
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft
File: 3rAzsBIsJfawCvHCFkKTMuDSAe4.mft (raw, json)
Hash identifier: dy1XJ2eMHFo9V+eRruQSJuPYb9hUACi9/DY0WhKZOV4=
Subject key identifier: 93:E6:30:B0:26:91:E4:8E:3A:32:F4:83:94:1A:7C:D9:A3:7F:10:71
Authority key identifier: DE:B0:33:B0:12:2C:25:F6:B0:0A:F1:C2:16:42:93:32:E0:D2:01:EE
Certificate issuer: /CN=A9181D2A/serialNumber=DEB033B0122C25F6B00AF1C216429332E0D201EE
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft
Manifest number: 50
Signing time: Wed 25 Mar 2026 07:24:54 +0000
Manifest this update: Wed 25 Mar 2026 07:24:53 +0000
Manifest next update: Wed 01 Apr 2026 07:24:53 +0000
Files and hashes: 1: 3rAzsBIsJfawCvHCFkKTMuDSAe4.crl (hash: eoXxievWn50mz8gb9YNWGpv+4S28Di8Is7wqgTLT+ic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.crl
rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181D2A, serialNumber=DEB033B0122C25F6B00AF1C216429332E0D201EE
Validity
Not Before: Mar 25 07:24:53 2026 GMT
Not After : Apr 1 07:24:53 2026 GMT
Subject: CN=69c38dc6-67b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9d:3e:c4:fe:09:c6:55:d5:ec:02:c7:b0:55:
00:54:60:27:b3:f7:bb:56:b3:93:bf:84:8c:38:2c:
a6:b7:04:1d:49:dc:71:3a:f4:48:65:a9:bf:3a:93:
84:41:d1:8f:49:19:eb:17:16:b7:15:da:80:eb:eb:
3b:02:14:43:43:42:c6:41:99:09:a6:79:e9:32:bb:
7d:74:24:47:52:03:97:f6:54:81:77:d8:d4:97:d4:
68:5d:28:22:41:94:54:f8:47:a2:f1:df:16:91:47:
41:d8:0c:18:f0:98:43:5a:c8:67:5d:42:f3:6d:92:
12:d6:95:1b:12:b6:88:f6:bc:b0:1f:79:23:c0:d3:
a3:a0:73:8e:ed:25:73:13:2d:cd:25:c0:db:e8:3d:
a6:eb:4f:12:72:83:bf:62:ee:95:8d:64:b6:9b:43:
06:c4:48:47:bf:ba:9d:91:4e:33:7a:5a:3b:3c:c3:
b5:11:28:76:8d:a3:a6:90:ca:15:4e:34:f5:11:c3:
b1:15:87:21:e9:f0:db:b4:7a:80:ef:e8:9c:11:51:
82:8f:dc:e4:88:0a:27:30:b1:3c:db:ff:53:b4:a0:
5d:da:c3:86:c7:56:08:10:b0:91:93:85:e6:7b:24:
db:9e:cc:b1:67:a5:52:ca:c4:63:e5:08:ca:e8:2d:
dd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E6:30:B0:26:91:E4:8E:3A:32:F4:83:94:1A:7C:D9:A3:7F:10:71
X509v3 Authority Key Identifier:
keyid:DE:B0:33:B0:12:2C:25:F6:B0:0A:F1:C2:16:42:93:32:E0:D2:01:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:12:84:4e:84:6e:db:aa:77:ae:10:92:e3:f8:00:47:9e:2c:
12:22:cf:7e:06:7d:9a:62:22:53:4b:09:86:81:89:0e:44:ef:
