
$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
File: 3yS01RxnhB3WAN0qYXhrzpiHhmc.mft (raw, json)
Hash identifier: BFK2IxPwFAA8jFgZBX8QHaHiQZ5r/lRH7CG4mFOaiTU=
Subject key identifier: B6:60:5B:C0:F1:FE:A9:7C:45:49:A2:79:70:93:2B:C6:DD:A0:15:6B
Authority key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
Certificate issuer: /CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
Certificate serial: 0134
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
Manifest number: 012C
Signing time: Wed 25 Mar 2026 04:47:34 +0000
Manifest this update: Wed 25 Mar 2026 04:47:33 +0000
Manifest next update: Wed 01 Apr 2026 04:47:33 +0000
Files and hashes: 1: 3yS01RxnhB3WAN0qYXhrzpiHhmc.crl (hash: 794Kq/cl6Tova2t+FeHXm36wbjC8fXlGgQqVcPoJ/xw=)
2: B21985725F3711EFA108CA0CC4F9AE02.roa (hash: qCZfH+xJ2p/8mTPa4y8ptTvD/J5HFYkwYWe+Fplo+JE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl
rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:47:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91813ED, serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
Validity
Not Before: Mar 25 04:47:33 2026 GMT
Not After : Apr 1 04:47:33 2026 GMT
Subject: CN=69c368e6-4122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:65:8e:c7:a8:17:e1:89:68:f4:a4:7d:6e:
ad:c7:d3:d7:4c:38:ce:1c:4e:0d:5e:be:6b:5c:e5:
d5:e3:b1:7b:dc:19:07:d9:ea:f1:dc:f3:26:d5:45:
3f:6c:a5:1a:30:74:b0:35:a7:2e:20:8c:5f:c9:cf:
f4:84:a0:77:67:36:d9:d1:dd:1a:1a:ec:bd:bb:18:
bc:4d:b0:37:76:2d:6e:b8:5f:55:d5:cb:4e:40:8a:
06:66:67:7b:06:eb:8a:57:82:59:6a:69:dd:f3:b6:
82:3d:ae:c8:0c:dc:5a:e0:3b:d6:86:dd:10:57:3b:
ff:2a:c2:7c:7f:95:32:71:ce:64:6f:94:4c:ab:96:
49:61:98:cb:1e:a9:29:21:1e:6e:2c:22:1e:f9:dc:
d5:fa:ae:36:02:4d:3b:32:77:90:e7:7a:05:32:ce:
e7:6f:fb:ac:28:4b:af:e6:dd:48:91:bc:b7:87:5d:
4c:63:28:3b:af:54:90:fd:cf:af:a3:fe:92:9a:b5:
7f:a6:53:38:5c:ac:67:bf:f9:5d:47:e9:c1:51:8f:
02:fc:12:28:ab:2d:6e:c6:8e:56:92:e0:11:91:4d:
01:a5:6f:75:29:20:8c:c9:cc:59:69:f8:8a:6d:fb:
05:ee:f4:f2:0a:0c:f7:3e:8f:62:5a:7b:ba:28:ec:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:60:5B:C0:F1:FE:A9:7C:45:49:A2:79:70:93:2B:C6:DD:A0:15:6B
X509v3 Authority Key Identifier:
keyid:DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:7c:4b:2a:f6:ff:4b:7d:15:74:08:26:f2:c9:ba:ca:1a:0a:
ff:14:dc:3d:91:e5:7d:cd:86:a9:b8:ba:c5:76:91:54:33:ac:
f0:85:fc:22:7b:a3:62:c2:bc:27:0a:34:27:ca:f9:41:9b:c6:
06:50:9a:f8:80:25:01:99:5e:02:e9:91:1c:4d:f4:2e:56:a9:
c1:33:32:6f:09:17:f0:be:2c:b4:fb:89:42:ba:51:58:c9:2c:
9d:5d:6b:69:fe:bb:af:d1:ae:01:b6:8b:8a:6d:a5:bd:28:a2:
63:c4:e5:de:ed:54:3e:ea:f3:fe:bc:32:45:34:96:f3:fd:42:
7f:e4:c8:96:a1:63:d8:3a:2f:ac:a9:ae:3e:50:39:c8:50:0f:
fe:02:a5:24:df:14:de:21:5c:63:e8:b8:d5:17:a0:2b:fa:6a:
f7:43:90:a6:f1:10:b5:75:b5:83:72:bd:9e:ae:48:07:e2:fa:
0a:21:48:af:85:98:ac:1a:d1:18:7a:c8:e9:a2:aa:bd:8e:a3:
e6:f8:97:65:95:4a:ac:cd:cf:74:80:f2:49:3d:22:9c:53:24:
44:3b:25:e0:17:ab:b3:01:de:96:89:35:8b:ad:78:d3:a3:7d:
f7:96:dd:7f:83:bb:63:a2:54:d1:b3:46:24:fc:1a:e0:7b:28:
9d:d0:5c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:48:45 2026 by rpki-client