
$ rpki-client -vvf rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
File: pi3nVqmxabvP97VW1DMAlV1A4yA.mft (raw, json)
Hash identifier: XWenOHWdqLVP7Hu1dewwQFo7luTt1Kfoj3TjPGj4XEs=
Subject key identifier: 11:1D:0C:BA:F0:1D:A4:31:E8:AE:B3:B6:3C:F9:A9:61:60:2A:19:04
Authority key identifier: A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20
Certificate issuer: /CN=A91104BD/serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320
Certificate serial: 0C08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
Manifest number: 0BFF
Signing time: Fri 12 Jun 2026 18:52:25 +0000
Manifest this update: Fri 12 Jun 2026 18:52:24 +0000
Manifest next update: Fri 19 Jun 2026 18:52:24 +0000
Files and hashes: 1: pi3nVqmxabvP97VW1DMAlV1A4yA.crl (hash: lQyy9pw1mty/Z9Gcz6Baj4WJ9E4lhVKb5HOTP34mXAA=)
2: D326CC30384411EA9D540B58C4F9AE02.roa (hash: miF3Bd+XSLHucz0FC/5HkJ/vce5TslwDpsNS9Q4tZB4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl
rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:52:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3080 (0xc08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91104BD, serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320
Validity
Not Before: Jun 12 18:52:24 2026 GMT
Not After : Jun 19 18:52:24 2026 GMT
Subject: CN=6a2c5569-c3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a9:58:d1:8d:6c:41:b4:f7:12:13:41:3c:dd:
5a:e2:fa:40:70:37:ed:a3:a2:91:c5:d3:7f:db:cd:
ad:e8:66:89:92:9a:1c:fb:3f:ec:76:77:0d:1e:35:
df:f3:91:fd:ce:53:78:04:fb:0a:71:cc:a6:0d:28:
fb:e5:4b:f6:e6:e8:2b:a0:63:cf:82:54:e0:f5:1f:
b7:dc:9b:3f:6d:31:93:45:be:36:7c:95:05:f5:c1:
8d:81:b1:5e:c8:9a:82:4b:74:b0:5f:5f:33:26:2f:
47:46:f6:8b:b4:b7:11:aa:1f:b2:c7:49:8a:a6:1e:
b1:81:df:f4:38:39:11:e5:b5:54:90:fb:1a:c9:eb:
2e:44:c5:ab:ca:7c:ac:55:05:d6:a5:66:ed:74:8c:
34:09:8a:fb:59:10:c6:b4:80:cb:1c:ae:ec:b2:2d:
c9:3b:04:31:46:ec:16:3e:f8:bf:4d:f5:1b:bc:8e:
34:4e:64:84:76:88:e7:6c:7f:22:0e:ef:0e:2d:3b:
3b:8f:f0:e6:7a:ef:92:74:8e:75:7a:bc:a4:bc:ad:
98:4f:ae:66:c6:1a:e1:54:3a:20:09:c7:cc:31:0e:
74:cb:69:ed:68:36:08:bc:a6:42:0f:06:20:d3:83:
b4:e4:3b:c6:c8:af:ba:da:87:aa:29:60:19:61:ea:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1D:0C:BA:F0:1D:A4:31:E8:AE:B3:B6:3C:F9:A9:61:60:2A:19:04
X509v3 Authority Key Identifier:
keyid:A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:22:b6:eb:ec:be:f2:b5:cb:3e:08:5a:83:0b:7d:c4:cf:d6:
7b:70:63:92:84:d8:fc:d9:07:5b:42:78:b8:28:71:0d:4e:1e:
1e:ed:54:29:2d:2c:1c:ed:23:30:4e:4a:f8:fb:a7:6b:72:8d:
47:64:1c:7f:dd:b3:2b:10:35:ee:97:ac:d6:22:a2:c7:7d:bf:
9f:6c:26:a6:60:4a:f5:c1:e3:bc:e3:1b:56:46:f5:cc:f5:f9:
95:de:37:80:ee:39:b3:16:52:1b:24:53:92:e5:67:28:14:79:
c2:6b:c2:35:f2:ff:f9:f0:05:bf:82:8a:34:39:b8:07:3d:13:
c9:0d:d9:61:c0:37:5c:10:43:ba:bb:ae:d2:1e:18:c1:63:82:
15:f4:63:0d:9b:86:1a:8e:3b:11:21:43:d5:8e:34:70:74:9b:
de:a6:17:d8:b6:6a:26:4f:af:ca:dc:83:e6:ba:8b:1a:51:53:
bc:aa:82:e2:19:ea:3f:69:cc:3d:fe:ab:a2:13:c3:89:f9:11:
54:98:26:16:dc:66:ac:34:37:bc:c8:75:09:b4:74:e3:86:7f:
53:69:c4:79:f7:9d:4e:2a:e2:33:76:a9:58:a2:9f:6e:fb:79:
b1:f5:d6:48:e6:fa:2e:6e:dc:5a:53:8b:64:79:fa:6c:7b:54:
00:91:9a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:35:01 2026 by rpki-client