b3:a4:90:06:cb:d6:83:7c:1e:18:82:43:9e:a9:46:ba:83:7d:
6b:97:86:90:ed:05:7c:88:63:3a:db:64:b9:c6:7f:c8:8d:d7:
71:df:16:c1:c3:49:bc:ce:c4:39:09:12:90:0b:ae:8d:bf:df:
9c:2d:1e:d7:27:9e:3c:50:7c:df:0d:34:f1:d8:d7:91:84:62:
3d:42:a9:df:3c:4d:74:2e:db:a0:74:3e:38:e6:b0:2e:49:fe:
77:a8:50:f8:65:d6:e4:a5:5e:0b:3e:81:d2:2a:91:10:9b:23:
fc:df:5e:00:7b:b7:7b:11:c8:46:ef:c5:0c:48:49:03:38:1a:
70:6b:53:a8:f9:51:67:29:52:be:76:da:76:a6:09:71:e0:8a:
f5:f8:56:e5:e5:33:5e:67:83:6a:ad:1b:02:fa:17:56:88:85:
bb:50:21:5c:55:c3:64:07:c0:30:18:14:ba:96:66:17:25:7c:
fa:e6:fa:2d:4a:8f:85:32:be:35:d3:62:13:89:6a:d7:b1:83:
f7:9d:9f:ef:5f:c2:56:a8:d7:c1:ee:9c:c2:af:84:c8:53:56:
2a:87:bc:aa
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MUQyQTExMC8GA1UEBRMoREVCMDMzQjAxMjJDMjVGNkIwMEFGMUMyMTY0MjkzMzJF
MEQyMDFFRTAeFw0yNjAzMjUwNzI0NTNaFw0yNjA0MDEwNzI0NTNaMBgxFjAUBgNV
BAMTDTY5YzM4ZGM2LTY3YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDenT7E/gnGVdXsAsewVQBUYCez97tWs5O/hIw4LKa3BB1J3HE69Ehlqb86k4RB
0Y9JGesXFrcV2oDr6zsCFENDQsZBmQmmeekyu310JEdSA5f2VIF32NSX1GhdKCJB
lFT4R6Lx3xaRR0HYDBjwmENayGddQvNtkhLWlRsStoj2vLAfeSPA06Ogc47tJXMT
Lc0lwNvoPabrTxJyg79i7pWNZLabQwbESEe/up2RTjN6Wjs8w7URKHaNo6aQyhVO
NPURw7EVhyHp8Nu0eoDv6JwRUYKP3OSICicwsTzb/1O0oF3aw4bHVggQsJGTheZ7
JNuezLFnpVLKxGPlCMroLd2rAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUk+YwsCaR
5I46MvSDlBp82aN/EHEwHwYDVR0jBBgwFoAU3rAzsBIsJfawCvHCFkKTMuDSAe4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxRDJBLzI1QTRBNkI2QjMx
RjExRjA5RDhBMjY0REM0RjlBRTAyLzNyQXpzQklzSmZhd0N2SENGa0tUTXVEU0Fl
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM3JBenNCSXNKZmF3Q3ZIQ0ZrS1RNdURTQWU0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx
RDJBLzI1QTRBNkI2QjMxRjExRjA5RDhBMjY0REM0RjlBRTAyLzNyQXpzQklzSmZh
d0N2SENGa0tUTXVEU0FlNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAbEoROhG7bqneuEJLj+ABHniwSIs9+Bn2aYiJTSwmGgYkORO+zpJAGy9aDfB4Y
gkOeqUa6g31rl4aQ7QV8iGM622S5xn/Ijddx3xbBw0m8zsQ5CRKQC66Nv9+cLR7X
J548UHzfDTTx2NeRhGI9QqnfPE10LtugdD445rAuSf53qFD4ZdbkpV4LPoHSKpEQ
myP8314Ae7d7EchG78UMSEkDOBpwa1Oo+VFnKVK+dtp2pglx4Ir1+Fbl5TNeZ4Nq
rRsC+hdWiIW7UCFcVcNkB8AwGBS6lmYXJXz65votSo+FMr4102ITiWrXsYP3nZ/v
X8JWqNfB7pzCr4TIU1Yqh7yq
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:29 2026 by rpki-client