
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
File: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft (raw, json)
Hash identifier: VDNE73P3uvOjmJ3QDLn3BxNHtJI2tb7IveWQ6tb49/s=
Subject key identifier: B5:F1:E2:D0:81:F1:3A:EB:A0:2B:8C:AB:86:CA:C3:6D:64:25:CE:21
Authority key identifier: DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73
Certificate issuer: /CN=A91B5AAA/serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873
Certificate serial: 0C37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
Manifest number: 41B2
Signing time: Tue 22 Sep 2026 14:47:56 +0000
Manifest this update: Tue 22 Sep 2026 14:47:56 +0000
Manifest next update: Tue 29 Sep 2026 14:47:56 +0000
Files and hashes: 1: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl (hash: NPInuitan6CSPA/9jwUKoZ9QQEDbTepPqJn1AHWxF9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl
rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3127 (0xc37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5AAA, serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873
Validity
Not Before: Sep 22 14:47:56 2026 GMT
Not After : Sep 29 14:47:56 2026 GMT
Subject: CN=6ab2951c-f56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:c0:c9:73:d3:82:09:d6:6f:73:46:64:6c:
05:66:e1:93:73:a2:68:24:86:b7:6a:29:55:eb:af:
5b:fb:14:ce:8d:0a:50:2c:06:d4:df:e0:03:db:6b:
f7:56:86:b9:33:71:03:dd:c0:e0:eb:f9:c1:ed:96:
cf:8a:90:8a:f9:bc:48:b1:2d:93:bc:ea:fd:3f:66:
16:b0:6e:c9:81:99:75:ab:6a:2a:83:73:4a:89:43:
e0:03:0f:63:24:4c:eb:b2:6e:97:e1:c4:d1:16:c6:
5d:9a:ba:17:38:15:9b:43:93:c2:cc:55:ac:31:97:
cb:b3:17:a5:0d:10:1d:dc:b0:d7:d4:f2:df:49:d9:
32:cb:92:c0:60:e5:2f:d9:74:65:fb:79:f6:52:ea:
b9:4e:4b:65:90:22:c1:08:dd:ef:59:bf:1a:bc:0d:
c4:1f:e5:95:c6:54:2e:96:e4:14:32:3f:a1:92:4c:
1f:d9:04:9b:c4:0e:a8:f6:aa:e3:2a:ef:da:dd:a9:
fb:04:d3:e6:45:fa:a0:be:87:cb:8b:e3:8d:1b:80:
11:b5:80:c6:e7:98:43:c0:1c:ad:a4:d7:ec:c0:c5:
af:e1:00:b3:8d:ef:12:30:84:33:43:f3:ec:26:6a:
b3:19:05:6f:c7:9f:b2:82:dc:4d:d6:ab:bd:03:16:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F1:E2:D0:81:F1:3A:EB:A0:2B:8C:AB:86:CA:C3:6D:64:25:CE:21
X509v3 Authority Key Identifier:
keyid:DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ee:90:23:14:95:4a:fc:0f:be:6b:db:83:da:aa:bf:e9:8c:
54:07:39:dc:71:31:08:cd:a5:ae:70:b1:23:aa:2a:00:c0:86:
56:d1:93:b6:ae:38:e6:e5:0e:c1:b5:03:4c:64:a4:a0:24:c9:
e8:19:ab:a0:a6:ac:aa:51:d9:e6:3d:b1:43:ff:63:50:52:34:
36:6b:74:a3:97:e8:b6:e1:3b:5b:02:63:42:88:71:aa:27:a7:
b7:95:35:af:0f:e3:4e:cf:8a:f2:d1:50:11:3e:1d:f7:78:bd:
00:c2:32:e1:1c:eb:f2:22:5d:c0:80:7a:54:8c:b8:64:b5:76:
71:d7:9f:e5:88:67:49:46:4f:e6:92:05:65:02:5e:31:ff:02:
a0:57:fd:7f:cb:8c:da:83:2b:4b:81:17:72:be:9d:d7:df:2f:
64:87:2f:61:a2:dd:7a:24:91:d1:8d:10:ba:12:86:e7:13:fa:
01:7a:62:84:cd:ed:2b:4c:b9:52:d8:bc:ee:6b:a1:5e:99:a0:
5a:fc:42:2e:ec:cf:1f:be:00:28:f3:81:c7:34:07:11:b9:43:
ef:cd:e7:e4:7b:d7:ec:91:53:fa:7e:ca:f4:7d:71:b4:7a:08:
b3:ac:bb:69:9d:fe:c2:94:36:2f:ea:de:80:e6:e5:ed:34:e0:
2b:30:d9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:34:38 2026 by rpki-client