
$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
File: 3K6HG3xct5vH7PZ5s7LTyVan2eM.mft (raw, json)
Hash identifier: YpTKBG4Uv6RuQIE5HblswE1Gqmrfz9P6cgZcWZNEqv0=
Subject key identifier: C4:2E:0A:B1:A5:E4:43:7C:87:27:2F:74:CF:7D:3E:F5:99:A7:FD:AC
Authority key identifier: DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
Certificate issuer: /CN=A91604AC/serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
Certificate serial: 0729
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
Manifest number: 071B
Signing time: Thu 16 Apr 2026 21:53:27 +0000
Manifest this update: Thu 16 Apr 2026 21:53:27 +0000
Manifest next update: Thu 23 Apr 2026 21:53:27 +0000
Files and hashes: 1: 3K6HG3xct5vH7PZ5s7LTyVan2eM.crl (hash: yc+eqScuPfAVyLiKXwqedMa7h8D9a7Nx0U+1fC6ehFQ=)
2: 0081F3D6F22111EE8EEC070EC4F9AE02.roa (hash: gt5MzzOyMRjHAQJ1OB2Ov2agdEJbjl0iI4HuG5lS+Fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl
rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1833 (0x729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91604AC, serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
Validity
Not Before: Apr 16 21:53:27 2026 GMT
Not After : Apr 23 21:53:27 2026 GMT
Subject: CN=69e15a57-3408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dd:03:c8:34:11:78:95:45:3c:dd:01:6b:87:
d8:a9:77:10:f1:cf:db:ed:1f:29:11:34:17:2a:a5:
cc:3e:0d:03:d2:b3:cd:57:b9:8b:4c:c6:19:ec:04:
c3:c0:94:dc:24:59:a1:39:75:4b:13:45:20:b8:2b:
74:72:71:f6:17:a8:7d:9c:0a:d3:ed:4d:ad:33:4b:
15:22:dc:e0:65:cc:6a:7c:30:39:dc:89:75:62:28:
d6:87:15:44:d9:8f:e9:95:08:88:91:c4:42:a6:4b:
87:2f:ed:37:5f:56:c7:31:50:47:1a:a0:72:83:bd:
e2:bd:d2:dd:42:00:7e:2d:bf:e7:07:ad:be:da:7a:
91:2e:05:f8:25:d9:72:18:07:72:6d:5b:26:fa:54:
80:0b:46:c1:d4:09:18:1a:91:3a:79:e9:28:d4:05:
47:b6:da:9d:b0:5a:cc:9d:e5:97:51:d8:33:62:a5:
47:e8:7f:38:18:6d:d9:06:4c:f7:d5:92:fd:07:47:
70:c1:49:6c:c9:c8:e8:50:91:a2:6c:b9:6a:a3:11:
c8:04:6b:5f:ed:22:32:a3:49:1f:d6:f2:4f:e1:c7:
59:59:07:53:d4:b0:c2:4a:84:57:d5:46:d4:b0:b1:
b5:64:2b:d6:d4:0d:18:fa:e7:b2:49:3f:2e:97:eb:
38:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2E:0A:B1:A5:E4:43:7C:87:27:2F:74:CF:7D:3E:F5:99:A7:FD:AC
X509v3 Authority Key Identifier:
keyid:DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:2f:15:fc:c6:0e:29:09:f2:10:e9:2d:eb:e3:7a:42:4f:91:
06:bc:c9:ff:55:48:64:2a:f0:d2:42:e4:08:51:f0:7c:62:bc:
36:1c:14:34:93:dc:36:7a:27:c1:b7:11:50:44:fe:e4:dc:f0:
03:eb:f3:06:f1:09:8b:85:19:aa:fd:13:b6:14:2e:7d:5b:1d:
54:07:61:7f:f5:9a:e3:7c:29:02:9a:06:ef:52:c8:75:a7:2b:
87:63:07:7b:11:09:ff:78:ea:6e:7b:4e:96:d7:d4:7a:20:ec:
2b:16:65:ab:b4:53:2d:9f:51:f5:a3:4c:0a:ea:5c:ca:7a:24:
5f:92:89:0b:8d:f9:93:29:3e:52:30:b7:0f:18:cd:c1:13:78:
69:80:74:e4:4a:05:35:e8:61:cc:38:bc:bf:1a:cf:48:64:1a:
f8:e7:ef:53:1c:27:18:d6:71:8d:f8:b1:8c:6e:75:12:9b:78:
55:e3:59:4f:16:20:2d:44:76:58:88:d4:1d:f8:77:c7:58:28:
8e:1f:0e:55:9c:31:c3:bd:10:d4:f3:0b:ef:35:6e:bc:e1:29:
bf:3e:47:0e:5c:cc:99:ee:4b:be:56:51:f3:2d:9a:a2:3b:da:
7f:d6:9b:ce:1f:1b:22:e0:b4:01:b2:27:f3:1f:3e:f4:af:db:
7a:62:fa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:17:30 2026 by rpki-client