
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft
File: N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft (raw, json)
Hash identifier: XpD9v1YpvZ3BlNsi+xOHhxjwBktJsU5YYzfV7e33QbQ=
Subject key identifier: 4F:4B:B3:4F:8D:73:C2:D0:0E:4C:1D:C1:31:C8:68:B9:A4:AB:95:9B
Authority key identifier: 37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1
Certificate issuer: /CN=A91EA409/serialNumber=377835CDA2BD6367EF0FEB5EA58198F8183A87C1
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft
Manifest number: 0105
Signing time: Wed 25 Mar 2026 05:17:56 +0000
Manifest this update: Wed 25 Mar 2026 05:17:55 +0000
Manifest next update: Wed 01 Apr 2026 05:17:55 +0000
Files and hashes: 1: N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl (hash: nsErXeHPiUrWcJ6ORnkNbyNl1JnyLYC8XDDUYb2Z+E4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl
rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:17:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA409, serialNumber=377835CDA2BD6367EF0FEB5EA58198F8183A87C1
Validity
Not Before: Mar 25 05:17:55 2026 GMT
Not After : Apr 1 05:17:55 2026 GMT
Subject: CN=69c37004-571b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:97:8c:bc:fe:7c:75:e9:13:ff:7e:20:f0:
cd:83:9e:f0:f4:5b:bd:41:ab:8f:88:56:8f:16:d5:
9c:2b:d5:6d:19:d0:ff:c5:40:9c:7c:b0:9d:12:46:
53:e3:9f:a2:2e:f7:51:56:a8:d4:eb:4a:35:fb:9a:
1d:7a:9b:d2:ab:71:45:af:28:73:fe:b9:ca:1e:77:
92:b7:da:79:81:c4:6e:f0:bf:70:a7:e2:55:e8:22:
af:9d:12:5c:ca:46:4a:e4:48:0e:df:54:69:8a:71:
e9:c5:1e:50:e3:ca:c4:04:85:e2:9a:35:1f:8b:d9:
19:38:e2:89:0c:6f:2c:69:b8:f9:af:8e:fe:28:c2:
26:85:e6:b0:45:9d:28:d3:fb:e4:31:d5:f2:64:4e:
9c:f9:f5:78:29:23:86:7f:c7:fb:04:6f:7d:7c:54:
11:88:d1:cb:7e:d5:4a:a5:16:68:a0:6f:12:98:5f:
3b:a1:d4:5e:f2:1b:70:e9:83:37:cf:42:ce:de:31:
7a:74:16:db:9d:d5:bc:17:db:c0:6e:63:2b:80:ce:
d1:87:ce:f9:65:c0:08:fc:f0:c1:6a:2f:54:04:8e:
ea:e0:b7:18:73:19:d7:a5:ef:a6:36:dd:f8:4e:6e:
c7:c0:cd:2f:6e:2e:48:b5:e3:b4:42:e9:70:7d:5c:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4B:B3:4F:8D:73:C2:D0:0E:4C:1D:C1:31:C8:68:B9:A4:AB:95:9B
X509v3 Authority Key Identifier:
keyid:37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:af:b7:74:fa:87:a0:db:e0:f8:f7:89:88:c3:60:e6:0c:88:
84:ee:e3:aa:47:58:48:1d:57:65:2a:38:b9:e4:e4:e4:dc:28:
d2:1d:14:2d:06:ae:46:f3:74:38:e0:c9:68:ae:fb:34:d8:f9:
8f:36:b5:ce:fe:fd:00:af:51:c6:bd:37:7a:30:fd:c6:06:f2:
66:37:89:d8:f9:27:96:c2:d4:b1:8e:8b:31:44:dc:e1:f3:d1:
0a:fa:da:a2:72:32:1c:7a:69:35:3a:ca:72:79:3c:00:69:37:
16:6a:c3:85:2c:6c:ca:61:c7:76:9b:ea:e6:6b:ef:74:c2:b8:
e1:b2:6d:cb:fc:61:3a:37:42:17:b0:a5:60:75:63:28:94:88:
99:eb:24:05:25:9b:db:9b:16:d7:5a:56:a8:90:2c:d0:66:be:
3b:05:3d:d6:69:f3:c3:23:de:1b:8f:ae:aa:87:57:e4:1c:44:
b7:25:53:c4:2d:eb:65:40:c2:d1:ae:32:8d:bc:2a:a2:e3:16:
75:b3:0a:69:ba:f2:69:48:0c:e7:33:b4:12:11:3c:d9:d0:4b:
cc:6b:5c:51:b9:93:b4:53:e8:22:9a:48:7c:89:78:c9:8e:8c:
6c:a7:28:b4:c9:79:dc:a3:ba:17:42:97:da:fc:9f:4d:9d:17:
b6:13:f8:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE0MDkxMTAvBgNVBAUTKDM3NzgzNUNEQTJCRDYzNjdFRjBGRUI1RUE1ODE5OEY4
MTgzQTg3QzEwHhcNMjYwMzI1MDUxNzU1WhcNMjYwNDAxMDUxNzU1WjAYMRYwFAYD
VQQDEw02OWMzNzAwNC01NzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAry2XjLz+fHXpE/9+IPDNg57w9Fu9QauPiFaPFtWcK9VtGdD/xUCcfLCdEkZT
45+iLvdRVqjU60o1+5odepvSq3FFryhz/rnKHneSt9p5gcRu8L9wp+JV6CKvnRJc
ykZK5EgO31RpinHpxR5Q48rEBIXimjUfi9kZOOKJDG8sabj5r47+KMImheawRZ0o
0/vkMdXyZE6c+fV4KSOGf8f7BG99fFQRiNHLftVKpRZooG8SmF87odRe8htw6YM3
z0LO3jF6dBbbndW8F9vAbmMrgM7Rh875ZcAI/PDBai9UBI7q4LcYcxnXpe+mNt34
Tm7HwM0vbi5IteO0QulwfVyeawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE9Ls0+N
c8LQDkwdwTHIaLmkq5WbMB8GA1UdIwQYMBaAFDd4Nc2ivWNn7w/rXqWBmPgYOofB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTQwOS8wMjg5RjZGQzlD
QUMxMUVGQUI1OTU1MTZDNEY5QUUwMi9OM2cxemFLOVkyZnZELXRlcFlHWS1CZzZo
OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL04zZzF6YUs5WTJmdkQtdGVwWUdZLUJnNmg4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTQwOS8wMjg5RjZGQzlDQUMxMUVGQUI1OTU1MTZDNEY5QUUwMi9OM2cxemFLOVky
ZnZELXRlcFlHWS1CZzZoOEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADK+3dPqHoNvg+PeJiMNg5gyIhO7jqkdYSB1XZSo4ueTk5Nwo0h0ULQauRvN0
OODJaK77NNj5jza1zv79AK9Rxr03ejD9xgbyZjeJ2PknlsLUsY6LMUTc4fPRCvra
onIyHHppNTrKcnk8AGk3FmrDhSxsymHHdpvq5mvvdMK44bJty/xhOjdCF7ClYHVj
KJSImeskBSWb25sW11pWqJAs0Ga+OwU91mnzwyPeG4+uqodX5BxEtyVTxC3rZUDC
0a4yjbwqouMWdbMKabryaUgM5zO0EhE82dBLzGtcUbmTtFPoIppIfIl4yY6MbKco
tMl53KO6F0KX2vyfTZ0XthP4lA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:40:52 2026 by rpki-client