
$ rpki-client -vvf rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft
File: 3UhfmiMRbUEQwHvThx70phTsTSw.mft (raw, json)
Hash identifier: 0zVkOxVNkw6HT0J05J3RthAfpC5pwrncLBdUcf7KZQU=
Subject key identifier: 39:98:9A:7B:82:44:E5:74:6E:B1:0F:1E:58:25:C5:99:F4:AC:3D:3B
Authority key identifier: DD:48:5F:9A:23:11:6D:41:10:C0:7B:D3:87:1E:F4:A6:14:EC:4D:2C
Certificate issuer: /CN=A91331AA/serialNumber=DD485F9A23116D4110C07BD3871EF4A614EC4D2C
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft
Manifest number: 4C
Signing time: Wed 15 Apr 2026 07:50:35 +0000
Manifest this update: Wed 15 Apr 2026 07:50:35 +0000
Manifest next update: Wed 22 Apr 2026 07:50:35 +0000
Files and hashes: 1: 3UhfmiMRbUEQwHvThx70phTsTSw.crl (hash: +SpiRngmkwcAL2vhCK3XI4qF4RrZ4RxwV07ZTGPz3N4=)
2: DAC133B0C8EC11F08ED15548C4F9AE02.roa (hash: 1ew7qVLpB8TWdqlXh+YAjZXQOnaoMm4IqX92zh5/ghU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.crl
rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 07:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91331AA, serialNumber=DD485F9A23116D4110C07BD3871EF4A614EC4D2C
Validity
Not Before: Apr 15 07:50:35 2026 GMT
Not After : Apr 22 07:50:35 2026 GMT
Subject: CN=69df434b-4781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:1d:5e:be:cc:d2:df:d6:50:23:8b:6f:62:
87:e3:c5:94:42:0e:0b:61:a2:98:3c:0d:46:f7:f7:
1a:1e:75:ff:b4:d7:20:d0:c3:86:2b:3f:16:ba:20:
e1:12:1e:8f:93:78:d8:a3:5f:18:13:75:18:54:a4:
3a:93:8e:82:43:8b:6f:ae:44:7d:e6:6a:cb:8f:31:
fb:92:ec:b8:94:f1:8f:84:1d:9a:b8:e3:a3:5a:b4:
b0:7a:fe:72:b9:39:35:1b:38:0e:d9:87:d0:dc:29:
84:67:2e:a9:59:98:44:e3:68:24:dd:06:a5:3e:5e:
aa:0c:47:d9:0e:e2:35:c7:74:c2:16:05:2d:6d:6e:
b6:ed:9d:29:5f:80:5f:56:ac:74:7d:0e:0b:40:30:
5f:3e:83:c1:aa:6f:93:1d:f8:18:c3:97:21:7d:a3:
c9:7d:89:37:80:8e:46:9e:0b:87:8f:e1:72:1e:9c:
b3:09:94:f8:8c:91:29:6b:a7:f9:90:b5:a5:50:13:
1d:cb:58:a7:db:5b:9d:6e:e7:47:50:4b:4e:0d:26:
61:3d:b2:0c:4f:68:7b:eb:75:74:90:8f:6b:b1:fd:
11:7e:0b:f2:02:7a:53:ad:76:e0:55:f4:fe:06:7f:
30:11:8a:a9:ce:c0:7c:2e:e6:c7:50:ee:36:c3:96:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:98:9A:7B:82:44:E5:74:6E:B1:0F:1E:58:25:C5:99:F4:AC:3D:3B
X509v3 Authority Key Identifier:
keyid:DD:48:5F:9A:23:11:6D:41:10:C0:7B:D3:87:1E:F4:A6:14:EC:4D:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:ec:b9:27:a3:7b:92:91:8d:f2:b6:17:20:14:09:44:0f:ef:
5b:b9:79:64:dd:72:37:b4:38:36:88:7c:a3:1f:c4:c7:84:78:
22:d6:0e:bf:c5:da:49:05:a8:19:61:18:33:f7:b1:9d:90:91:
43:35:5f:40:24:c7:a7:3f:cf:d6:81:b9:5f:42:54:38:3e:19:
9c:6c:89:9b:41:66:ac:d9:cc:1d:14:f7:62:b1:68:a5:ba:ac:
ca:2e:71:04:95:d0:c1:ec:95:df:6e:a0:71:4e:fd:9c:73:26:
d5:be:c7:43:50:26:ef:e8:eb:ce:fb:0f:93:92:26:80:2b:7f:
fe:64:c2:40:76:0f:87:62:c4:b2:10:3a:02:47:53:2f:ca:e4:
07:0c:26:8f:83:80:ab:b2:81:d6:c6:96:cb:1a:ec:bf:ac:53:
ef:0f:7b:9b:4b:6b:b6:58:ca:1f:86:f8:0b:a0:96:03:53:c9:
7b:40:40:4d:5e:6c:7a:91:4b:49:68:60:3b:e3:a0:5f:a0:94:
42:78:d7:3b:64:ce:d2:41:4f:4f:01:9b:1b:28:49:c4:b5:57:
3a:e2:eb:7c:b4:15:1c:1a:52:f5:5f:64:17:19:70:23:f9:96:
76:e7:26:52:51:67:aa:6b:23:d2:42:ea:74:0c:9e:33:04:91:
93:c6:41:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:17:35 2026 by rpki-client