
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
File: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft (raw, json)
Hash identifier: wuUm7G66iXUbfebv4kLU5jUYoKADUp8fX0vv3yXzBJQ=
Subject key identifier: AF:61:A8:99:98:0F:01:9F:A5:C5:0F:9C:71:2F:4F:B4:7C:03:E8:C7
Authority key identifier: DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20
Certificate issuer: /CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720
Certificate serial: 08F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
Manifest number: 27CB
Signing time: Thu 16 Apr 2026 16:14:24 +0000
Manifest this update: Thu 16 Apr 2026 16:14:24 +0000
Manifest next update: Thu 23 Apr 2026 16:14:24 +0000
Files and hashes: 1: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl (hash: gC41YG5QMVMdwSfGD8OFI0MX1t0433wyHtRsoLSh5Po=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl
rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2289 (0x8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113C02, serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720
Validity
Not Before: Apr 16 16:14:24 2026 GMT
Not After : Apr 23 16:14:24 2026 GMT
Subject: CN=69e10ae0-32f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:1a:92:d9:b7:cf:a1:db:10:c0:6c:9a:1e:
7d:2b:3a:5a:ef:5b:85:d8:af:e7:34:fe:ec:cf:77:
a6:40:46:c6:2d:1b:34:16:27:a9:a6:27:f6:db:9a:
7c:b4:d8:ad:49:c6:8a:ab:09:84:51:15:1f:17:45:
08:6d:12:c7:3a:61:86:26:96:44:bc:52:5f:32:4f:
fd:f8:94:7e:06:f7:19:54:38:5c:0b:7a:a2:fe:d8:
3f:80:5d:88:d3:b0:7c:7a:d9:79:f0:70:a0:70:5a:
c0:f3:46:e7:07:d5:50:9b:ed:b7:de:1a:f4:0f:5a:
ec:a3:30:28:da:25:d5:f2:2b:15:b7:cd:a2:c9:96:
33:42:7a:fa:9c:d6:54:df:49:84:3b:20:b3:c2:e4:
da:68:52:60:65:28:d4:d3:d2:a7:30:97:52:79:e3:
b7:4a:11:03:42:dc:cc:aa:02:ff:b2:5f:30:c4:0d:
79:1d:0f:35:6a:8b:c5:69:46:9f:8d:b1:ae:c0:5e:
72:81:82:b1:ce:16:90:ac:9e:fe:51:45:23:dc:8a:
28:55:f3:60:7f:18:ef:73:4c:18:23:6f:2e:96:a4:
35:01:e0:9a:1e:ba:f3:16:eb:e8:40:15:7c:e9:dc:
08:a3:bb:39:25:c8:85:62:b5:9a:ea:2e:e1:8e:76:
cf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:61:A8:99:98:0F:01:9F:A5:C5:0F:9C:71:2F:4F:B4:7C:03:E8:C7
X509v3 Authority Key Identifier:
keyid:DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:64:24:32:72:63:5e:83:43:44:81:14:a0:46:4e:1e:f8:b5:
44:e1:91:29:ea:1c:a2:32:37:56:fa:35:48:e8:b8:bd:70:20:
d1:8f:92:11:d8:df:dd:7b:1c:55:db:c5:c2:a4:bd:66:03:c0:
9b:42:99:c9:f8:ac:29:ca:9f:4e:6e:76:ef:05:a6:c0:da:02:
c1:66:42:70:8a:f5:f5:ef:11:fe:79:0e:c9:2a:6e:09:ac:99:
eb:29:ed:83:ad:5f:fe:58:90:f2:19:3c:21:26:d1:7e:c1:d7:
b9:9d:eb:a0:f6:d3:3f:52:19:bb:8e:bf:6d:68:eb:c4:b4:0e:
07:36:4f:6a:0e:8c:d7:1c:e1:ce:b9:02:fe:82:c1:96:4b:e4:
7d:cc:60:3f:26:98:87:40:52:e6:75:c3:8e:da:c7:43:51:fd:
2e:0a:88:e2:1d:5e:9f:48:62:05:fd:44:e2:c3:11:0e:0e:81:
b6:f7:9f:1e:f1:ae:2e:1d:5c:43:91:0a:37:12:a5:53:e5:0c:
6c:d9:06:38:80:d2:97:f0:03:d3:d9:21:6b:e9:45:44:df:61:
7a:3d:76:87:dd:e3:d0:7d:1b:0a:f5:4b:e3:74:fb:0c:13:cf:
e1:cd:64:bf:14:13:6a:a2:24:59:dd:bd:7d:75:2e:bc:3a:d4:
58:e3:b4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:25:49 2026 by rpki-client