
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
File: 3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft (raw, json)
Hash identifier: VG2bitaIEyGEeq+x151wtmxPrcyxV/RuDsHfhs2KQr4=
Subject key identifier: 59:74:33:1C:69:93:A1:98:AB:44:7A:1E:53:60:25:49:3F:83:B0:72
Authority key identifier: DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4
Certificate issuer: /CN=A91BA447/serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4
Certificate serial: 0BCB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
Manifest number: 0BC1
Signing time: Tue 12 May 2026 19:02:49 +0000
Manifest this update: Tue 12 May 2026 19:02:49 +0000
Manifest next update: Tue 19 May 2026 19:02:49 +0000
Files and hashes: 1: 3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl (hash: sc+DfHGHRKRyiAdgj8V5nZEwQN6z82nofUurLZBmfqY=)
2: 07F14B9C426411EABA91B569C4F9AE02.roa (hash: cS/wdhgr00IDQ4iDn6eXLrPbb+pnnoJwef/1Qu+PSys=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl
rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3019 (0xbcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA447, serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4
Validity
Not Before: May 12 19:02:49 2026 GMT
Not After : May 19 19:02:49 2026 GMT
Subject: CN=6a037959-36e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:22:30:b7:4e:fc:89:5a:99:0c:55:b6:27:
6c:3a:e4:c4:fa:39:0f:b3:cc:3b:b4:be:e1:81:d4:
f1:58:a1:57:04:c9:e5:17:4e:84:70:e6:8e:33:ca:
a1:a0:f1:64:79:c8:8d:73:70:d3:22:ba:fd:75:37:
ad:fd:d1:49:2a:52:25:72:c3:d5:08:42:8c:ec:ba:
81:ea:2f:46:40:9f:fd:56:4b:76:14:5b:6b:6d:64:
e4:51:a7:61:42:1c:f8:42:2f:32:1a:38:b6:3f:23:
36:ee:c2:13:34:cd:f8:8a:bd:81:1f:0a:d0:c3:cb:
d8:8b:6c:37:aa:b6:3f:2f:e1:f0:ae:4e:75:f2:b3:
bf:4b:7a:e6:2c:fc:46:23:12:2e:05:23:45:df:a7:
6d:a0:10:41:f6:b8:2e:ca:df:8f:50:df:fd:61:0e:
11:42:8f:d5:14:73:e3:fe:89:93:17:cc:71:bc:65:
da:7d:e7:a1:af:50:3f:e7:ca:3a:65:41:5d:78:0a:
a1:9e:06:92:e4:f8:99:04:dc:f9:e6:12:03:c6:95:
18:a0:dd:bd:22:43:53:30:74:77:99:a3:6c:0c:97:
f7:c1:17:90:54:64:f7:0d:a6:db:16:a2:72:d0:a0:
89:0f:ed:c0:4d:9c:f6:be:9d:dc:3a:48:ae:2e:54:
ad:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:74:33:1C:69:93:A1:98:AB:44:7A:1E:53:60:25:49:3F:83:B0:72
X509v3 Authority Key Identifier:
keyid:DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e9:3f:2e:a0:1e:3e:e4:b7:69:5a:4b:e1:a2:23:3d:2d:50:
4e:8e:8d:9e:77:52:89:a5:63:71:b9:44:25:76:ea:5f:05:f2:
9f:31:0f:12:a4:8f:58:94:ce:1b:8a:58:55:cc:46:bb:77:c2:
bc:ac:bf:c9:6c:ee:87:c7:5b:9e:92:43:a2:8e:df:4b:d6:d9:
72:a6:57:cd:49:fe:16:3f:a3:ed:88:e8:1a:52:51:01:54:fe:
0d:f5:5a:e9:e0:92:e8:c3:25:2b:31:7c:ec:72:c9:e9:3e:0c:
5f:6b:a8:58:19:6a:3a:a1:3d:6c:14:52:a8:34:6c:cd:27:38:
21:f6:29:79:ce:2c:94:fd:5e:d3:7c:32:2b:16:37:d8:29:23:
7b:5e:90:2b:ad:f2:38:e8:ab:8d:d4:ec:89:10:e8:27:87:e9:
b0:7a:0f:5c:67:42:1b:22:c7:1a:4f:86:72:0e:d2:d0:f8:c6:
2b:cd:5f:2c:99:70:ee:06:39:79:97:41:2e:b4:ad:d4:31:8e:
09:fe:08:69:f1:50:4d:67:bd:fa:b6:63:d1:01:84:80:98:0c:
7c:77:d9:41:f5:f7:be:cc:70:69:fe:df:c9:ee:52:48:a7:b9:
47:6f:f0:64:f9:e8:d9:c0:69:50:6e:91:29:9d:ed:93:d8:07:
8f:b0:c2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:20:16 2026 by rpki-client