
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
File: 3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft (raw, json)
Hash identifier: 15CzrdKT7JvfN2vCCs6h/kQt6QHU9mC3j/lUhqX7Cds=
Subject key identifier: 15:D4:74:35:9A:7E:81:BF:5D:E2:A2:17:92:F8:50:86:5A:12:F5:6B
Authority key identifier: DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0
Certificate issuer: /CN=A91A5201/serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
Manifest number: AF
Signing time: Wed 25 Mar 2026 06:20:04 +0000
Manifest this update: Wed 25 Mar 2026 06:20:04 +0000
Manifest next update: Wed 01 Apr 2026 06:20:04 +0000
Files and hashes: 1: 3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl (hash: Hj3bYPZEBNxyUs8o9HmHkLIVbPlzeub1ENVJRjiISlw=)
2: D0CA23541BC611F09FDAC047C4F9AE02.roa (hash: 0ABnHn0tYQYE8SzbXPlx35zELqu/1VmLMO+AifbeoVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl
rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5201, serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
Validity
Not Before: Mar 25 06:20:04 2026 GMT
Not After : Apr 1 06:20:04 2026 GMT
Subject: CN=69c37e94-d39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:55:92:9e:2a:51:4b:30:b4:7c:c4:99:db:76:
67:90:e2:64:de:c3:c4:10:3b:11:d0:1f:1d:f2:ed:
1e:36:51:17:f7:2b:68:bc:eb:a6:bb:15:06:1f:1a:
9c:a1:06:0c:96:51:5b:1b:93:ef:24:98:65:9c:88:
03:30:41:8b:a2:09:86:66:59:71:30:4f:1f:1c:f4:
ad:76:0c:e2:07:f7:59:e1:b1:76:72:cf:49:ed:6c:
4f:21:fa:b9:6f:79:88:f3:23:6b:dc:7b:cd:92:5e:
85:9c:d7:71:9c:cb:5b:53:27:d0:0e:6e:b8:a3:da:
df:a1:53:1e:22:e8:a4:47:f5:9b:fc:da:2b:e5:1f:
8e:fb:15:cf:a4:e6:6d:b7:76:f0:1c:41:77:ea:f4:
3a:79:25:fc:2d:27:59:61:79:85:1b:63:4d:f0:0f:
50:59:47:73:91:8e:de:56:2d:41:f4:ba:57:af:3c:
ee:03:39:4e:29:82:d6:81:7b:6f:3b:58:37:c1:26:
61:26:5e:bb:01:77:1e:5b:57:fb:e1:be:3b:66:6f:
c3:dd:bc:1b:ad:d4:7c:16:f6:7a:13:9b:a9:ed:34:
9a:2e:2b:c1:f8:40:93:10:8c:30:ee:1d:b9:5c:a0:
8d:5d:e8:49:f8:64:a8:7a:a7:f2:3d:ae:4d:4c:4a:
6c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D4:74:35:9A:7E:81:BF:5D:E2:A2:17:92:F8:50:86:5A:12:F5:6B
X509v3 Authority Key Identifier:
keyid:DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ec:91:2e:c5:67:b3:10:78:91:a4:61:b4:85:37:a2:ab:45:
c9:a0:1d:33:ad:dc:8f:af:a1:cc:03:66:61:8c:ee:b0:22:8e:
4a:f5:15:d2:66:c7:f5:a6:87:e8:8a:1f:44:ff:cc:d9:f1:91:
f9:29:db:aa:02:f8:f4:7b:b0:9c:1a:ab:77:40:0a:3a:fc:f4:
91:a1:e0:fd:65:5f:1e:a1:48:6c:41:64:4d:61:30:65:82:4f:
c9:b0:bd:12:e4:93:2f:9e:91:bf:bc:82:62:32:ef:48:b3:b0:
64:12:56:81:29:66:dc:ae:c6:08:d1:b0:ed:44:6f:0f:26:fa:
6d:af:b2:df:14:87:f6:ee:73:12:5b:9f:2d:5c:b2:44:2f:3d:
76:31:76:5c:cc:30:60:8f:c7:eb:97:ba:3b:35:8c:81:6e:51:
84:c0:95:63:e1:be:61:22:23:82:97:a4:cc:26:d3:29:47:c5:
69:b1:e5:1e:b0:3e:9e:34:5f:83:08:fe:52:45:44:42:32:e7:
72:db:b3:30:a7:97:ba:69:47:66:03:5b:4a:0e:ed:94:dc:12:
84:22:e3:85:6b:00:5c:88:1e:0c:10:08:de:95:7c:c9:ac:aa:
15:79:f1:1c:6c:45:69:95:34:e0:aa:db:02:6d:ef:fb:06:a4:
88:81:12:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTUyMDExMTAvBgNVBAUTKERFRTVCOEJDODUwQTVCNkJDQjQ2RDdFM0I0Qzk3RThC
ODMyOEE3QTAwHhcNMjYwMzI1MDYyMDA0WhcNMjYwNDAxMDYyMDA0WjAYMRYwFAYD
VQQDEw02OWMzN2U5NC1kMzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAklWSnipRSzC0fMSZ23ZnkOJk3sPEEDsR0B8d8u0eNlEX9ytovOumuxUGHxqc
oQYMllFbG5PvJJhlnIgDMEGLogmGZllxME8fHPStdgziB/dZ4bF2cs9J7WxPIfq5
b3mI8yNr3HvNkl6FnNdxnMtbUyfQDm64o9rfoVMeIuikR/Wb/Nor5R+O+xXPpOZt
t3bwHEF36vQ6eSX8LSdZYXmFG2NN8A9QWUdzkY7eVi1B9LpXrzzuAzlOKYLWgXtv
O1g3wSZhJl67AXceW1f74b47Zm/D3bwbrdR8FvZ6E5up7TSaLivB+ECTEIww7h25
XKCNXehJ+GSoeqfyPa5NTEpsdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBXUdDWa
foG/XeKiF5L4UIZaEvVrMB8GA1UdIwQYMBaAFN7luLyFCltry0bX47TJfouDKKeg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIwMS80NUFBQTFFODFC
NTUxMUYwQTM5NUI4MTNDNEY5QUUwMi8zdVc0dklVS1cydkxSdGZqdE1sLWk0TW9w
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzN1VzR2SVVLVzJ2TFJ0Zmp0TWwtaTRNb3A2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTIwMS80NUFBQTFFODFCNTUxMUYwQTM5NUI4MTNDNEY5QUUwMi8zdVc0dklVS1cy
dkxSdGZqdE1sLWk0TW9wNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOuyRLsVnsxB4kaRhtIU3oqtFyaAdM63cj6+hzANmYYzusCKOSvUV0mbH9aaH
6IofRP/M2fGR+SnbqgL49HuwnBqrd0AKOvz0kaHg/WVfHqFIbEFkTWEwZYJPybC9
EuSTL56Rv7yCYjLvSLOwZBJWgSlm3K7GCNGw7URvDyb6ba+y3xSH9u5zElufLVyy
RC89djF2XMwwYI/H65e6OzWMgW5RhMCVY+G+YSIjgpekzCbTKUfFabHlHrA+njRf
gwj+UkVEQjLnctuzMKeXumlHZgNbSg7tlNwShCLjhWsAXIgeDBAI3pV8yayqFXnx
HGxFaZU04KrbAm3v+wakiIESIg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:12 2026 by rpki-client