
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft
File: 3rAzsBIsJfawCvHCFkKTMuDSAe4.mft (raw, json)
Hash identifier: /Skm8Hftd5NIf95JDbwXVvP1QJKAWG1wnXb+/bCgDr8=
Subject key identifier: 4B:42:41:7C:36:B3:D0:C2:70:B7:CF:F4:CA:8B:93:25:0E:BB:5D:4A
Authority key identifier: DE:B0:33:B0:12:2C:25:F6:B0:0A:F1:C2:16:42:93:32:E0:D2:01:EE
Certificate issuer: /CN=A9181D2A/serialNumber=DEB033B0122C25F6B00AF1C216429332E0D201EE
Certificate serial: 44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft
Manifest number: 44
Signing time: Sun 01 Mar 2026 09:47:40 +0000
Manifest this update: Sun 01 Mar 2026 09:47:40 +0000
Manifest next update: Sun 08 Mar 2026 09:47:40 +0000
Files and hashes: 1: 3rAzsBIsJfawCvHCFkKTMuDSAe4.crl (hash: 8JjAVOAd5dEdRARK9P1gr6BkixdwtN7GWwWh5Hg+H74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.crl
rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181D2A, serialNumber=DEB033B0122C25F6B00AF1C216429332E0D201EE
Validity
Not Before: Mar 1 09:47:40 2026 GMT
Not After : Mar 8 09:47:40 2026 GMT
Subject: CN=69a40b3c-637d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7d:2f:9b:3e:af:8c:51:7f:6f:07:f8:90:b5:
60:40:aa:3e:d6:6c:12:71:bb:c0:75:79:3b:01:9f:
f0:7b:b5:a8:28:da:02:fe:64:e8:64:e7:13:fb:1e:
0f:ae:4f:3f:18:d3:e1:bc:88:1e:6a:74:7a:55:25:
6f:46:90:a1:65:51:50:8d:1e:34:d4:e3:e8:62:6b:
7b:45:95:53:1d:af:4f:7d:15:26:62:e3:eb:6c:d3:
51:d4:eb:36:f8:56:0c:0c:d5:f1:61:9e:7d:d7:17:
42:68:ec:a2:ac:05:a3:db:43:c0:25:a4:4a:6a:d8:
10:43:08:dd:b6:3d:28:bd:2e:3d:e8:36:a7:60:67:
78:63:6e:fd:c7:ac:e8:40:70:c5:b1:bc:a4:00:9c:
bb:de:e6:45:98:ae:ec:7f:a6:d0:ce:5c:dc:de:ab:
6e:02:c0:64:5f:8f:51:d2:11:45:41:33:81:ba:be:
a2:71:8d:b8:42:93:16:8f:e6:5e:e3:a7:54:0e:68:
9e:df:76:fa:22:7b:1d:3f:96:0b:73:17:76:c3:36:
b0:1e:ce:61:28:08:a3:3d:32:b6:5e:3b:66:1c:51:
2a:66:23:90:e5:d9:59:64:7f:d0:22:a8:54:be:61:
27:7c:5c:85:8c:8d:ac:80:23:0d:59:88:f7:5a:6e:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:42:41:7C:36:B3:D0:C2:70:B7:CF:F4:CA:8B:93:25:0E:BB:5D:4A
X509v3 Authority Key Identifier:
keyid:DE:B0:33:B0:12:2C:25:F6:B0:0A:F1:C2:16:42:93:32:E0:D2:01:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:9a:15:3b:21:58:bf:f9:33:60:7f:39:b2:8f:a1:18:d7:0f:
16:68:79:99:44:3b:8d:05:62:bd:49:01:5a:09:84:d4:bd:c3:
