
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
File: 3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json)
Hash identifier: bC7wfOkAjanhffn4T4IK2P/+w8TDmRt+ygBokAntwqY=
Subject key identifier: 25:FB:FB:3F:77:9E:3F:A5:55:3F:F9:44:AA:71:11:C6:65:C0:2A:ED
Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7
Certificate issuer: /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7
Certificate serial: 017C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
Manifest number: 0173
Signing time: Wed 25 Mar 2026 03:59:34 +0000
Manifest this update: Wed 25 Mar 2026 03:59:34 +0000
Manifest next update: Wed 01 Apr 2026 03:59:34 +0000
Files and hashes: 1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: k7vWJsafgo1V90jatuoU0QpxJfJHyaUjOf9lU30h2D8=)
2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: opYVyfVrf8nOteK7/xjEMUl4M6X/BkvRe3zd604oEu4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl
rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:59:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE2E, serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7
Validity
Not Before: Mar 25 03:59:34 2026 GMT
Not After : Apr 1 03:59:34 2026 GMT
Subject: CN=69c35da6-514b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7d:1c:27:02:d6:74:48:33:7c:9b:30:4f:d3:
db:e0:97:31:cf:4b:3b:0e:31:91:c2:14:ad:83:b9:
cd:1e:d5:99:dc:b6:1d:6a:da:08:65:73:49:03:cc:
bd:e9:df:e7:7c:a1:fa:e5:27:9f:75:88:0d:15:bb:
e6:62:cd:ec:bb:5d:ea:26:a3:ed:6a:6b:97:f5:4a:
5e:3c:8a:88:ce:f2:ba:4f:86:e6:91:9d:73:6d:60:
0f:9a:9b:7d:f9:99:26:65:76:47:49:32:9f:4f:24:
5d:13:da:76:16:a2:83:ae:5c:d1:fd:69:d3:32:57:
4b:0c:3a:0a:ed:02:8e:5a:d4:91:e8:f1:e1:e5:67:
08:b8:77:2e:20:1c:a9:b8:98:d2:f5:9c:58:ca:f9:
3b:b9:0e:f6:1f:65:2a:63:0a:83:62:89:d3:43:57:
d6:d8:28:00:47:f4:5b:53:24:ed:27:ed:58:e3:ab:
25:52:27:c2:30:08:73:2b:a5:e9:8c:9e:f8:74:dc:
e4:87:3e:0d:ef:1b:42:24:71:d7:12:46:1b:1d:eb:
92:f4:9d:a0:57:25:9e:b9:9d:4c:31:5d:3d:10:bf:
70:7f:9a:d7:0a:82:6c:8c:12:0a:a1:98:0d:a5:94:
a7:f4:fd:40:f8:3c:42:01:1f:fd:0c:22:14:1c:bd:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FB:FB:3F:77:9E:3F:A5:55:3F:F9:44:AA:71:11:C6:65:C0:2A:ED
X509v3 Authority Key Identifier:
keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:2a:df:af:e4:4e:82:80:f3:45:c5:fa:d1:87:1e:5b:d3:ba:
12:97:90:d5:7d:aa:ab:8f:17:87:51:0c:be:47:84:9d:91:d5:
42:61:c8:58:6b:5d:54:ab:60:eb:cb:38:ae:f1:38:0b:ff:77:
15:89:62:60:4b:4f:c8:27:41:b1:4a:4f:32:e2:1e:d2:03:be:
a7:48:7f:02:82:f7:fa:68:59:7c:2b:83:95:12:28:12:84:25:
b4:c3:d3:3b:bc:e2:e8:1a:79:33:01:d5:a1:5f:3f:76:1c:f2:
a3:2d:ca:68:3d:09:fa:9b:26:94:24:32:d6:cb:e2:8d:86:29:
45:ff:c0:ab:58:f1:df:68:eb:77:b8:9d:43:1e:96:eb:c2:19:
a5:e3:76:c3:b1:e9:5b:e6:10:b9:4a:dc:79:70:5c:7d:f0:ee:
3d:73:29:79:e7:ee:b5:4b:55:aa:0a:d7:ce:06:a2:65:d0:f8:
84:2f:53:06:0b:b9:1c:dd:85:0f:52:d8:ec:4c:1e:40:ad:fc:
42:f0:b3:b8:df:4d:c8:6c:60:a6:13:2c:7d:55:6c:ce:73:4f:
88:63:be:33:94:08:19:b9:c5:d1:d6:3c:f1:93:42:07:c5:a3:
36:c0:c2:e5:18:49:dd:03:ab:a5:30:d8:ab:7a:bf:b9:d8:a1:
a8:74:63:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:17 2026 by rpki-client