
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft
File: Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft (raw, json)
Hash identifier: uMeTAmxga+i/S4zyaa3lUTJWhknq0w1HqFnp5d/WrWA=
Subject key identifier: A7:8B:7F:98:2F:D2:DA:B4:45:5D:C2:8E:98:8F:56:A3:81:C3:B8:CF
Authority key identifier: 3D:BD:D7:ED:41:24:80:E9:35:5C:27:F3:C1:13:B5:64:0D:31:86:B3
Certificate issuer: /CN=A91A3399/serialNumber=3DBDD7ED412480E9355C27F3C113B5640D3186B3
Certificate serial: 01F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft
Manifest number: 01EB
Signing time: Fri 17 Apr 2026 03:11:17 +0000
Manifest this update: Fri 17 Apr 2026 03:11:16 +0000
Manifest next update: Fri 24 Apr 2026 03:11:16 +0000
Files and hashes: 1: Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl (hash: exNiUOK4+xSPCpU5CQTw7JsFEBSgVkpXeCpfKADDY8s=)
2: 553596D65DB511EE841C151FC4F9AE02.roa (hash: ENKRczYYvLUIozCAd5X4sketAA/sYkbVgxD+0/V4DAk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl
rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:11:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503 (0x1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3399, serialNumber=3DBDD7ED412480E9355C27F3C113B5640D3186B3
Validity
Not Before: Apr 17 03:11:16 2026 GMT
Not After : Apr 24 03:11:16 2026 GMT
Subject: CN=69e1a4d5-178e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:c7:2c:2c:ab:8a:3a:06:49:cd:d0:29:2e:
98:5b:dd:4e:64:56:fe:57:8a:7f:12:06:1a:78:50:
f2:11:b6:e5:ae:b8:2b:7d:14:92:cd:f8:22:c3:18:
d2:1a:b1:da:55:32:35:85:57:ec:86:b0:84:da:ef:
a0:4a:94:de:82:c0:11:20:0c:7d:2a:1f:39:5e:de:
0b:a1:24:a9:75:a8:d7:5e:00:dd:bd:74:60:cb:3f:
b4:12:2c:b4:66:f9:2d:c7:cb:51:d1:77:a8:e1:69:
75:80:d8:0c:82:35:b2:06:71:5c:76:0f:3e:22:6c:
89:74:9c:8b:ba:7d:e6:f1:69:11:dd:4e:e3:24:eb:
e6:75:e5:5e:50:b8:0c:4c:7f:c6:34:39:5c:6f:c8:
b3:99:33:93:62:99:51:e5:46:0d:25:77:22:a7:6b:
b2:08:03:b4:da:af:e4:0a:f3:13:d5:dc:ef:07:65:
d2:33:c7:f2:79:68:67:25:94:a2:59:8f:0e:37:ce:
38:4c:1d:92:9f:66:ba:e6:17:c3:98:d4:5e:e4:5b:
80:2f:a5:1c:1d:d1:90:a3:4e:5e:ce:af:a6:c4:b0:
d9:91:68:b4:b7:f9:79:3b:20:91:78:c3:64:f7:6d:
e0:0e:a5:e5:b4:16:18:b9:b1:62:66:c5:82:62:a9:
fe:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8B:7F:98:2F:D2:DA:B4:45:5D:C2:8E:98:8F:56:A3:81:C3:B8:CF
X509v3 Authority Key Identifier:
keyid:3D:BD:D7:ED:41:24:80:E9:35:5C:27:F3:C1:13:B5:64:0D:31:86:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0e:4f:5c:85:06:53:6e:19:0d:83:93:ae:35:47:1e:87:07:
d1:34:7c:4e:7f:04:d3:59:02:56:76:43:e3:74:a0:b0:e8:65:
54:f3:91:76:0f:29:26:25:fa:91:ae:0c:89:df:ba:30:b4:86:
96:fb:e4:91:1a:e2:0e:ce:96:db:72:e4:b2:ca:84:18:45:a9:
61:90:22:12:27:c6:a1:fc:c1:20:81:ba:ea:42:fa:4d:ea:22:
7e:73:c2:a9:c1:d9:9d:e5:b7:ac:fe:bc:83:b3:88:ab:f5:e8:
4c:ef:a8:2d:e5:93:4c:1f:4d:bc:55:3d:88:e3:86:3a:74:5d:
93:8e:3b:3e:2f:f8:34:08:1b:38:71:f3:09:09:11:06:05:de:
fd:67:b7:fc:e5:2e:88:e1:59:80:95:f1:4f:70:69:c1:e8:e8:
58:4a:fc:f8:03:94:a0:0d:40:fb:4d:e7:b3:19:3c:00:79:d4:
97:91:dc:a6:c0:d0:65:78:30:75:48:e8:aa:43:08:c1:f6:ce:
ca:36:2e:e5:f6:72:aa:13:d3:90:6e:b1:d0:0c:c5:7b:72:bc:
6c:3b:39:b6:26:2c:09:ab:86:02:ab:80:84:0e:69:a8:bc:a9:
e2:bb:47:8c:27:9b:54:b2:8a:b6:6f:f2:3b:0a:7a:21:c7:05:
27:eb:aa:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:17:47 2026 by rpki-client