a5:73:9c:f5:e7:a1:fb:d6:48:54:fd:08:5a:76:7b:cc:04:a2:
71:47:d6:17:0f:6e:a5:83:1b:cf:96:46:c8:76:b1:d7:e6:35:
10:2f:8b:dc:9f:48:c3:b9:a0:55:07:43:a0:c3:8f:c9:1a:7f:
fe:69:9f:6f:76:5e:2d:44:49:80:62:44:c6:a4:44:fe:d9:93:
18:f9:55:b4:f0:8c:96:c5:dd:4a:5e:35:9d:36:77:2a:45:4e:
12:8f:d4:a0:6e:a5:d0:04:57:77:2e:fd:cd:6e:69:44:34:d9:
31:da:93:d3:02:ac:94:3b:b5:0f:35:d1:f7:96:c8:24:b7:0c:
ea:00:3b:06:89:3b:f2:8c:81:d0:34:5b:6e:82:8b:59:2c:4c:
d6:ef:ac:30:34:6d:86:02:19:3f:58:0f:04:32:55:3b:df:59:
7e:f7:35:82:b6:05:e9:00:37:e8:9c:47:ff:8b:ec:fe:23:d9:
06:10:64:81:f6:7c:1e:ec:30:5e:11:88:2c:7a:bb:68:88:82:
89:2b:97:40:b4:bf:99:86:5c:1b:b5:f4:e5:2c:e1:0d:f9:ad:
fa:30:f9:17
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MUQyQTExMC8GA1UEBRMoREVCMDMzQjAxMjJDMjVGNkIwMEFGMUMyMTY0MjkzMzJF
MEQyMDFFRTAeFw0yNjAzMDEwOTQ3NDBaFw0yNjAzMDgwOTQ3NDBaMBgxFjAUBgNV
BAMTDTY5YTQwYjNjLTYzN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCXfS+bPq+MUX9vB/iQtWBAqj7WbBJxu8B1eTsBn/B7tago2gL+ZOhk5xP7Hg+u
Tz8Y0+G8iB5qdHpVJW9GkKFlUVCNHjTU4+hia3tFlVMdr099FSZi4+ts01HU6zb4
VgwM1fFhnn3XF0Jo7KKsBaPbQ8AlpEpq2BBDCN22PSi9Lj3oNqdgZ3hjbv3HrOhA
cMWxvKQAnLve5kWYrux/ptDOXNzeq24CwGRfj1HSEUVBM4G6vqJxjbhCkxaP5l7j
p1QOaJ7fdvoiex0/lgtzF3bDNrAezmEoCKM9MrZeO2YcUSpmI5Dl2Vlkf9AiqFS+
YSd8XIWMjayAIw1ZiPdabqUHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUS0JBfDaz
0MJwt8/0youTJQ67XUowHwYDVR0jBBgwFoAU3rAzsBIsJfawCvHCFkKTMuDSAe4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxRDJBLzI1QTRBNkI2QjMx
RjExRjA5RDhBMjY0REM0RjlBRTAyLzNyQXpzQklzSmZhd0N2SENGa0tUTXVEU0Fl
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM3JBenNCSXNKZmF3Q3ZIQ0ZrS1RNdURTQWU0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx
RDJBLzI1QTRBNkI2QjMxRjExRjA5RDhBMjY0REM0RjlBRTAyLzNyQXpzQklzSmZh
d0N2SENGa0tUTXVEU0FlNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA4mhU7IVi/+TNgfzmyj6EY1w8WaHmZRDuNBWK9SQFaCYTUvcOlc5z156H71khU
/QhadnvMBKJxR9YXD26lgxvPlkbIdrHX5jUQL4vcn0jDuaBVB0Ogw4/JGn/+aZ9v
dl4tREmAYkTGpET+2ZMY+VW08IyWxd1KXjWdNncqRU4Sj9SgbqXQBFd3Lv3NbmlE
NNkx2pPTAqyUO7UPNdH3lsgktwzqADsGiTvyjIHQNFtugotZLEzW76wwNG2GAhk/
WA8EMlU731l+9zWCtgXpADfonEf/i+z+I9kGEGSB9nwe7DBeEYgsertoiIKJK5dA
tL+ZhlwbtfTlLOEN+a36MPkX
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:44 2026 by rpki-client