
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft
File: m3GXbfcKU0c1AkN1KyIJIeANL6E.mft (raw, json)
Hash identifier: pBT7l5ZrveolyDKjyaD9qyMWIpUrdsjg9j95t3HuYjs=
Subject key identifier: 86:37:AF:23:70:7C:72:A2:DA:E5:BF:23:10:2F:46:41:07:A3:32:F7
Authority key identifier: 9B:71:97:6D:F7:0A:53:47:35:02:43:75:2B:22:09:21:E0:0D:2F:A1
Certificate issuer: /CN=A917A2E5/serialNumber=9B71976DF70A5347350243752B220921E00D2FA1
Certificate serial: 5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft
Manifest number: 5A
Signing time: Sun 01 Mar 2026 09:30:25 +0000
Manifest this update: Sun 01 Mar 2026 09:30:25 +0000
Manifest next update: Sun 08 Mar 2026 09:30:25 +0000
Files and hashes: 1: m3GXbfcKU0c1AkN1KyIJIeANL6E.crl (hash: o7pERsywS5R1zMAPuYnE6uNJy+nfbDoW1BDfMZy2zPo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.crl
rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A2E5, serialNumber=9B71976DF70A5347350243752B220921E00D2FA1
Validity
Not Before: Mar 1 09:30:25 2026 GMT
Not After : Mar 8 09:30:25 2026 GMT
Subject: CN=69a40731-3945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fa:42:2a:a0:2f:fd:31:41:c2:05:d9:cd:78:
21:ce:91:e4:e8:3d:00:fd:f7:5c:0f:e0:bb:c1:9e:
69:58:43:43:49:3a:2f:46:44:b5:5b:12:81:dc:2f:
c7:04:d7:ef:56:a0:69:d2:42:4f:70:56:c9:3c:eb:
d1:db:a1:ec:ea:db:11:ce:19:17:01:37:b0:fd:05:
99:c7:de:b4:0a:c4:49:5e:61:a7:90:aa:93:0e:c1:
0c:b3:19:f6:ea:35:7d:9c:79:40:cb:e5:f5:c0:40:
65:b5:ef:da:49:72:d3:49:d3:08:98:12:82:53:ed:
e1:8d:05:6c:08:d7:f9:98:74:2e:34:84:fc:8b:cd:
bf:52:b3:84:1a:3c:73:4e:a9:c9:b3:41:68:a9:69:
0f:9e:1f:94:bd:d0:35:4e:d5:d2:34:83:3c:36:87:
01:c2:be:f5:f6:9f:16:67:4c:15:95:5c:49:39:5e:
d4:ff:b9:99:8c:85:3f:1c:b3:00:ce:c7:9c:89:f1:
fa:85:97:80:dd:f5:e0:05:25:b3:07:eb:8e:9c:4d:
67:57:d3:6c:b3:d3:92:d4:49:3a:8c:a4:a9:6c:af:
4e:97:da:b0:e1:80:2c:cc:68:22:b6:fd:87:31:29:
91:e2:93:fc:bf:64:0c:66:c5:6c:f4:01:41:f1:01:
7d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:37:AF:23:70:7C:72:A2:DA:E5:BF:23:10:2F:46:41:07:A3:32:F7
X509v3 Authority Key Identifier:
keyid:9B:71:97:6D:F7:0A:53:47:35:02:43:75:2B:22:09:21:E0:0D:2F:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:1c:d7:db:14:77:59:35:52:66:4c:d6:9e:d6:7c:51:24:b0:
7a:fa:03:be:fc:b9:8a:47:08:53:0e:b0:bb:fb:98:3f:72:e1:
4c:29:1a:c0:f0:00:0b:12:9d:de:9b:1f:0c:64:19:02:fb:60:
5c:56:ad:4b:ab:10:28:49:45:34:88:b9:59:d8:e5:37:63:ab:
f5:c6:82:a1:a6:a6:9a:84:14:f2:d3:ce:a9:27:bf:e3:93:9b:
37:66:3e:b0:e3:f1:b4:25:58:6f:91:c8:5d:10:3d:fc:40:04:
04:e8:49:ed:f9:11:d3:63:c5:5c:96:6a:b7:61:c7:63:4c:41:
c2:11:65:65:44:5c:71:3f:ea:a4:fc:3b:b9:fb:16:fa:b6:a7:
ff:85:e6:77:cf:04:46:0b:ba:71:2a:91:00:d8:b4:22:61:5f:
89:95:72:c0:91:44:8d:ac:05:f7:b6:53:a0:66:b4:9c:81:6f:
01:77:76:4c:12:6f:40:81:77:41:bd:c7:8d:bc:33:dc:7b:80:
b8:d9:74:96:e7:5c:bc:fa:5b:b6:4c:8f:ff:32:3a:ad:8a:07:
62:6d:7f:c5:5d:5f:f7:fb:9d:0e:69:70:96:b9:22:2a:f4:11:
68:56:43:75:b3:36:36:2f:26:8e:1c:98:7e:f3:4e:c8:e4:f8:
c2:d3:4b:de
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QTJFNTExMC8GA1UEBRMoOUI3MTk3NkRGNzBBNTM0NzM1MDI0Mzc1MkIyMjA5MjFF
MDBEMkZBMTAeFw0yNjAzMDEwOTMwMjVaFw0yNjAzMDgwOTMwMjVaMBgxFjAUBgNV
BAMTDTY5YTQwNzMxLTM5NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCb+kIqoC/9MUHCBdnNeCHOkeToPQD991wP4LvBnmlYQ0NJOi9GRLVbEoHcL8cE
1+9WoGnSQk9wVsk869Hboezq2xHOGRcBN7D9BZnH3rQKxEleYaeQqpMOwQyzGfbq
NX2ceUDL5fXAQGW179pJctNJ0wiYEoJT7eGNBWwI1/mYdC40hPyLzb9Ss4QaPHNO
qcmzQWipaQ+eH5S90DVO1dI0gzw2hwHCvvX2nxZnTBWVXEk5XtT/uZmMhT8cswDO
x5yJ8fqFl4Dd9eAFJbMH646cTWdX02yz05LUSTqMpKlsr06X2rDhgCzMaCK2/Ycx
KZHik/y/ZAxmxWz0AUHxAX2jAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhjevI3B8
cqLa5b8jEC9GQQejMvcwHwYDVR0jBBgwFoAUm3GXbfcKU0c1AkN1KyIJIeANL6Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMkU1L0IwQjI4RkE2OEM5
NzExRjBBMDA5RDU3MkM0RjlBRTAyL20zR1hiZmNLVTBjMUFrTjFLeUlKSWVBTkw2
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbTNHWGJmY0tVMGMxQWtOMUt5SUpJZUFOTDZFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB
MkU1L0IwQjI4RkE2OEM5NzExRjBBMDA5RDU3MkM0RjlBRTAyL20zR1hiZmNLVTBj
MUFrTjFLeUlKSWVBTkw2RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAHHNfbFHdZNVJmTNae1nxRJLB6+gO+/LmKRwhTDrC7+5g/cuFMKRrA8AALEp3e
mx8MZBkC+2BcVq1LqxAoSUU0iLlZ2OU3Y6v1xoKhpqaahBTy086pJ7/jk5s3Zj6w
4/G0JVhvkchdED38QAQE6Ent+RHTY8Vclmq3YcdjTEHCEWVlRFxxP+qk/Du5+xb6
tqf/heZ3zwRGC7pxKpEA2LQiYV+JlXLAkUSNrAX3tlOgZrScgW8Bd3ZMEm9AgXdB
vceNvDPce4C42XSW51y8+lu2TI//MjqtigdibX/FXV/3+50OaXCWuSIq9BFoVkN1
szY2LyaOHJh+807I5PjC00ve
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:47 2026 by rpki-client