
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
File: 3MvMmJOAkJntArcXgYQ2VBazHhw.mft (raw, json)
Hash identifier: TvmrcPr+mGefW0KPwtfzSrTfE3UpmHMoJ8QdCgziTuc=
Subject key identifier: 7B:70:E1:CF:21:F6:8D:FB:73:02:AC:8B:20:E8:BD:C6:B9:C2:2C:9A
Authority key identifier: DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C
Certificate issuer: /CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C
Certificate serial: 0417
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
Manifest number: 0412
Signing time: Sun 01 Mar 2026 01:14:20 +0000
Manifest this update: Sun 01 Mar 2026 01:14:20 +0000
Manifest next update: Sun 08 Mar 2026 01:14:20 +0000
Files and hashes: 1: 3MvMmJOAkJntArcXgYQ2VBazHhw.crl (hash: 2xEqY3FNXqkeFjR/1FbU2GDC3upV0SwqHwGzWl58VWE=)
2: 23F9CE72A41911ECBDBED829C4F9AE02.roa (hash: vZ/WaADoEuy2hBBHTZfwXR0fuTeB5hZjwEti8AL2NUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl
rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1047 (0x417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE91, serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C
Validity
Not Before: Mar 1 01:14:20 2026 GMT
Not After : Mar 8 01:14:20 2026 GMT
Subject: CN=69a392ec-7135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:e7:04:43:c6:5b:5b:8c:32:8e:2e:41:82:
80:0b:5f:a4:ae:7f:1f:ab:45:6c:ce:fb:d7:35:56:
1c:48:d3:87:9b:13:be:e4:d6:e9:08:71:23:e6:59:
e7:ac:e5:32:eb:af:05:d6:89:20:a7:e6:8e:8b:35:
a7:1e:45:d8:98:77:9e:b7:d0:38:de:b9:9c:fd:f9:
29:55:b5:67:ca:9b:f4:d7:31:c3:df:10:89:a0:e0:
09:9e:6e:2d:33:c1:20:08:5b:d1:a8:82:90:9c:f1:
6a:ff:18:52:d9:bc:7a:7f:d2:e0:ce:d0:8a:b7:3a:
d6:f3:8d:25:d9:1d:4d:e8:d7:d1:52:e7:dd:26:e8:
93:c9:ff:0b:b1:c2:92:04:ec:81:25:da:0f:1e:00:
76:c3:66:b6:a3:73:17:38:6a:af:c8:b6:c5:be:a6:
9b:47:e2:e7:24:90:6b:53:83:42:c0:84:03:37:1f:
99:c9:0b:6e:88:d2:c6:a3:f3:5a:d4:ad:f0:b0:54:
fc:a8:64:90:27:43:75:ce:8d:9f:5c:ee:ce:60:07:
20:f2:9f:b4:f9:67:2c:c1:30:2a:1b:77:a7:0c:c2:
08:82:39:a7:cd:c9:bc:ad:2b:c6:f7:00:74:1e:9c:
fc:0d:e3:f8:cd:a5:97:4c:f6:d0:a1:cc:86:63:a0:
7a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:70:E1:CF:21:F6:8D:FB:73:02:AC:8B:20:E8:BD:C6:B9:C2:2C:9A
X509v3 Authority Key Identifier:
keyid:DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:82:f1:14:8f:49:32:1c:5c:7a:6f:7d:91:33:f1:f0:90:1d:
e4:85:59:3c:db:7d:f1:b2:96:8b:01:fc:78:9e:58:b5:9b:ef:
9e:e6:a7:7f:6b:45:2c:2f:82:d2:1c:1b:ac:93:a1:06:e4:3b:
bc:4e:0f:fa:37:cc:86:f0:d0:8f:c7:40:9b:c5:e8:54:c4:ca:
48:9f:71:f3:86:60:43:c9:35:ef:1e:1f:f2:4c:16:fa:9b:b8:
ce:f7:3e:0e:25:39:71:3b:6c:05:ba:0c:3c:ec:5e:04:f1:3a:
0b:22:ec:5a:86:6f:0e:1c:24:ec:b1:7a:53:b8:a7:ff:8b:69:
8a:e3:7f:59:f7:26:bf:ad:3d:d8:ec:44:1e:ff:90:f0:ba:bb:
98:6f:a7:b7:92:33:69:85:67:5a:88:d9:eb:d0:ff:fa:9e:2a:
21:48:89:e2:6d:ff:b5:42:66:9c:19:90:f5:0b:8c:bf:2f:22:
4a:89:e2:e8:75:2d:9e:ec:c0:01:fc:45:56:c2:48:83:c4:78:
64:f5:24:88:30:6c:20:f6:cf:31:60:08:44:37:a6:d6:87:9e:
a8:80:8c:e4:d2:72:80:39:2e:2a:ca:a8:d8:c5:ff:fe:a6:26:
9b:2d:ea:71:e1:01:89:7a:6d:7e:d7:c9:4c:2c:ac:ff:34:5a:
05:ae:10:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:41:06 2026 by rpki-client