
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
File: g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json)
Hash identifier: cKilpRFpFLaXdl6jZgr3nnTXIEwM9PP2677BwN/iIrw=
Subject key identifier: 80:67:90:3A:35:3B:21:65:EF:B0:D1:1A:F4:9D:59:84:39:5A:0B:DB
Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76
Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
Certificate serial: 023A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
Manifest number: 022C
Signing time: Sat 13 Jun 2026 02:45:36 +0000
Manifest this update: Sat 13 Jun 2026 02:45:35 +0000
Manifest next update: Sat 20 Jun 2026 02:45:35 +0000
Files and hashes: 1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: 4S+fyI/RxrszqhDh9hpx5SNtYJjzUVJGYmxgaEIBzUA=)
2: 3A7527ECC1F711EF8B510B86C4F9AE02.roa (hash: jH3pUBKK5O5PFYi47D0568PqN1VNWUwbSLEuD5F8T1Q=)
3: 79FC546E326611F08478D72AC4F9AE02.roa (hash: zz0/+1mPK1uuhtSz3L6I5TM++EHZrh4Brc7QpBBGUqY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl
rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
Validity
Not Before: Jun 13 02:45:35 2026 GMT
Not After : Jun 20 02:45:35 2026 GMT
Subject: CN=6a2cc450-cffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:fb:18:e1:29:02:e3:b6:d9:76:a7:6d:c1:
c2:f0:7e:6c:8f:45:26:42:5d:20:61:7c:d3:4a:a5:
99:aa:36:9d:ec:8e:ab:4a:7b:71:16:ff:9b:92:fc:
a5:26:aa:e7:34:34:c6:04:7f:4b:a9:48:dc:cd:01:
9f:ee:2d:db:01:c7:d0:d0:24:99:94:e4:83:a1:b6:
17:7d:b8:81:12:df:72:0d:e2:13:88:3a:fb:c7:da:
ac:46:af:a4:5a:cf:ff:88:b2:18:a0:18:86:59:ea:
e5:36:8a:5d:26:2c:08:24:bb:3d:ad:1f:ca:84:ae:
e9:39:a1:2a:18:8b:64:ae:50:c7:27:cd:9f:64:b0:
f5:be:01:a5:c7:c6:f6:ca:56:e8:b7:1f:91:31:4e:
ef:ce:9f:de:0c:7f:68:2f:77:59:50:26:c9:1b:15:
c9:92:c1:da:1c:23:48:49:7b:91:2d:e2:65:93:1f:
af:70:17:52:8d:da:82:de:d4:d3:30:2d:ca:16:62:
2a:21:13:1d:91:84:00:97:14:4a:22:e9:ab:d2:6d:
b7:f0:b8:db:1f:ba:6c:12:14:da:0e:dd:96:5b:b8:
a4:68:bb:82:87:3d:36:c7:17:3b:b0:f1:6b:87:24:
b4:ac:82:4a:c1:7e:63:32:7e:31:65:8a:f5:50:2f:
ff:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:67:90:3A:35:3B:21:65:EF:B0:D1:1A:F4:9D:59:84:39:5A:0B:DB
X509v3 Authority Key Identifier:
keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:f4:d1:0e:b6:6c:dc:3b:e1:d9:67:7b:96:f5:29:ca:3f:9e:
f5:36:a3:d2:ca:76:5b:f7:87:61:05:e0:0c:af:f4:20:d1:2d:
1c:2d:09:80:8e:8b:33:0a:6b:a1:75:b4:90:55:fa:7e:56:0f:
19:8d:25:1a:fc:2b:46:56:75:13:7d:9f:4f:4f:56:d3:6e:6a:
62:a3:07:10:a1:02:11:3e:a4:3f:c9:e8:d1:e6:b1:01:6a:57:
cb:e8:b7:26:57:90:55:71:b9:9a:38:83:c4:34:d6:5a:71:b8:
ab:05:f5:4b:c0:68:83:ed:4c:bb:26:4d:b3:93:d2:13:13:28:
f1:0b:bf:57:50:63:a9:69:9e:32:96:9d:35:0c:3e:5d:07:7d:
73:de:be:2e:a4:26:78:f0:3b:e7:73:b5:6c:e9:39:b6:1d:f6:
42:1e:f0:2e:93:c3:b3:65:5f:ad:4d:24:1b:e1:6f:47:67:07:
a4:de:41:e3:a4:a4:01:e5:98:c7:d1:1b:31:c0:16:61:f2:5d:
42:a8:6d:12:49:a1:6d:13:58:58:c6:1a:81:0d:ce:cb:d7:4f:
60:35:08:74:c6:f9:94:7d:8d:ba:57:ce:f9:1a:dc:18:bb:61:
53:8c:04:10:13:31:75:70:e4:84:b4:68:ec:00:dc:52:b7:be:
6a:b1:07:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:12:24 2026 by rpki-client