
$ rpki-client -vvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
File: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft (raw, json)
Hash identifier: FnriQ6+4n82P/D/0rKMBIY13dOtiJV2hOAoUJjwdZh8=
Subject key identifier: 8D:87:22:84:D0:29:6D:06:55:77:15:AA:31:CA:C4:D1:D3:D0:03:F8
Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
Certificate issuer: /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Certificate serial: 0C74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
Manifest number: 0C6B
Signing time: Tue 24 Mar 2026 18:27:00 +0000
Manifest this update: Tue 24 Mar 2026 18:27:00 +0000
Manifest next update: Tue 31 Mar 2026 18:27:00 +0000
Files and hashes: 1: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl (hash: UgXIYXFiQsJU+4WtWNNze+PJlkVFq3/rdgDx89dm95I=)
2: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (hash: 40R+DRWbI6AD7X69y+O2s0U8qVSzuQdPnKR80+3niV8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3188 (0xc74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91822BF, serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Validity
Not Before: Mar 24 18:27:00 2026 GMT
Not After : Mar 31 18:27:00 2026 GMT
Subject: CN=69c2d774-6ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:25:7d:c9:b0:ab:a5:5c:58:4c:99:96:b4:8e:
ac:93:27:a3:a5:94:22:28:d1:1c:be:e9:6f:20:02:
f7:99:90:fd:7c:d4:6b:b3:60:27:09:e1:8f:be:01:
12:b4:a7:c7:e0:ae:a6:02:a5:47:41:d6:0d:db:5d:
c9:f8:05:2c:a9:89:aa:ab:e0:19:7c:9b:ba:11:49:
73:42:5c:a2:cc:18:55:48:fe:4a:45:5a:1a:e9:30:
cf:55:47:87:45:3b:54:d0:37:a2:0a:c6:47:79:7b:
f2:6c:7e:1d:35:67:b2:a9:55:f9:3b:d5:dc:ee:9f:
f9:7e:a4:9b:bf:2d:d6:9e:fb:96:48:73:90:31:8a:
27:a1:2b:8a:ba:c3:ca:50:33:a0:cb:02:88:4f:b9:
94:83:a9:9b:0b:09:1a:b1:25:3f:27:53:8f:47:36:
86:81:2b:ac:5a:1b:c9:fa:a8:91:82:d1:c1:88:8d:
db:f7:0d:d0:ca:9a:79:88:9d:22:3d:b4:f9:e9:d0:
21:f1:09:96:23:63:3f:3d:f4:d8:9a:12:fb:f4:db:
f5:b8:ca:5c:1d:bb:97:11:39:88:fc:b0:62:d8:dc:
a2:90:f1:b0:88:a2:7f:cd:30:9e:82:f5:4e:a8:9e:
18:79:c3:a0:b4:e8:5e:a9:d8:3d:a7:62:0a:a3:a6:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:87:22:84:D0:29:6D:06:55:77:15:AA:31:CA:C4:D1:D3:D0:03:F8
X509v3 Authority Key Identifier:
keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:21:78:0d:b6:53:24:ea:87:d8:77:5c:3d:e4:2c:bd:8e:0a:
47:e0:f3:cb:ba:5e:c8:7e:83:8e:7d:23:6f:4a:1c:54:a0:89:
0e:e5:f9:e4:51:fa:a2:c3:61:e7:ae:00:9d:53:1c:9a:eb:92:
21:19:50:c1:be:22:25:52:8c:4d:fe:9d:a0:82:28:97:80:0e:
13:02:3b:27:34:16:56:f8:b5:c3:1b:3f:ab:8f:51:31:0a:2a:
65:ad:56:27:cf:5b:40:3e:e4:ff:86:e6:e9:06:b6:5f:05:a1:
73:d0:88:2f:f8:3d:4d:12:8a:fd:f1:72:e0:16:b5:7b:a4:c8:
45:69:4d:aa:31:d9:4d:56:6e:2a:4c:d7:4e:0e:dd:c6:6a:98:
90:eb:87:22:57:72:82:de:11:f1:46:d2:33:f2:6c:74:09:a9:
87:ce:25:08:cf:a9:92:db:94:5c:90:d8:27:4c:6b:39:48:aa:
42:97:78:14:0b:43:ac:be:27:06:19:85:28:ad:b6:b9:57:a6:
a9:60:73:ac:e2:c7:9b:ae:f5:7c:b4:f1:7f:58:c5:5b:84:a0:
d6:aa:34:f4:56:f8:ab:39:89:40:12:cb:7f:ae:5a:1e:36:e1:
f3:64:a6:b3:6d:fc:10:39:0d:3e:b4:72:cd:3a:01:73:83:46:
41:c9:82:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:02 2026 by rpki-client