
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
File: 3HxGdMlvt2fql8B49oDvV07eu78.mft (raw, json)
Hash identifier: wFRyIrALrqUnGLJGvz9Rux67NDSUML1OoQuoOhh2N+0=
Subject key identifier: 2E:62:D9:C3:4F:B7:87:15:1C:9A:2F:13:97:30:51:B5:25:49:59:1D
Authority key identifier: DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF
Certificate issuer: /CN=A917CD31/serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF
Certificate serial: 06F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
Manifest number: 06F1
Signing time: Sat 28 Feb 2026 22:33:15 +0000
Manifest this update: Sat 28 Feb 2026 22:33:14 +0000
Manifest next update: Sat 07 Mar 2026 22:33:14 +0000
Files and hashes: 1: 3HxGdMlvt2fql8B49oDvV07eu78.crl (hash: nso7qogMY2RiEyQ//t1ufWK0D+Yohg60jAdbO78wZOs=)
2: A88A17FA823C11EBB35EF50FC4F9AE02.roa (hash: w4Og6ZXZfhcGLwCGrYKzyuX9/ySsrXuevHVn0ggUgdE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl
rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1785 (0x6f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CD31, serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF
Validity
Not Before: Feb 28 22:33:14 2026 GMT
Not After : Mar 7 22:33:14 2026 GMT
Subject: CN=69a36d2b-530f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:f0:68:ed:25:be:5d:36:17:8b:f9:c0:ee:
16:bd:e7:34:0d:42:c3:07:85:2b:73:3d:9d:0e:a9:
0d:4c:51:cb:5a:42:73:47:7d:b7:e6:25:8b:0f:c3:
5d:47:19:a1:ef:a7:59:2b:58:4d:47:b7:c3:68:2c:
28:82:d9:e3:70:b9:a5:b3:b9:85:0b:85:4a:8d:b7:
22:da:5d:77:0c:30:21:23:51:48:d9:ce:0e:3c:86:
6b:7c:aa:2b:40:b6:69:d3:09:2c:3f:6f:82:64:7b:
30:7c:31:e2:d6:a6:eb:71:1f:e0:0f:f9:fa:e5:16:
56:92:b8:0a:bd:58:fc:67:c0:6a:bc:8b:e7:96:8c:
5d:ec:59:b3:64:ec:02:8e:12:d0:94:8b:03:01:73:
1e:1c:60:f9:17:09:3a:14:44:aa:30:f9:05:4a:2d:
c0:9e:c1:98:ac:a6:e8:ce:41:c9:ee:54:a2:56:2a:
3c:53:9a:a0:30:1b:fb:f0:d9:bc:a9:64:a6:b3:aa:
dd:9b:99:81:51:f5:57:8a:20:04:06:10:d6:d3:55:
33:1d:bc:88:5a:30:2f:7a:e2:af:60:fc:b6:69:d6:
43:ba:2f:cd:cb:e0:c6:18:b3:0b:eb:fc:f6:cc:60:
ac:84:cd:0c:58:fd:f1:62:44:fb:9b:61:18:39:32:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:62:D9:C3:4F:B7:87:15:1C:9A:2F:13:97:30:51:B5:25:49:59:1D
X509v3 Authority Key Identifier:
keyid:DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:cb:be:48:04:6b:68:fe:95:36:f3:f4:e2:2e:0b:dd:ac:cc:
2c:6a:5a:f6:1e:b8:58:0b:09:9b:c1:c2:ca:73:89:7e:72:50:
6b:3c:87:fe:b2:d9:ae:52:2f:48:4a:3e:4d:a1:a4:b8:19:10:
9a:18:1e:be:59:ed:1a:a5:d5:33:fb:0d:8f:70:8c:6c:c0:74:
34:0c:4a:51:04:ec:00:9d:64:81:70:d3:5d:58:15:4e:fc:21:
2f:a7:2a:fc:23:d4:5f:d7:7e:54:20:1c:6e:d2:57:25:e2:e0:
6f:42:65:9f:9d:91:80:02:4e:ed:ba:87:e8:19:44:66:7c:5b:
69:a5:69:b8:4c:6d:9c:59:64:0d:4d:05:2b:68:04:77:de:21:
a1:03:7f:7e:2e:0c:7d:ca:a8:0f:bd:00:cc:ce:48:5b:4a:84:
96:50:f5:f6:1d:3c:34:2f:9d:18:2c:a5:62:26:bb:13:35:a4:
6e:18:f0:d8:63:0c:f8:2c:bd:93:f6:c4:7d:e0:58:94:ff:33:
b4:31:4b:d9:58:45:d1:bd:f4:50:c7:e2:23:20:81:5c:b4:ea:
ca:de:00:dd:93:8d:fe:71:02:69:cd:7d:de:93:68:5a:a9:c9:
89:a4:7f:e5:40:08:56:ed:d5:c7:2c:91:e6:97:32:0e:ec:af:
d7:1e:9a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:04 2026 by rpki-client