
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
File: b3fBnxHTKqqkLiaRb3SC77j5ehw.mft (raw, json)
Hash identifier: D7LJ2dWp1OQhP21E5Iz2r6gDIX+Ry2Q5CoafAqLJgpA=
Subject key identifier: D9:4B:72:CD:5A:FE:96:B9:52:FE:43:86:43:FB:90:AC:C9:DC:EF:EF
Authority key identifier: 6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C
Certificate issuer: /CN=A913D125/serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
Manifest number: F4
Signing time: Wed 15 Apr 2026 05:55:12 +0000
Manifest this update: Wed 15 Apr 2026 05:55:11 +0000
Manifest next update: Wed 22 Apr 2026 05:55:11 +0000
Files and hashes: 1: b3fBnxHTKqqkLiaRb3SC77j5ehw.crl (hash: g8mo2OUdb7fmE8QahBEtzOhzFIHwubYo18OT7tBNmGU=)
2: 62743016CC1111EFA5744A6FC4F9AE02.roa (hash: hlc/zBoAtbTj6NsgQPISupfKKjQQ309kzeQx+JZUlfI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl
rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 05:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D125, serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
Validity
Not Before: Apr 15 05:55:11 2026 GMT
Not After : Apr 22 05:55:11 2026 GMT
Subject: CN=69df2840-b3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:d4:7f:b0:a4:3c:43:84:7e:6a:5f:a9:55:
3d:29:92:4c:20:ad:a1:15:88:58:0a:e7:25:f6:ad:
96:6b:03:d2:a6:f0:95:0f:5f:de:00:46:48:4f:68:
ea:94:98:a4:47:f6:7e:92:e2:fe:f4:fe:fa:ab:b2:
25:ef:1b:1b:7a:c2:d2:de:e4:d4:f9:5a:f4:63:26:
a2:29:36:8f:88:69:ba:ab:00:25:0a:d5:e1:9c:50:
87:3d:f3:30:24:1f:f2:e0:7a:b3:12:05:3b:6d:e4:
d5:43:fb:d4:c3:ff:06:a4:ba:de:1a:ca:09:b3:70:
e8:11:a3:d3:c3:a3:23:27:a2:dc:c1:37:62:63:8c:
03:b8:56:7f:14:da:0d:b6:d4:e8:36:04:ee:ce:cb:
e1:61:38:e7:2c:a0:df:cf:24:86:90:55:04:31:9f:
2e:77:d8:22:8b:28:a0:a4:92:2e:26:ce:cd:55:fa:
0c:32:da:b2:58:ef:8e:cf:d7:15:9f:7b:1e:72:b9:
c2:85:d4:a4:2c:c7:c7:3a:50:70:49:d4:c0:25:e8:
e0:3b:9a:c2:04:1f:78:fb:c7:da:8f:9f:d3:b7:b1:
6f:c6:f1:d2:bf:d3:a9:0f:58:b5:07:01:ed:4f:e5:
de:c9:d3:f7:8a:b7:aa:b3:46:b2:6d:3c:74:d8:fb:
98:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4B:72:CD:5A:FE:96:B9:52:FE:43:86:43:FB:90:AC:C9:DC:EF:EF
X509v3 Authority Key Identifier:
keyid:6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:f2:88:37:fb:db:40:ee:35:8b:48:c6:d5:5d:3d:e2:fb:bc:
a6:04:d8:7b:ab:7c:ae:45:91:45:a0:79:7e:31:b2:99:58:d8:
