
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft
File: sE3Hq0gjM4kMKKdlddit5kKcP8s.mft (raw, json)
Hash identifier: yxW6dKsveRu8LLW1wif4wRefvlVsJCDxOirSiosbchE=
Subject key identifier: 0B:2A:7B:07:50:C8:17:87:06:9D:D1:4C:7C:40:34:8C:62:AC:E7:CF
Authority key identifier: B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB
Certificate issuer: /CN=A91FFBAF/serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft
Manifest number: 85
Signing time: Wed 29 Jul 2026 09:03:48 +0000
Manifest this update: Wed 29 Jul 2026 09:03:48 +0000
Manifest next update: Wed 05 Aug 2026 09:03:48 +0000
Files and hashes: 1: sE3Hq0gjM4kMKKdlddit5kKcP8s.crl (hash: aJ0ik3QYxr+vIj+SeDlu4Zb+2iMRX8Xmy3aotswaVRw=)
2: 961A909E2D2811F181F3AA41B9833773.roa (hash: dYzmlzKtC22HQCzv3r68DO5+DJnISkpljTZWCe4Wn+k=)
3: F29881C82D2811F19656BE60B9833773.roa (hash: j49xZ/pNE+6bd9Li6teEM+llvM2db9Ji2DZmBv8OAyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl
rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 08:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFBAF, serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB
Validity
Not Before: Jul 29 09:03:48 2026 GMT
Not After : Aug 5 09:03:48 2026 GMT
Subject: CN=6a69c1f4-264a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:42:e6:de:78:cd:61:44:13:66:fe:96:c1:
56:de:de:f3:55:10:ea:fc:f1:d2:c1:b2:6b:c8:59:
4a:94:82:ab:99:bd:19:24:a7:54:a6:7b:68:d2:5d:
1d:bf:0a:1b:34:a7:e0:01:b9:9e:ec:b9:24:1e:24:
ba:c7:a5:58:7e:3f:0e:e6:09:ad:dd:a7:69:61:5d:
5b:c1:eb:be:19:d2:3d:a4:fe:cf:84:c4:e7:45:95:
10:52:18:d9:51:40:4b:f3:ec:3e:c3:b2:b0:6a:c7:
55:14:a3:33:ba:a4:1c:f1:01:a7:82:83:2a:31:54:
43:3f:46:e8:3d:b6:5d:74:a8:be:38:3b:39:20:65:
55:a5:34:c5:31:17:33:82:7e:b1:98:6d:4e:00:05:
3e:3e:4f:41:da:e0:97:76:96:0d:04:10:59:3a:61:
45:38:6f:ec:40:8a:41:ac:42:f3:c0:91:bf:f3:5d:
d2:42:0b:f8:d3:6b:0c:81:86:b8:99:21:2d:b6:69:
80:41:01:e0:e8:b4:7b:f6:6a:83:5b:ac:fe:f4:fe:
9b:8c:fe:b2:72:b5:e7:4d:d2:0e:d7:ee:48:97:15:
6d:12:3c:b3:07:97:65:47:13:23:2e:e9:57:ad:d1:
47:3f:db:78:34:6f:a3:69:88:c2:48:de:ba:9e:be:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2A:7B:07:50:C8:17:87:06:9D:D1:4C:7C:40:34:8C:62:AC:E7:CF
X509v3 Authority Key Identifier:
keyid:B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:9d:fa:ec:30:ba:4b:12:4a:e9:48:41:a5:22:c8:46:4d:98:
e7:35:93:cb:97:4a:29:7d:73:de:d7:ff:66:0d:cf:f0:0e:b2:
56:2b:1a:fe:ab:43:2e:6f:59:ff:3c:f0:b8:0e:ba:fa:fa:09:
ac:94:f5:be:9e:44:0b:d4:a7:13:38:81:f6:2f:95:f0:10:6e:
f5:9a:fd:a8:3b:55:78:d0:f6:ed:cd:f4:4a:82:c3:16:32:b6:
4a:16:7c:53:7d:2d:38:58:a6:04:20:bc:36:8d:51:9a:b4:1b:
94:19:8f:b3:43:92:ed:99:73:fc:10:23:91:5e:13:27:27:c7:
54:21:a6:4a:ef:dd:d1:f4:28:91:cc:ba:42:33:33:b6:11:83:
8f:58:30:69:09:c1:4d:db:e5:11:c1:be:95:e0:c9:8d:e1:3a:
31:b2:ad:f8:a0:c2:27:ab:25:b0:07:7f:0e:db:83:8c:bc:cc:
93:ff:6a:33:97:65:0b:72:e7:b1:e3:cc:50:ec:27:41:7b:36:
20:6b:e7:46:88:59:17:d3:92:ef:b2:e2:14:ed:df:59:c2:ea:
42:64:3c:85:d4:52:59:5c:2e:22:22:2c:7c:1f:b4:57:2a:74:
dc:fe:0b:b9:4c:97:d8:52:b1:be:c1:08:52:53:ce:16:8e:4e:
40:cf:12:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:41 2026 by rpki-client