
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft
File: 3aSfQfYYpV-cp8_FW66nthbZV2I.mft (raw, json)
Hash identifier: XFSiLWptNe4hXIQLFciy6RkStM5p8C/28uZ4yu67kIs=
Subject key identifier: 98:C3:31:07:44:4B:C4:05:BC:82:CE:90:CB:6E:B4:CB:EA:C4:61:E6
Authority key identifier: DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62
Certificate issuer: /CN=A91A7273/serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft
Manifest number: D7
Signing time: Wed 25 Mar 2026 05:54:43 +0000
Manifest this update: Wed 25 Mar 2026 05:54:42 +0000
Manifest next update: Wed 01 Apr 2026 05:54:42 +0000
Files and hashes: 1: 3aSfQfYYpV-cp8_FW66nthbZV2I.crl (hash: bXxhgl2ZGBuI+r4Nb0K6IqyB258sOxGa8GLXDVfBQyM=)
2: 3958EEC642BB11F0B449BB81C4F9AE02.roa (hash: xBMqZvhUayr3U1URgwrl8EIqJ+zMDOpes797KaEjYwY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl
rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7273, serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762
Validity
Not Before: Mar 25 05:54:42 2026 GMT
Not After : Apr 1 05:54:42 2026 GMT
Subject: CN=69c378a3-5815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:78:cc:29:a1:94:21:e0:fa:9f:d6:dd:53:ea:
ba:f3:08:27:a2:f6:59:4a:92:16:c3:d3:d4:c4:6c:
f4:44:b6:37:9b:ff:79:66:14:f0:83:11:c8:e4:3c:
a8:9d:b4:17:ab:2c:57:54:83:1c:9d:fc:22:a9:8d:
18:64:cb:53:eb:82:6f:59:d4:d3:8a:91:f7:df:fb:
2d:14:c3:5c:3e:fa:77:5b:b7:c8:59:84:b5:40:3e:
d0:fd:de:7d:a0:b5:53:71:d4:95:00:85:b5:fc:88:
d5:c6:3b:f8:76:7e:28:4b:c4:4d:e8:69:05:83:4b:
f8:bf:9c:39:55:ba:c6:32:51:52:98:78:f2:0a:df:
d9:0c:04:e8:8b:d5:0d:57:1a:6f:df:da:d7:a7:34:
18:bf:74:9e:c3:a5:81:c6:b0:4c:ba:e5:17:41:bd:
92:9a:f4:e7:39:59:2c:8b:08:73:a4:23:0a:b6:ae:
df:d5:ae:84:bc:ee:24:d6:78:17:3c:6c:9c:90:75:
98:e0:19:57:8e:83:68:42:57:b1:52:11:15:98:1a:
e4:06:ff:76:23:d4:e5:4e:35:27:3d:de:89:5f:02:
4a:ed:5e:7a:28:46:da:0e:25:3c:7c:6d:69:9d:59:
9e:6c:64:48:ae:44:a3:4c:df:75:88:d5:29:14:44:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C3:31:07:44:4B:C4:05:BC:82:CE:90:CB:6E:B4:CB:EA:C4:61:E6
X509v3 Authority Key Identifier:
keyid:DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:91:39:5c:fa:f2:52:23:a7:fa:b4:fe:57:cf:ef:8a:f8:f5:
b1:82:6b:ad:98:46:fd:3d:6a:65:75:7b:1a:92:d5:24:16:07:
4a:6d:2d:0f:f5:e1:cd:56:a7:b3:a6:0c:79:ea:bb:bb:36:fe:
54:3e:cc:c0:d1:90:d3:c0:76:c1:a3:cb:0b:d3:8a:2a:1e:7e:
d3:01:64:70:ca:bd:3b:2d:40:7c:14:6b:51:27:2f:5b:b0:e4:
67:4b:0a:87:26:f8:20:cf:30:f8:17:3d:c0:cd:a2:d5:49:40:
97:cd:75:c1:9b:af:92:cb:43:69:ec:9b:00:5a:13:b4:27:82:
d7:91:3e:97:c8:4c:63:bc:0c:85:36:5a:07:f4:e8:2f:c9:fd:
ba:43:96:b8:f8:76:a1:3a:35:72:1a:93:40:2a:cc:1e:ef:d8:
7a:82:2f:51:1e:0d:2f:f7:98:62:34:c3:a0:bd:4e:46:5a:7d:
00:01:a6:29:60:ce:3e:85:e8:9e:c3:70:7c:ef:ee:38:3b:4f:
dc:c8:5f:bf:8b:d4:cc:af:a6:b7:6f:bd:29:1f:3c:9a:36:66:
d4:ef:6e:15:07:a3:2e:c7:c1:c4:2d:4a:06:be:6c:74:42:5e:
35:f8:9e:92:5a:c9:4d:ba:2d:dc:ec:c4:03:9e:9a:f3:2c:73:
58:5d:a9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:21 2026 by rpki-client