
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
File: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft (raw, json)
Hash identifier: DT9f58oDiCft9QCcDqJP/dDYL75cC/30cWgrqSx4aTM=
Subject key identifier: 55:A0:84:94:A4:AD:8A:76:21:41:EF:8B:16:04:25:BC:77:05:27:23
Authority key identifier: DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73
Certificate issuer: /CN=A91B5AAA/serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873
Certificate serial: 0BDA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
Manifest number: 40F8
Signing time: Tue 24 Mar 2026 14:48:23 +0000
Manifest this update: Tue 24 Mar 2026 14:48:22 +0000
Manifest next update: Tue 31 Mar 2026 14:48:22 +0000
Files and hashes: 1: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl (hash: AP7EKdEFLoTldCV3Y9Xfzs0p6hr6JXddg2ucFjliuVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl
rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3034 (0xbda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5AAA, serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873
Validity
Not Before: Mar 24 14:48:22 2026 GMT
Not After : Mar 31 14:48:22 2026 GMT
Subject: CN=69c2a436-a0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4f:c3:f9:ec:2f:ba:6a:0e:25:39:23:b0:63:
2d:aa:54:9e:54:f1:b1:55:a6:9d:34:3c:90:33:4f:
73:7e:3e:d9:b2:66:0b:e2:3b:f5:a0:1b:0e:00:00:
6c:a7:1e:21:fc:e2:ec:16:4d:c5:c9:59:6d:97:db:
e5:a0:16:19:56:f5:2f:25:97:e7:6d:8f:c5:8b:90:
5d:ae:60:a9:9e:b1:e2:52:ed:98:0b:ad:b0:b9:cb:
d6:1a:d7:8c:bb:8e:be:2b:84:a1:eb:11:cd:66:9c:
a9:fc:b5:71:de:1f:1a:08:0a:c9:4c:6d:96:7a:4f:
e3:64:c1:96:dc:6f:c4:64:14:84:ab:b3:8d:b2:d0:
58:43:3d:b3:7c:6d:f3:e8:7f:91:39:32:20:11:3a:
84:d1:7d:d6:f9:e5:f8:c9:2a:44:11:2b:a1:8a:4f:
fd:2e:b8:74:3c:9c:0b:28:ec:2d:8f:4b:66:d8:63:
c9:80:28:43:7a:6b:67:cd:73:74:05:b0:a5:e0:e0:
c8:28:de:86:75:2c:93:07:04:2a:6c:c4:d5:db:d8:
ca:09:3e:38:e2:52:01:d0:f7:92:fb:91:93:33:0e:
44:42:17:87:a6:77:66:8d:1c:8c:22:b3:7b:87:4e:
a4:48:4f:32:57:55:a9:22:e2:80:68:36:58:98:70:
00:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A0:84:94:A4:AD:8A:76:21:41:EF:8B:16:04:25:BC:77:05:27:23
X509v3 Authority Key Identifier:
keyid:DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:52:ff:2a:39:cf:c3:f1:1d:2b:81:49:d5:f2:96:fb:b6:26:
06:c5:6f:5e:38:6e:01:3e:00:41:a3:5c:6c:9e:94:76:34:2e:
a9:b4:a4:e5:7e:c5:47:e6:d9:0a:79:73:c9:4a:30:20:fd:d7:
d9:1c:02:0f:ae:8b:d8:7c:53:74:b9:10:24:d5:8b:6e:96:58:
99:98:2f:41:6a:d6:8e:59:af:b2:73:9e:7d:c9:96:43:e3:3c:
12:88:63:fd:37:97:a9:7a:6e:2a:06:56:60:f1:cc:c9:55:d3:
c8:d6:0e:57:b3:5b:dc:31:bb:13:a9:84:be:92:12:a0:70:d4:
4a:4d:cd:9b:ce:16:72:ac:eb:e2:43:22:40:1b:91:c5:f3:34:
56:ee:96:1e:bd:3d:f3:e0:84:58:e2:ac:60:1f:9d:09:e8:c6:
d1:53:ad:0c:f9:d6:fe:97:1c:6b:17:7a:e6:cc:03:49:69:18:
97:da:a3:3d:d4:84:0c:46:9d:02:40:be:7e:f0:fb:23:cb:fa:
31:a6:a2:b9:01:40:a4:55:86:a0:45:a1:e8:d0:9c:f2:2a:3a:
34:dc:3d:d9:22:19:4a:09:02:35:7c:4e:f5:15:0d:52:2c:94:
6d:23:0d:f7:88:aa:79:23:c4:34:5f:66:ad:04:e4:28:86:1e:
8e:27:ea:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:14 2026 by rpki-client