
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
File: b3tF49x2JsN_igHgq46krwVfSYo.mft (raw, json)
Hash identifier: Xfu34hWTCDrV+XJYMeAMbik2jODS/eVTk5MUxtyWKFk=
Subject key identifier: A4:6A:6A:68:2B:67:E0:28:76:26:47:80:78:80:7D:DA:6C:63:E2:15
Authority key identifier: 6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A
Certificate issuer: /CN=A91F0AF0/serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
Certificate serial: 11BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
Manifest number: 1EBC
Signing time: Thu 26 Mar 2026 17:08:36 +0000
Manifest this update: Thu 26 Mar 2026 17:08:35 +0000
Manifest next update: Thu 02 Apr 2026 17:08:35 +0000
Files and hashes: 1: b3tF49x2JsN_igHgq46krwVfSYo.crl (hash: Lx5PiB63bGrm8vZC1Kr0YdDhX9hr2afN7dM2+ikkF4g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl
rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 17:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4540 (0x11bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0AF0, serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
Validity
Not Before: Mar 26 17:08:35 2026 GMT
Not After : Apr 2 17:08:35 2026 GMT
Subject: CN=69c56814-e8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:16:fc:74:86:e5:a6:e8:76:af:81:1b:38:
49:38:57:5f:9a:5d:ee:b8:00:8c:a4:d8:cf:fc:81:
9f:79:7c:a8:4c:28:3d:db:52:75:d0:38:ea:7a:35:
cb:99:7e:55:ae:a6:c5:90:e8:c9:8d:93:74:26:06:
db:d6:6b:fa:d9:6e:f0:00:bf:4d:c0:e9:34:49:6e:
8c:d3:b3:2b:f4:9a:a7:76:ed:fd:b4:cf:d2:7e:08:
c1:c5:d6:ee:07:1b:c9:5a:ba:78:42:3b:41:6c:2c:
9b:9b:0e:14:1c:d8:f4:16:a7:9f:f8:a4:84:d1:6c:
04:30:30:9e:bf:05:c6:cc:c0:84:8d:d8:c2:d2:6e:
43:fe:ee:0d:2c:9b:f9:ad:a7:99:45:e1:9c:01:46:
b5:28:03:65:46:8e:e3:8a:4e:de:46:f5:69:7f:e5:
6c:b8:e8:7b:0f:48:81:1f:e1:66:7b:76:39:48:8d:
6c:a6:dd:b8:26:bf:94:b3:d0:88:17:db:aa:2d:e7:
82:dc:f0:d0:14:a5:cf:96:81:59:8a:51:3d:eb:22:
84:90:43:bb:81:d3:85:de:58:8d:c9:cf:33:fc:15:
cb:f9:c2:93:a0:fc:98:59:b3:69:30:fc:b6:12:c6:
b6:9f:a1:09:9d:4c:d7:65:f0:2a:fa:3c:b6:12:2b:
4c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6A:6A:68:2B:67:E0:28:76:26:47:80:78:80:7D:DA:6C:63:E2:15
X509v3 Authority Key Identifier:
keyid:6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:13:c9:b9:4e:91:67:a0:9e:c0:3f:35:34:c4:17:80:98:fd:
30:cb:6b:f2:0a:d3:07:02:11:89:1f:b4:ef:58:d5:39:77:cc:
71:1f:57:2a:81:e0:26:3e:07:7e:ec:ca:c2:dc:e2:18:12:61:
86:69:1e:22:ff:f3:a8:31:17:12:93:38:5a:f5:ce:0c:6a:db:
b0:da:54:ce:ba:e8:a6:18:fe:c5:ab:cb:69:e9:cc:70:76:93:
8d:f4:64:51:90:c3:8e:85:22:0f:19:8d:e9:f7:2b:89:d4:50:
7e:b8:12:fe:d0:e9:88:11:1a:24:8b:1e:a0:0f:04:05:2b:64:
21:fc:24:86:e2:06:59:b4:49:f5:c1:19:43:11:dd:5b:de:31:
81:23:4e:ef:c3:97:d1:cb:0e:b2:32:ee:60:e0:85:c4:14:85:
25:d0:ab:fa:dc:29:82:da:4e:ae:f9:4e:ff:a1:0b:93:c0:62:
06:31:d4:3c:c7:34:5a:fa:58:da:12:1b:bf:fe:de:fc:9e:cb:
85:3f:c0:e2:9e:c1:50:eb:6c:75:7e:4a:da:d5:04:2b:c7:d3:
d8:7a:e4:2f:a2:7f:06:0d:d7:6d:fd:e0:ff:cb:35:a2:76:39:
0d:c0:84:19:f6:d3:f7:9b:ee:07:55:52:3f:2f:23:99:15:7f:
a7:28:bb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:13 2026 by rpki-client