:c7:bc:8a:c6:47:34:94:1c:8e:26:c5:
58:c7:a4:46:54:a4:74:d7:b2:2b:b3:3b:0a:f4:29:
a4:8f:8f:26:38:70:73:fd:c1:a5:c5:3c:1a:b8:4b:
f1:67:00:07:84:54:40:34:20:04:ed:2d:74:90:73:
40:e8:e4:9a:40:d5:2e:e8:f0:dd:74:96:79:5c:4a:
bf:82:12:31:e4:1e:cd:4c:25:4e:75:01:6f:be:a5:
9b:8b:a4:5d:9d:c4:a8:f1:12:3f:64:83:65:7b:75:
33:a5:f6:46:86:79:cb:55:df:dd:24:01:46:49:f4:
b2:27:3e:fb:bf:dd:16:93:27:a6:ae:13:6b:3b:55:
ad:3d:9f:86:b8:7c:6b:8a:5a:4a:4e:d0:6d:4d:fa:
41:f8:47:a8:27:69:3c:a7:53:8a:e7:e1:b3:66:a3:
bc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:32:CA:66:9C:95:BA:7E:89:9A:CA:47:DA:9D:96:C3:8F:88:B4:2D
X509v3 Authority Key Identifier:
keyid:DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:db:bb:a0:ae:97:b7:58:a4:9e:c2:24:cf:0c:63:46:d5:4d:
fb:79:2a:3a:bf:0b:43:12:d4:0d:95:83:f7:97:37:c6:cf:80:
0f:2c:86:a8:5a:b7:58:13:e6:65:af:25:7f:61:31:12:ee:a6:
fc:c6:24:38:cd:d0:7b:83:43:4f:b4:5f:38:ea:49:2f:c6:ba:
2b:14:f0:08:70:47:b4:22:fd:4b:cb:8b:e5:6d:ef:cb:6b:4b:
ca:a8:44:fe:03:6a:69:c7:74:35:0d:36:25:8b:31:75:48:b2:
87:f9:7a:a9:29:21:17:db:82:56:bd:7f:75:6e:ae:9f:be:87:
26:17:e5:0b:f5:d4:1c:77:6f:21:ca:d8:af:0b:da:c2:fb:b9:
94:2b:7a:6d:e7:4e:54:a5:6a:31:ed:e1:0e:68:0d:f7:b8:5c:
b3:b5:aa:99:b9:df:8c:b0:7a:e1:78:8d:6f:81:3b:65:6f:81:
f7:83:e7:13:ad:ff:3a:5f:d3:c9:87:0d:fd:07:ad:41:b3:9b:
14:c9:b3:63:ea:f8:2b:90:f0:fd:ca:90:d3:ab:99:3e:e3:91:
85:d4:b2:83:5e:a3:c1:5a:02:5c:81:da:91:59:ea:97:bf:eb:
93:e6:9c:bd:82:67:47:87:4d:ac:85:49:87:a9:50:48:24:46:
12:7e:52:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:50:49 2026 by rpki-client