6d:83:02:ee:31:2b:0e:dc:45:16:dc:28:8a:56:2e:34:96:b6:
2c:ee:d1:2f:5d:84:ab:9f:7b:1c:48:70:e3:2b:b5:c9:ef:80:
52:f1:dd:09:71:9c:9e:a4:5f:2a:ec:f6:87:fe:61:41:9d:eb:
40:95:f8:4b:d0:cc:be:6b:d6:98:45:7e:d4:02:0f:75:92:57:
6f:84:9f:74:b9:b7:ca:49:f4:34:e0:3d:15:0f:20:1c:bd:d5:
72:06:a7:b0:8a:4e:da:cc:5a:c5:1e:5a:ed:ee:bb:dc:ba:10:
d1:0e:51:35:15:62:b6:7b:53:16:e0:f0:f7:05:ab:b9:64:5f:
ae:6b:c7:b9:55:1c:85:90:f7:44:6a:fd:04:b8:c1:19:b1:b6:
12:12:d2:3e:5e:b7:05:5d:1a:33:06:c4:ee:6e:ee:a3:c7:32:
80:e6:df:1c:a8:b2:ce:ac:df:b7:e5:22:aa:64:92:b1:81:65:
7c:15:2f:ff:5d:59:99:e4:f5:8e:9e:25:8c:7a:1f:9f:32:dd:
ac:84:73:55:34:5b:1d:af:ad:a6:a1:7c:c0:44:6c:4b:da:8c:
f2:ff:26:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QxMjUxMTAvBgNVBAUTKDZGNzdDMTlGMTFEMzJBQUFBNDJFMjY5MTZGNzQ4MkVG
QjhGOTdBMUMwHhcNMjYwNDE1MDU1NTExWhcNMjYwNDIyMDU1NTExWjAYMRYwFAYD
VQQDEw02OWRmMjg0MC1iM2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvbzUf7CkPEOEfmpfqVU9KZJMIK2hFYhYCucl9q2WawPSpvCVD1/eAEZIT2jq
lJikR/Z+kuL+9P76q7Il7xsbesLS3uTU+Vr0YyaiKTaPiGm6qwAlCtXhnFCHPfMw
JB/y4HqzEgU7beTVQ/vUw/8GpLreGsoJs3DoEaPTw6MjJ6LcwTdiY4wDuFZ/FNoN
ttToNgTuzsvhYTjnLKDfzySGkFUEMZ8ud9giiyigpJIuJs7NVfoMMtqyWO+Oz9cV
n3secrnChdSkLMfHOlBwSdTAJejgO5rCBB94+8faj5/Tt7FvxvHSv9OpD1i1BwHt
T+XeydP3ireqs0aybTx02PuYZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNlLcs1a
/pa5Uv5DhkP7kKzJ3O/vMB8GA1UdIwQYMBaAFG93wZ8R0yqqpC4mkW90gu+4+Xoc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDEyNS9GNUY3ODc4QUND
MTAxMUVGODczOTZBNkVDNEY5QUUwMi9iM2ZCbnhIVEtxcWtMaWFSYjNTQzc3ajVl
aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2IzZkJueEhUS3Fxa0xpYVJiM1NDNzdqNWVody5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDEyNS9GNUY3ODc4QUNDMTAxMUVGODczOTZBNkVDNEY5QUUwMi9iM2ZCbnhIVEtx
cWtMaWFSYjNTQzc3ajVlaHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgvKIN/vbQO41i0jG1V094vu8pgTYe6t8rkWRRaB5fjGymVjYbYMC7jErDtxF
FtwoilYuNJa2LO7RL12Eq597HEhw4yu1ye+AUvHdCXGcnqRfKuz2h/5hQZ3rQJX4
S9DMvmvWmEV+1AIPdZJXb4SfdLm3ykn0NOA9FQ8gHL3VcgansIpO2sxaxR5a7e67
3LoQ0Q5RNRVitntTFuDw9wWruWRfrmvHuVUchZD3RGr9BLjBGbG2EhLSPl63BV0a
MwbE7m7uo8cygObfHKiyzqzft+UiqmSSsYFlfBUv/11ZmeT1jp4ljHofnzLdrIRz
VTRbHa+tpqF8wERsS9qM8v8mQQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:12 2026 by rpki-client