
$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
File: 3dU_UiXtL42o0J56rZgsgLbOrag.mft (raw, json)
Hash identifier: GCFYIKhUoSYcOHqqef+mFj5+SOV+zY/7Nh82UW28O68=
Subject key identifier: B4:46:17:EE:B8:64:A2:A8:48:44:3E:12:DF:F9:99:60:AC:38:62:75
Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
Certificate issuer: /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
Certificate serial: 082F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
Manifest number: 2D3B
Signing time: Mon 02 Mar 2026 01:13:09 +0000
Manifest this update: Mon 02 Mar 2026 01:13:06 +0000
Manifest next update: Mon 09 Mar 2026 01:13:06 +0000
Files and hashes: 1: 3dU_UiXtL42o0J56rZgsgLbOrag.crl (hash: LF1+bV8McYvVSLs+UhQtMgKGICQcyFnM+ub2JEWwKwc=)
2: CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa (hash: GUsLBn574ELIPHrzNZ8A3QgbJIsg7VbDm7V6sVO40ak=)
3: 10C418C4D40011F083CDC127C4F9AE02.roa (hash: DnRwHb+zGanKOnKDBhnJEheD17mYmVP+lAVvotZJElo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl
rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:13:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2095 (0x82f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
Validity
Not Before: Mar 2 01:13:06 2026 GMT
Not After : Mar 9 01:13:06 2026 GMT
Subject: CN=69a4e424-97ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:d9:7b:53:ec:e0:b2:57:c0:70:2e:57:a2:
59:4d:c0:ab:03:bb:3d:b4:d2:af:25:20:d5:33:7a:
a6:79:b8:7a:9c:c0:5f:7f:b0:9c:57:2f:9a:76:17:
0d:3b:fa:11:a1:3a:95:25:3a:4c:93:1e:60:19:74:
71:12:00:74:63:66:dd:7a:28:92:ba:72:39:86:6e:
43:c4:c4:fa:86:e1:82:ef:dd:da:11:ae:0c:78:fb:
8f:6d:65:dd:55:28:63:a0:21:3e:72:a9:24:cf:6e:
0a:49:26:37:66:2d:0a:3c:49:03:6a:c9:f1:ec:90:
1f:bb:d4:ef:d4:48:62:92:86:ac:cf:e7:15:99:ef:
16:2f:54:d6:fd:04:81:6a:f0:e9:d7:c1:83:1e:28:
0a:86:ca:85:f6:db:34:f4:88:60:9e:b6:51:46:48:
3d:73:f1:e7:54:29:26:69:06:b5:40:d8:d5:5b:ce:
9a:71:95:4f:62:3c:97:f4:20:85:13:30:96:6a:f0:
4d:18:82:2b:56:ee:ed:64:2c:4d:01:75:f3:9a:fb:
9a:7a:eb:2c:4f:10:77:b8:3c:79:eb:aa:05:9f:20:
c0:ca:8b:b9:39:f0:d3:9c:c7:c0:a4:16:cd:03:a7:
c0:03:da:e3:e7:71:68:05:01:e5:d4:ea:b1:87:1d:
b3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:46:17:EE:B8:64:A2:A8:48:44:3E:12:DF:F9:99:60:AC:38:62:75
X509v3 Authority Key Identifier:
keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:05:1f:95:83:e8:d2:71:d6:a2:91:08:9f:5d:15:59:48:02:
fb:85:88:e0:9a:9e:2d:7e:27:b7:bb:c0:1f:c4:c5:42:92:af:
19:d2:5f:ad:e1:8c:6b:4c:e5:1d:20:fd:e6:8b:a6:34:49:45:
a9:ae:19:cf:8e:7e:88:e7:80:9d:f3:65:42:b7:50:66:5b:df:
59:e6:7f:a6:22:c4:a3:30:20:d2:38:37:be:32:5a:c7:26:f0:
29:68:94:dc:a2:59:4e:47:05:f6:f1:3f:29:08:83:92:57:3b:
ed:a7:3d:5c:0e:2d:0c:41:36:f8:3f:b3:8b:53:f5:ba:96:f1:
db:04:8d:ca:ee:b3:31:a8:09:cf:1a:a3:76:bb:a4:0a:58:78:
df:c9:4f:57:66:04:ee:d7:71:74:e4:e2:12:47:85:ce:56:bc:
6d:09:6d:18:8d:c1:38:eb:13:cb:0b:4c:08:d7:22:ea:ae:d6:
33:c6:82:cb:d2:f2:cb:bd:b4:b9:ee:4e:45:66:2b:32:a7:1e:
d6:6a:8e:3b:1f:ef:57:48:1f:46:e7:5b:cc:73:c5:89:c9:3d:
e0:56:89:ef:95:4f:4f:06:dc:a9:b3:ce:76:37:a0:07:29:65:
3a:7d:c5:cc:0e:5d:1d:7e:9c:21:25:67:13:30:81:ed:bb:f7:
81:5c:a9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:55 2026 by rpki-client