
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
File: p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json)
Hash identifier: qn8pgV63bAkpgc/VebggrWAOMG+dBaSd1/QRvmQbU9s=
Subject key identifier: 2C:07:E5:E4:F2:E0:FF:57:44:E2:66:65:E7:EC:0A:8C:C4:6A:36:06
Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D
Certificate issuer: /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D
Certificate serial: 0BCC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
Manifest number: 0BBD
Signing time: Thu 26 Mar 2026 18:53:24 +0000
Manifest this update: Thu 26 Mar 2026 18:53:24 +0000
Manifest next update: Thu 02 Apr 2026 18:53:24 +0000
Files and hashes: 1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: ygmuGd6uA4aDDYeRyGnz4G/kKC48CJMOzrKsZbdSIW0=)
2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: ZiiZYbmkg3n6zqgPw8ZXM9niSF2z+ejf3luh9TSJfQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl
rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 18:53:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3020 (0xbcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D65, serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D
Validity
Not Before: Mar 26 18:53:24 2026 GMT
Not After : Apr 2 18:53:24 2026 GMT
Subject: CN=69c580a4-ffd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:97:4b:c9:71:c4:bb:83:98:41:04:33:02:
84:41:1d:52:d7:51:db:3e:d3:ca:79:3b:c6:95:ec:
c6:62:4c:98:88:4e:4a:ae:90:05:fa:40:18:60:69:
c6:cd:ff:26:6e:c1:7f:9b:1f:9d:5f:84:ce:3b:4a:
db:ce:5a:2e:6a:c1:d8:13:46:94:02:ae:9c:9e:cb:
82:2d:79:ad:0d:01:b0:e7:b1:cd:80:cd:57:50:5d:
24:be:f5:89:dc:22:d8:30:57:25:e3:46:9d:e2:37:
46:53:11:b0:cd:26:1f:91:90:27:e5:f6:0e:b8:a9:
80:3e:eb:0d:38:85:dd:ca:74:9d:2d:45:e0:31:8c:
89:74:b7:41:c1:69:09:ad:3e:47:c0:aa:dd:cf:8e:
ae:79:11:b4:0d:5e:d6:7a:28:5c:c8:d3:c7:c0:2f:
5c:5f:de:b1:41:14:33:1d:8a:4c:2b:e6:ce:8a:00:
eb:37:29:d1:f9:19:8c:ca:21:e1:14:33:f1:af:09:
63:72:7c:8f:3b:5f:76:32:d8:14:a7:65:52:d7:47:
1e:b1:d0:d1:4e:0b:fc:76:31:7b:10:90:4e:52:99:
77:7c:ea:54:08:3e:78:bc:52:5a:19:91:ad:e2:0e:
ad:f4:d6:ab:74:35:a3:e3:9d:ea:ea:23:29:77:4d:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:07:E5:E4:F2:E0:FF:57:44:E2:66:65:E7:EC:0A:8C:C4:6A:36:06
X509v3 Authority Key Identifier:
keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:33:06:87:47:29:4c:b6:98:10:87:85:e3:e5:e9:3b:9a:78:
6b:ae:be:b1:6b:e8:a0:93:e4:53:fc:e7:07:19:1e:fc:91:4a:
84:8a:29:16:62:b0:6b:97:38:0c:a7:08:ee:e6:2e:fc:f9:c2:
da:ac:64:9f:95:60:35:67:e0:f9:aa:6c:ec:27:09:68:3a:66:
a2:77:8d:64:4d:ac:10:56:a2:43:b6:87:9b:48:9e:1e:f8:f0:
93:31:ff:8a:38:cd:c9:c0:95:91:71:93:2e:bb:da:6e:4f:df:
86:bf:b1:08:7c:07:5c:6f:86:05:d5:44:4b:ad:cc:10:db:ef:
28:e0:f1:7c:63:b9:ef:1b:dd:ba:d7:cb:f4:8d:e2:10:84:ef:
19:39:b4:1e:f1:db:62:96:61:6f:29:c0:06:10:c8:1a:6a:7f:
94:db:bd:2b:23:cd:99:d3:65:2e:ae:bc:9d:86:ff:0a:a3:00:
18:70:3c:0d:18:cd:53:37:e3:c7:65:c8:5e:79:40:8c:1b:03:
a3:5e:4c:0b:e7:eb:c8:bf:98:22:43:b7:f7:20:c1:77:ea:21:
67:eb:65:8c:6a:14:97:61:3f:f3:5b:0b:2b:13:f1:1a:ef:03:
e2:19:de:67:37:66:e8:83:07:23:02:47:4a:51:82:29:5e:fa:
80:eb:9a:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdENjUxMTAvBgNVBAUTKEE3NzgzOEQ3RjU0MUM2MURCMDY5REFCQ0U1RDgzNzA5
QTdDMkFFMEQwHhcNMjYwMzI2MTg1MzI0WhcNMjYwNDAyMTg1MzI0WjAYMRYwFAYD
VQQDEw02OWM1ODBhNC1mZmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw4yXS8lxxLuDmEEEMwKEQR1S11HbPtPKeTvGlezGYkyYiE5KrpAF+kAYYGnG
zf8mbsF/mx+dX4TOO0rbzlouasHYE0aUAq6cnsuCLXmtDQGw57HNgM1XUF0kvvWJ
3CLYMFcl40ad4jdGUxGwzSYfkZAn5fYOuKmAPusNOIXdynSdLUXgMYyJdLdBwWkJ
rT5HwKrdz46ueRG0DV7WeihcyNPHwC9cX96xQRQzHYpMK+bOigDrNynR+RmMyiHh
FDPxrwljcnyPO192MtgUp2VS10cesdDRTgv8djF7EJBOUpl3fOpUCD54vFJaGZGt
4g6t9NardDWj453q6iMpd02EJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCwH5eTy
4P9XROJmZefsCozEajYGMB8GA1UdIwQYMBaAFKd4ONf1QcYdsGnavOXYNwmnwq4N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2NS8xQTBEQTgyQTQw
NjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnhoMndhZHE4NWRnM0NhZkNy
ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3AzZzQxX1ZCeGgyd2FkcTg1ZGczQ2FmQ3JnMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0Q2NS8xQTBEQTgyQTQwNjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnho
MndhZHE4NWRnM0NhZkNyZzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJjMGh0cpTLaYEIeF4+XpO5p4a66+sWvooJPkU/znBxke/JFKhIopFmKwa5c4
DKcI7uYu/PnC2qxkn5VgNWfg+aps7CcJaDpmoneNZE2sEFaiQ7aHm0ieHvjwkzH/
ijjNycCVkXGTLrvabk/fhr+xCHwHXG+GBdVES63MENvvKODxfGO57xvdutfL9I3i
EITvGTm0HvHbYpZhbynABhDIGmp/lNu9KyPNmdNlLq68nYb/CqMAGHA8DRjNUzfj
x2XIXnlAjBsDo15MC+fryL+YIkO39yDBd+ohZ+tljGoUl2E/81sLKxPxGu8D4hne
Zzdm6IMHIwJHSlGCKV76gOua5g==
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:36:20 2026 by rpki-client