
$ rpki-client -vvf rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
File: fT3bIK_-cUyPNUllHB7oD1VgEbg.mft (raw, json)
Hash identifier: mSMHg9gY5rDhM9ZUz6t3qxhCNmruZotKymjzvvb3t7k=
Subject key identifier: 6E:21:FE:59:0C:7D:57:B7:C9:FB:FB:AE:70:15:10:4B:75:96:A5:72
Authority key identifier: 7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8
Certificate issuer: /CN=A91319EA/serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8
Certificate serial: 033F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
Manifest number: 0339
Signing time: Mon 02 Mar 2026 03:12:42 +0000
Manifest this update: Mon 02 Mar 2026 03:12:41 +0000
Manifest next update: Mon 09 Mar 2026 03:12:41 +0000
Files and hashes: 1: fT3bIK_-cUyPNUllHB7oD1VgEbg.crl (hash: a8F6p0YJp65I3sMY86XUktwrLqns/PLzQ742EBVHBAg=)
2: BFD5E8EAF8EB11EC9C39C677C4F9AE02.roa (hash: ogTzdNf1gHD/xTlxA8D6h7pqJeFDXQYw5yT4vowpzqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl
rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 831 (0x33f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91319EA, serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8
Validity
Not Before: Mar 2 03:12:41 2026 GMT
Not After : Mar 9 03:12:41 2026 GMT
Subject: CN=69a5002a-5257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:41:c3:bf:b2:a6:51:44:30:66:1e:5c:02:
23:86:b6:dc:f9:2c:42:36:ad:01:ad:85:7e:a1:c3:
4b:3a:2f:83:ea:3f:5d:77:8b:c9:10:82:70:b0:28:
5f:be:ef:e0:33:57:f9:bc:d8:8a:e1:b9:82:7d:d7:
06:d5:c7:29:53:92:ca:94:82:dd:c8:21:0f:2c:2c:
01:5f:58:cd:8a:b7:0f:be:32:38:de:99:dd:08:ce:
36:f0:89:04:14:32:1b:20:d8:9b:18:3d:d0:86:7f:
24:c5:21:3b:50:a4:23:11:ba:d9:81:c5:88:08:96:
75:3b:e5:74:ff:91:c2:ff:f2:1f:b2:72:30:e0:bf:
59:0c:aa:af:3a:32:31:8d:7c:5b:17:c7:c0:44:b1:
a0:b5:f7:c5:c2:e6:58:be:8d:53:93:26:a5:4d:18:
dc:c6:c9:14:99:51:e8:1b:e8:36:80:7d:64:52:88:
cb:f5:6b:8a:31:38:d5:25:8a:d8:55:03:74:cf:98:
16:7e:ff:f8:dd:f5:d7:62:b8:50:23:5b:e3:78:ae:
ad:b6:01:57:3c:30:1c:48:4a:ee:48:58:f0:57:9d:
7f:cf:3c:2f:ab:c5:bf:f5:e4:c1:8d:db:64:67:70:
00:ee:19:19:89:92:e4:92:d3:f3:36:a9:62:f5:47:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:21:FE:59:0C:7D:57:B7:C9:FB:FB:AE:70:15:10:4B:75:96:A5:72
X509v3 Authority Key Identifier:
keyid:7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:0d:a4:2f:ed:f7:e9:25:00:ea:bd:ea:56:dc:13:aa:3c:5c:
9f:24:0f:4a:1d:1e:d0:e9:0a:c0:e6:3f:5e:14:4e:85:41:ca:
f8:7f:2f:ce:1e:c4:61:15:50:12:f1:30:f8:74:66:b6:2b:5b:
1a:76:25:8d:30:2d:b3:29:4c:f5:46:1c:ec:7f:00:34:c0:db:
f0:53:fa:5b:9b:62:fd:ce:6d:cb:25:8d:60:6b:b3:ce:9a:89:
0d:33:9e:08:a9:9c:51:2c:77:9b:87:36:08:6d:ed:18:e2:36:
3b:48:91:f7:92:0a:49:64:3a:82:79:1d:f4:21:75:34:29:8e:
7f:5e:ef:5a:21:b1:de:05:44:a0:50:ca:ae:90:0c:8a:57:15:
f9:c3:01:fc:67:c0:6f:52:c1:06:20:de:0c:17:74:d0:88:50:
6f:5c:f7:bc:5a:d8:47:15:bf:b3:8d:06:d4:24:86:40:26:0e:
8e:d3:ca:59:80:2f:40:cf:ac:aa:a9:3c:dd:f1:e1:e0:5e:72:
13:a5:5a:54:b7:7d:71:00:3c:d3:03:2d:c7:70:72:dd:ec:50:
87:70:03:27:83:3d:b9:76:08:ce:f7:3f:48:04:45:55:8c:94:
1c:85:5f:11:0d:df:37:7c:6d:bf:dd:0f:0f:31:99:15:ad:88:
6b:50:25:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:39 2026 by rpki-client