
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
File: 3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft (raw, json)
Hash identifier: 1+kQDDK0v0FY1nb7ljvplxYAk7EFYS3ABHp0X8UuUUM=
Subject key identifier: 1E:26:D1:CA:E0:9A:EB:B6:23:77:48:3E:F0:37:25:44:B9:0D:2F:1F
Authority key identifier: DC:99:3F:AE:88:10:E9:31:4F:5A:7D:F0:8D:6F:0C:D5:7E:A5:91:6E
Certificate issuer: /CN=A9120656/serialNumber=DC993FAE8810E9314F5A7DF08D6F0CD57EA5916E
Certificate serial: 60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
Manifest number: 60
Signing time: Fri 17 Apr 2026 07:45:18 +0000
Manifest this update: Fri 17 Apr 2026 07:45:18 +0000
Manifest next update: Fri 24 Apr 2026 07:45:18 +0000
Files and hashes: 1: 3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl (hash: 8+sx+fVC0veW4r5nq9QWVzvK+dTtxOXP03o8pw7jGEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl
rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120656, serialNumber=DC993FAE8810E9314F5A7DF08D6F0CD57EA5916E
Validity
Not Before: Apr 17 07:45:18 2026 GMT
Not After : Apr 24 07:45:18 2026 GMT
Subject: CN=69e1e50e-94ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e2:05:d5:3f:a8:6e:50:4d:da:d5:59:57:6a:
09:80:93:aa:df:bc:e9:27:64:48:49:81:6e:a6:83:
2d:65:93:5e:30:64:71:c4:0c:61:e9:15:a9:6b:34:
7d:74:1c:9e:36:fc:c0:c9:93:45:a3:b4:ba:22:40:
f6:51:91:99:82:e0:5b:ba:07:9b:eb:8d:2b:ff:7e:
d3:59:9b:26:30:26:75:b0:5d:0e:31:d7:61:2c:b9:
96:15:bc:d1:16:7e:4e:8a:91:8e:87:33:e6:01:50:
d7:a4:cf:a7:13:8e:d3:a7:ef:9d:0e:92:11:f6:d6:
1e:47:1a:4d:cc:5b:01:db:cf:6f:2b:60:71:5c:60:
e1:09:78:3a:26:14:71:0a:bd:a7:93:7d:13:4b:b9:
bb:8a:94:bc:b8:79:47:ad:6f:cd:58:16:16:36:88:
0c:a5:30:e6:54:1d:b1:f5:e9:f0:ea:f3:6a:ab:83:
6b:50:2b:f3:a6:da:dd:a5:53:0c:a8:43:05:9b:ab:
82:e7:45:63:c9:08:e4:d5:9f:c9:d9:5c:f4:19:d3:
05:a8:99:a2:9c:ff:9a:d0:7e:1f:46:3f:4b:ee:0f:
6a:ca:22:35:0d:e4:8f:00:be:98:ae:13:85:1a:b5:
31:94:23:66:2e:9d:45:d9:d4:6e:44:4d:2b:70:88:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:26:D1:CA:E0:9A:EB:B6:23:77:48:3E:F0:37:25:44:B9:0D:2F:1F
X509v3 Authority Key Identifier:
keyid:DC:99:3F:AE:88:10:E9:31:4F:5A:7D:F0:8D:6F:0C:D5:7E:A5:91:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:49:d6:b8:c9:f6:18:9b:cb:4b:d1:47:b2:f1:cd:c0:40:12:
7c:34:d1:30:da:a3:d2:34:29:7a:90:e1:bf:ff:4b:d1:ba:d0:
82:1a:bb:e6:c9:a4:37:5a:83:d7:40:86:72:bf:b0:21:b1:07:
d6:5b:1e:a9:11:4b:15:2d:24:ff:6f:ff:b7:76:a9:bd:44:6f:
4f:a3:0a:ba:a6:46:23:d6:a9:28:ca:c4:f0:9f:2d:ff:71:bc:
ba:17:f8:76:af:36:a3:06:50:55:da:84:1f:db:b0:f1:e9:dd:
d8:a1:5b:76:ff:cd:38:90:fb:10:97:a6:b3:c3:53:ee:03:91:
41:51:40:3d:1f:6a:32:ca:bf:bb:7d:9d:3e:a7:31:7e:70:ab:
19:e2:5b:ab:0b:ec:4d:e2:9e:52:3d:95:8b:b5:7d:4a:4f:37:
b6:fe:26:de:2e:12:3d:be:ae:a6:84:bf:5c:65:b0:e6:d6:c8:
fe:ea:35:c4:94:4e:40:93:a8:6d:ed:28:64:e4:f6:f3:cd:bb:
de:9f:b4:42:67:0e:64:dc:9d:30:e8:7a:df:98:b4:d3:74:80:
c6:13:48:91:8f:e1:be:ef:74:f9:4d:a7:39:02:8e:83:aa:e2:
a8:bc:6b:a8:3a:4c:25:26:b9:78:55:6f:5f:64:c4:1a:0f:91:
2e:61:b0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:48:32 2026 by rpki-client