
$ rpki-client -vvf rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
File: pi3nVqmxabvP97VW1DMAlV1A4yA.mft (raw, json)
Hash identifier: /FLBOpZ3bziE9p5jJsdp2OmfamhAQXI5uxaBn2BBoAs=
Subject key identifier: 1E:14:7E:B7:7B:F8:28:43:3C:63:9F:BA:4A:49:1E:30:B0:04:B3:DC
Authority key identifier: A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20
Certificate issuer: /CN=A91104BD/serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320
Certificate serial: 0BF8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
Manifest number: 0BEF
Signing time: Tue 12 May 2026 18:55:01 +0000
Manifest this update: Tue 12 May 2026 18:55:01 +0000
Manifest next update: Tue 19 May 2026 18:55:01 +0000
Files and hashes: 1: pi3nVqmxabvP97VW1DMAlV1A4yA.crl (hash: 2q6+nZ1K21QsehFWXehztPAC5BnfXts9M28s1FC3qDg=)
2: D326CC30384411EA9D540B58C4F9AE02.roa (hash: miF3Bd+XSLHucz0FC/5HkJ/vce5TslwDpsNS9Q4tZB4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl
rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:55:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3064 (0xbf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91104BD, serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320
Validity
Not Before: May 12 18:55:01 2026 GMT
Not After : May 19 18:55:01 2026 GMT
Subject: CN=6a037785-670b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:c3:7e:e7:30:09:db:cf:2e:7f:0c:1f:c2:
d6:71:37:d0:33:aa:2a:a9:26:2b:13:7f:13:21:fe:
9a:5a:1f:9d:06:d9:d8:4a:1e:80:72:3c:5f:42:dd:
22:c9:17:59:0e:52:60:57:36:d0:de:dc:3d:b1:02:
b2:4d:f3:c9:05:ad:a7:92:45:8b:7c:d1:b0:cb:47:
10:84:c6:f9:4f:0d:f6:cb:ba:05:e8:b3:72:64:3c:
3b:99:50:e0:3c:c7:84:a5:fe:82:aa:73:23:01:c1:
9e:f2:50:d2:1d:67:7d:2e:b7:94:dc:7e:3d:af:3b:
a2:cf:5e:e7:15:4b:e5:76:28:8e:de:49:ff:f2:69:
6f:83:d1:74:76:3f:99:2f:dc:8d:ef:c1:e6:48:42:
79:8a:34:b4:ad:de:9d:7e:bd:47:44:77:b0:04:b6:
e6:d4:7e:82:db:86:a5:1f:1e:b3:88:aa:3e:55:28:
62:03:10:05:d7:f5:12:6a:8c:fa:16:e8:ae:c9:9a:
14:2c:b4:b2:eb:7a:f2:ea:93:19:22:bf:fb:ab:72:
7f:ff:e5:21:f5:e9:10:58:39:0a:f9:2d:6f:dd:16:
1d:3a:61:85:4c:c8:87:18:67:23:2e:30:fc:bb:35:
2a:e6:bd:2f:35:a8:6b:50:8a:5e:f3:a2:85:dd:a3:
14:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:14:7E:B7:7B:F8:28:43:3C:63:9F:BA:4A:49:1E:30:B0:04:B3:DC
X509v3 Authority Key Identifier:
keyid:A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:80:79:28:ee:1f:69:ba:8a:d4:11:93:02:86:8f:e4:e8:f4:
45:b7:2a:27:fb:e5:fc:92:22:64:4b:c9:b4:3e:f0:9b:9e:00:
3d:f8:2f:81:5e:4c:7f:15:09:85:4b:e8:c6:5e:b2:33:f6:1c:
7f:0b:79:03:d4:54:ac:ca:a3:cd:6d:16:76:86:3f:b5:91:5a:
dd:7a:6f:2e:f2:b0:b7:84:95:5c:51:39:fb:6d:3e:25:5a:20:
01:a8:ff:43:34:b9:9f:cc:38:a0:32:a9:7d:c9:a9:f7:82:16:
a0:eb:43:dd:1b:82:ee:f2:e3:35:22:41:88:0a:1f:29:03:51:
b0:95:1d:d5:b4:ee:99:ec:da:fc:c9:75:8f:ba:6c:ba:bb:a5:
9d:00:92:c9:3e:fe:7d:61:93:58:43:9b:5a:bb:59:c0:26:aa:
48:9d:16:54:35:dc:a1:b4:d0:bd:a8:f4:f1:77:14:a9:6f:08:
7d:23:13:3e:78:8b:94:ab:ab:c9:15:e5:47:51:05:fe:2e:7a:
06:7c:2c:5d:51:c0:51:f2:bb:b8:67:11:07:e6:d8:18:de:5e:
41:27:d9:d2:97:32:71:cc:2a:9a:dd:35:6f:29:f9:80:a5:d0:
b5:79:eb:4c:b1:d1:7b:88:0c:4b:54:9a:bf:d3:07:c9:68:14:
33:29:4d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:46:05 2026 by rpki-client