
$ rpki-client -vvf rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
File: X3A2SNc_YGlFARjbom-WaC1a5so.mft (raw, json)
Hash identifier: 9NwD/sqkq5edrQ3taEnpFbcSgLavBqUo5WQ1MFjsz+Q=
Subject key identifier: 18:7E:AF:79:B1:57:A2:1D:80:5A:F3:FB:EF:B5:1C:F2:A4:C3:D0:80
Authority key identifier: 5F:70:36:48:D7:3F:60:69:45:01:18:DB:A2:6F:96:68:2D:5A:E6:CA
Certificate issuer: /CN=A91508BB/serialNumber=5F703648D73F6069450118DBA26F96682D5AE6CA
Certificate serial: 3513
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
Manifest number: 3513
Signing time: Sat 28 Feb 2026 14:39:25 +0000
Manifest this update: Sat 28 Feb 2026 14:39:25 +0000
Manifest next update: Sat 07 Mar 2026 14:39:25 +0000
Files and hashes: 1: X3A2SNc_YGlFARjbom-WaC1a5so.crl (hash: fbMntPuAm5WJo/tcwYBT4HiarGq4BdJlhPg4vp6TrPE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.crl
rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13587 (0x3513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91508BB, serialNumber=5F703648D73F6069450118DBA26F96682D5AE6CA
Validity
Not Before: Feb 28 14:39:25 2026 GMT
Not After : Mar 7 14:39:25 2026 GMT
Subject: CN=69a2fe1d-70d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:55:b5:5e:bf:00:87:4e:b3:03:5f:63:06:
05:84:f4:0a:a3:a4:76:66:01:03:99:cd:f1:44:72:
29:0e:31:32:cf:df:4c:f8:76:84:a6:4e:7f:eb:2d:
d9:94:13:d7:cb:52:bf:59:94:aa:a8:9b:79:ff:92:
65:5c:1d:9a:8b:34:94:ef:66:a8:6d:2f:f2:1f:9d:
43:7d:01:1f:ab:63:fa:9a:fc:ba:2a:22:19:c4:46:
fe:9e:e0:c9:65:a3:d9:63:3d:e8:db:f6:2b:70:b0:
32:43:ae:a1:9a:d6:2b:0d:57:43:83:65:5d:c0:2a:
0a:4f:d6:7f:4b:a8:d6:c2:f7:a8:27:b9:79:2d:38:
e8:55:d7:23:41:af:d6:04:0b:b0:9f:5a:d6:ac:10:
87:5b:d7:41:8d:ce:23:f3:7b:f5:47:6c:bf:53:a2:
7e:75:c7:e7:18:8c:74:16:12:55:c8:79:50:3e:7e:
5d:42:0d:ec:9c:72:1a:ff:da:fe:90:e7:dd:b8:b1:
5a:b8:08:dd:93:d4:81:4d:bb:ed:0d:a3:fb:a6:35:
9c:49:b7:ee:c0:4f:4b:cc:54:2a:5a:65:7a:5e:8f:
05:60:54:a2:e8:92:b4:5a:32:54:25:af:fb:ed:86:
6d:fb:de:6d:8e:35:39:a9:8b:68:e1:b9:8d:cf:4e:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7E:AF:79:B1:57:A2:1D:80:5A:F3:FB:EF:B5:1C:F2:A4:C3:D0:80
X509v3 Authority Key Identifier:
keyid:5F:70:36:48:D7:3F:60:69:45:01:18:DB:A2:6F:96:68:2D:5A:E6:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c6:68:08:1d:85:7b:1b:00:fa:2c:87:6c:56:82:a4:1c:d3:
ef:a0:3d:44:61:84:99:17:68:8f:04:06:e4:c4:98:21:0b:3e:
46:5d:05:1f:96:c1:28:58:f7:75:ed:ad:db:1e:f4:ac:a0:e8:
3d:0b:ea:19:20:e3:41:77:62:94:ab:db:88:87:38:99:49:c3:
ae:f7:ab:cd:4f:ef:a4:25:cb:56:c6:df:40:b6:7b:02:b4:9c:
3a:fc:ed:d7:c8:91:25:63:f0:a2:85:42:f1:23:80:98:80:b1:
cd:8f:9a:9f:b0:c4:79:28:e8:f6:d9:1c:5e:cf:9d:b2:de:a3:
2e:1a:56:5d:c6:fb:bc:0e:b5:27:95:77:74:ae:17:5a:a2:81:
dc:f6:30:46:6d:3f:9d:f4:b3:3f:8c:3c:0d:90:1c:9e:93:a3:
22:05:33:74:0a:b5:ef:72:98:84:3b:05:43:a8:04:9e:c6:1f:
d9:99:03:a5:28:00:47:05:61:c4:03:f3:f9:d2:fa:ad:3e:4f:
5e:de:6a:59:0f:d5:b8:5e:9a:4b:b0:3f:40:10:64:82:d5:59:
df:94:71:de:d8:3f:34:18:b0:37:df:8b:b0:ba:a7:d8:6f:3a:
70:bc:b3:d1:c3:6b:15:b3:7c:ab:cf:62:c4:b6:5d:02:36:a4:
85:7c:16:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:32:29 2026 by rpki-client