
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft
File: -3sFh4NlHpP6MN2W1iZebi81JVQ.mft (raw, json)
Hash identifier: T+XrIv9Ya9SEESzSrIS3C/t5mmmRftLr0OE8lBhie70=
Subject key identifier: 43:78:29:04:14:2F:3F:2E:9C:E1:E8:AE:7B:21:1A:2D:05:73:11:1A
Authority key identifier: FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54
Certificate issuer: /CN=A916C473/serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554
Certificate serial: 93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft
Manifest number: 91
Signing time: Fri 17 Apr 2026 07:11:31 +0000
Manifest this update: Fri 17 Apr 2026 07:11:31 +0000
Manifest next update: Fri 24 Apr 2026 07:11:30 +0000
Files and hashes: 1: -3sFh4NlHpP6MN2W1iZebi81JVQ.crl (hash: fFqfXg/Bdn1PX5WH7pzkWSoEwT4QB7yydcpXfJII960=)
2: 2BB9711E5DE111F09B775D76C4F9AE02.roa (hash: U9tyCvMDlceVXMLQfDjCprercZZxtbmQBQkbmthwKe4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl
rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:11:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C473, serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554
Validity
Not Before: Apr 17 07:11:31 2026 GMT
Not After : Apr 24 07:11:30 2026 GMT
Subject: CN=69e1dd23-32db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:cd:2a:c5:67:c0:af:40:b7:08:66:d8:cc:
7b:ee:ca:8f:4b:59:f9:97:f6:9b:13:39:50:f5:72:
69:1f:4f:e1:69:19:3a:6a:f8:9a:af:21:f6:90:46:
29:da:20:14:b8:63:03:5e:8d:ee:5c:a8:2f:c5:37:
6e:23:2b:dc:e0:e4:43:45:34:22:ed:fb:82:17:12:
ae:c7:70:64:12:01:a2:1e:69:49:90:d5:0d:c6:bb:
75:57:e0:25:6a:cb:a9:5a:ce:5d:5f:e8:23:81:0d:
a3:9e:29:72:e3:3f:e3:29:80:45:60:0e:74:5f:30:
bb:ff:64:2c:69:69:7c:57:4f:d2:7f:4e:99:bf:9e:
df:8b:5e:52:53:8f:08:08:f4:04:f0:43:db:27:0e:
38:a7:1c:37:5f:4a:8c:92:e0:d3:54:fa:2d:f9:56:
0e:35:75:2c:d4:5d:59:53:d1:b8:9a:65:98:2f:7a:
27:e4:c3:e4:b9:1e:89:2d:d2:19:a1:1c:fd:b4:88:
35:73:1f:c5:ac:65:52:43:0a:e7:d3:f1:4b:e2:ad:
3c:d7:c6:24:5f:f8:5b:e6:01:d0:2e:3b:2a:ce:fd:
f3:b9:c9:97:26:33:bb:bd:da:18:9a:76:e0:e9:84:
d6:c7:8d:4e:a4:e5:3a:05:a8:68:e7:24:8b:c0:f6:
e5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:78:29:04:14:2F:3F:2E:9C:E1:E8:AE:7B:21:1A:2D:05:73:11:1A
X509v3 Authority Key Identifier:
keyid:FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:18:8e:b7:28:cf:3b:2e:54:3d:5a:ae:1e:47:8f:45:0f:aa:
0a:f3:6f:be:81:32:f5:db:78:90:f7:39:57:c1:70:8d:84:29:
d2:5c:cc:8d:52:91:99:12:d1:8b:53:22:97:46:1a:68:b4:d5:
f5:2a:c7:00:1c:94:df:35:0a:9a:1c:34:27:e3:71:87:b8:af:
54:2f:da:54:08:29:69:75:54:81:7a:d7:84:5e:91:b7:90:b1:
92:40:05:81:7c:da:7e:d5:34:a1:97:45:cd:97:8b:6a:7c:0f:
0b:e5:be:ca:61:45:62:0a:e0:39:49:3c:dc:a8:5a:75:93:1b:
3d:8e:fd:aa:af:a8:39:50:cf:93:bf:2c:75:1b:9e:16:e4:88:
b2:60:13:cb:77:fe:4c:91:cd:a2:ae:d1:34:15:3c:46:43:f4:
84:b6:d4:fe:12:fb:96:ac:b4:98:67:4f:e7:9c:74:5c:15:7f:
0a:b6:a7:61:74:4c:eb:84:81:42:c7:40:b2:95:e9:bc:6d:5b:
13:0f:c1:13:dc:07:cb:56:50:ca:59:cf:28:2c:d3:14:f1:f9:
2b:e4:7f:66:9f:85:25:c2:43:48:ee:bc:90:39:ad:08:59:2d:
a7:66:36:ab:26:9d:c3:59:00:49:f0:d4:b5:b4:49:30:a9:41:
06:ed:a3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:59:47 2026 by rpki-client