
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
File: 3HxGdMlvt2fql8B49oDvV07eu78.mft (raw, json)
Hash identifier: pZLq51Ef4EV/5vV0kVBZNG7CmMdI0PN5zS0+aWyptpY=
Subject key identifier: 53:81:4A:49:8A:12:F0:EC:A8:30:D7:23:0F:BB:BD:B1:A1:06:55:BD
Authority key identifier: DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF
Certificate issuer: /CN=A917CD31/serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF
Certificate serial: 0715
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
Manifest number: 070B
Signing time: Thu 16 Apr 2026 21:53:49 +0000
Manifest this update: Thu 16 Apr 2026 21:53:48 +0000
Manifest next update: Thu 23 Apr 2026 21:53:48 +0000
Files and hashes: 1: 3HxGdMlvt2fql8B49oDvV07eu78.crl (hash: 27MH0KFVDR3Bg01xJVBp30gdU0XICgWJXHAEa+sWHSg=)
2: A88A17FA823C11EBB35EF50FC4F9AE02.roa (hash: 7b7X7lAmpe4VIztKAFHWhrlQ0MJNaUA4ExxoVQIfMEA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl
rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:53:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1813 (0x715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CD31, serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF
Validity
Not Before: Apr 16 21:53:48 2026 GMT
Not After : Apr 23 21:53:48 2026 GMT
Subject: CN=69e15a6d-b2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:bd:0f:e7:a8:ac:4f:38:81:d6:d4:ab:ab:
68:86:ea:1a:78:ba:49:fd:8a:67:5c:db:cf:f8:b8:
13:71:a8:4f:41:a4:81:8f:db:fd:5c:96:ee:5a:1a:
65:df:3c:68:01:89:d9:50:a3:c2:fb:cc:d8:b8:ad:
bc:a4:a6:18:f0:c1:6f:1e:c2:b5:97:24:7e:60:ba:
a9:da:1b:dd:38:6b:a7:14:d0:76:4b:6b:54:6f:69:
f2:1e:d0:da:fb:68:7f:9e:6b:82:8b:22:29:c5:5c:
98:8f:12:61:16:97:f9:8f:b8:c5:bd:65:00:28:92:
85:1c:40:2b:6d:18:e6:1f:fd:3b:66:71:02:24:62:
d6:3f:d3:62:34:d1:b5:4f:78:11:9d:2b:3d:29:37:
76:10:ae:c5:72:8a:c5:a1:e5:c5:9a:30:33:39:4f:
1c:5a:cc:70:50:30:5b:45:b3:d1:b6:65:07:a8:a5:
9c:24:9f:e5:ff:ac:30:6c:c2:af:3e:f2:a4:0d:4b:
79:d9:2a:f5:33:0c:91:19:f4:59:02:a5:a5:93:1e:
23:4b:dd:64:14:c8:09:12:a3:04:8a:46:61:28:4c:
50:9b:ab:54:84:d1:fe:79:f2:42:89:f8:8c:e3:50:
3d:cc:96:65:9f:be:80:3d:08:c7:43:f1:0b:1d:9f:
56:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:81:4A:49:8A:12:F0:EC:A8:30:D7:23:0F:BB:BD:B1:A1:06:55:BD
X509v3 Authority Key Identifier:
keyid:DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:2f:69:13:7c:cf:31:35:96:03:6b:07:1a:34:9f:52:f4:ec:
b1:cf:30:97:81:ba:17:6b:6b:67:cf:42:e4:8b:50:4b:37:aa:
0e:ba:78:cc:4a:5b:91:9d:e2:7f:f4:2e:19:ea:04:b8:d9:bd:
3a:df:90:42:e8:14:d1:85:96:d3:6a:66:1f:ad:5b:00:86:47:
45:46:f3:99:bb:9a:f2:cf:f5:2a:25:14:09:b2:8c:d1:06:79:
26:37:cc:4e:46:38:34:40:d2:a1:05:c2:c6:56:23:42:2f:c7:
22:13:32:c7:36:7d:d1:98:87:43:91:2d:54:31:aa:25:86:3e:
93:d3:b1:4b:36:c6:1f:52:f3:c3:3f:90:be:b5:d9:6c:90:e8:
70:a3:65:af:65:c1:97:09:b3:95:7f:9f:12:fd:c7:03:91:5d:
a9:06:0a:28:3a:1f:50:18:60:ff:b3:e0:65:1e:9e:1e:2a:89:
4e:17:98:90:79:b9:46:e9:46:47:08:72:70:28:2d:71:a7:8c:
bf:fd:84:5a:6d:a1:1d:5d:ad:5f:56:8f:ad:34:89:6c:44:6e:
6b:9b:79:f4:4e:7b:40:73:b1:29:31:fc:cc:46:af:85:1d:a0:
79:d2:d1:3b:26:09:16:33:58:d3:fe:17:5c:5d:4d:f3:ba:14:
7a:44:d3:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0NEMzExMTAvBgNVBAUTKERDN0M0Njc0Qzk2RkI3NjdFQTk3QzA3OEY2ODBFRjU3
NEVERUJCQkYwHhcNMjYwNDE2MjE1MzQ4WhcNMjYwNDIzMjE1MzQ4WjAYMRYwFAYD
VQQDEw02OWUxNWE2ZC1iMmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr769D+eorE84gdbUq6tohuoaeLpJ/YpnXNvP+LgTcahPQaSBj9v9XJbuWhpl
3zxoAYnZUKPC+8zYuK28pKYY8MFvHsK1lyR+YLqp2hvdOGunFNB2S2tUb2nyHtDa
+2h/nmuCiyIpxVyYjxJhFpf5j7jFvWUAKJKFHEArbRjmH/07ZnECJGLWP9NiNNG1
T3gRnSs9KTd2EK7FcorFoeXFmjAzOU8cWsxwUDBbRbPRtmUHqKWcJJ/l/6wwbMKv
PvKkDUt52Sr1MwyRGfRZAqWlkx4jS91kFMgJEqMEikZhKExQm6tUhNH+efJCifiM
41A9zJZln76APQjHQ/ELHZ9WIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFOBSkmK
EvDsqDDXIw+7vbGhBlW9MB8GA1UdIwQYMBaAFNx8RnTJb7dn6pfAePaA71dO3ru/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0QzMS83NUY1N0IxMDgy
M0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQyZnFsOEI0OW9EdlYwN2V1
NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNIeEdkTWx2dDJmcWw4QjQ5b0R2VjA3ZXU3OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Q0QzMS83NUY1N0IxMDgyM0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQy
ZnFsOEI0OW9EdlYwN2V1NzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMy9pE3zPMTWWA2sHGjSfUvTssc8wl4G6F2trZ89C5ItQSzeqDrp4zEpbkZ3i
f/QuGeoEuNm9Ot+QQugU0YWW02pmH61bAIZHRUbzmbua8s/1KiUUCbKM0QZ5JjfM
TkY4NEDSoQXCxlYjQi/HIhMyxzZ90ZiHQ5EtVDGqJYY+k9OxSzbGH1Lzwz+QvrXZ
bJDocKNlr2XBlwmzlX+fEv3HA5FdqQYKKDofUBhg/7PgZR6eHiqJTheYkHm5RulG
RwhycCgtcaeMv/2EWm2hHV2tX1aPrTSJbERua5t59E57QHOxKTH8zEavhR2gedLR
OyYJFjNY0/4XXF1N87oUekTTnw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:54:29 2026 by rpki-client