
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
File: 3nj0PVfAvnIiR0Mta6r3onwaW5o.mft (raw, json)
Hash identifier: L9HDHiyZraWLzo1uLolsRkYNEniUok1byZbP1gZMFTY=
Subject key identifier: AB:64:46:66:67:0A:08:FA:FE:8F:3C:6F:AA:D7:3A:2D:6F:35:77:77
Authority key identifier: DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A
Certificate issuer: /CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A
Certificate serial: 0576
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
Manifest number: 056B
Signing time: Thu 16 Apr 2026 23:15:02 +0000
Manifest this update: Thu 16 Apr 2026 23:15:02 +0000
Manifest next update: Thu 23 Apr 2026 23:15:02 +0000
Files and hashes: 1: 3nj0PVfAvnIiR0Mta6r3onwaW5o.crl (hash: IC7OHh7wNnBV4dlKDO7wqPPjhMr0XNz9QpDQczLZSls=)
2: 680F0EA2284411EC8826F928C4F9AE02.roa (hash: oiLr2Ru1DYuL64/uOeAPIHRwlt1uV7B6bu1q+HXMs94=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl
rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1398 (0x576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3BE, serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A
Validity
Not Before: Apr 16 23:15:02 2026 GMT
Not After : Apr 23 23:15:02 2026 GMT
Subject: CN=69e16d76-7b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:15:a6:6a:45:cb:92:2c:ee:8c:e1:b5:99:
65:19:8f:42:e4:aa:7f:11:13:a4:99:06:57:23:47:
6c:f1:e5:33:8d:c2:29:b2:04:e8:0c:2f:52:ac:89:
37:a2:af:cd:e3:a8:37:32:81:a9:c3:d1:50:c6:67:
66:67:93:c2:30:16:f8:69:9c:d4:e7:02:f0:32:62:
21:56:cf:9e:be:72:43:1f:04:5b:a6:1b:f5:6f:73:
c0:94:84:3f:28:cf:94:c5:4d:05:17:22:d1:91:6c:
68:6f:b6:54:ff:a9:68:1d:3b:fd:5e:83:5a:d2:91:
1a:2e:e1:15:51:c8:61:7a:30:33:bf:c5:12:dc:41:
d6:44:cb:0c:ab:95:00:b0:d5:52:7b:54:f2:2f:34:
7f:b5:42:7f:a4:54:91:85:36:ff:6b:b1:e1:27:02:
8e:fc:f8:48:52:47:49:7d:3d:70:e9:3a:53:9a:9a:
17:5b:0c:ae:bc:8d:3d:8e:38:61:96:4a:88:0c:20:
fa:0b:f6:a6:4a:6b:c9:a7:c2:c8:f5:e1:f7:86:d0:
d5:97:fc:a7:b0:52:b1:a7:46:35:8b:6d:06:3a:51:
a2:ac:ad:1f:10:b1:66:8f:f9:d0:44:8c:6d:e7:4b:
7d:0a:f2:95:dc:9b:91:c2:55:c3:ad:bf:82:66:46:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:64:46:66:67:0A:08:FA:FE:8F:3C:6F:AA:D7:3A:2D:6F:35:77:77
X509v3 Authority Key Identifier:
keyid:DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:5d:94:a8:de:25:be:de:f2:d3:75:0e:1f:e1:c4:a0:a4:32:
2b:c1:64:c1:31:e7:6c:f4:be:1f:66:38:93:04:18:57:32:d1:
40:5e:c2:1c:58:27:9d:d6:28:8e:93:2f:92:7a:cf:5f:21:49:
fb:2b:84:8a:20:97:bf:42:01:a6:e9:c1:88:41:00:9b:06:a7:
32:80:39:7b:dd:01:42:1c:ca:e5:b1:04:26:a0:2a:5c:5f:97:
e0:97:c9:f9:5a:4e:de:0d:45:ef:ca:f9:bd:6f:c6:dc:cc:0b:
77:06:e3:c8:ea:54:98:6d:30:07:84:c2:f7:8d:ab:3e:c3:e2:
49:2a:8e:96:02:72:1f:31:08:aa:b6:dc:d6:1a:ea:ec:65:60:
63:e6:94:fd:b5:a3:3c:f8:ab:ea:08:e6:56:1b:cc:49:99:da:
e6:2f:05:d7:bc:17:ee:f1:2e:f0:81:8c:f9:e4:f4:44:96:cb:
cb:21:3b:61:4e:3e:24:dc:19:40:a4:8d:f3:f1:99:56:55:8f:
f9:a9:2f:db:95:e6:3b:62:a8:1a:aa:67:d7:6a:59:17:15:4a:
8b:69:88:93:28:95:63:85:4e:2c:8b:95:2f:4f:6a:0d:38:0b:
4e:32:f9:d3:88:3f:f2:a8:70:79:f2:d4:81:88:d8:a3:21:a2:
aa:d7:20:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:50:11 2026 by rpki-client