
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft
File: Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft (raw, json)
Hash identifier: UwT6/DaQLVV5Wzgtnswnh7qgaU0aXZAaHXIFqgfhIgk=
Subject key identifier: 82:6D:08:F9:25:0E:56:2A:D8:E4:48:2B:3F:8A:41:BE:0E:D6:D4:2C
Authority key identifier: 3D:BD:D7:ED:41:24:80:E9:35:5C:27:F3:C1:13:B5:64:0D:31:86:B3
Certificate issuer: /CN=A91A3399/serialNumber=3DBDD7ED412480E9355C27F3C113B5640D3186B3
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft
Manifest number: 01D3
Signing time: Mon 02 Mar 2026 00:27:16 +0000
Manifest this update: Mon 02 Mar 2026 00:27:15 +0000
Manifest next update: Mon 09 Mar 2026 00:27:15 +0000
Files and hashes: 1: Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl (hash: s8R3Vy/ldzufg4lq0+cB1LKOG/wQiMAeCzFdyAxf3l8=)
2: 553596D65DB511EE841C151FC4F9AE02.roa (hash: ENKRczYYvLUIozCAd5X4sketAA/sYkbVgxD+0/V4DAk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl
rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3399, serialNumber=3DBDD7ED412480E9355C27F3C113B5640D3186B3
Validity
Not Before: Mar 2 00:27:15 2026 GMT
Not After : Mar 9 00:27:15 2026 GMT
Subject: CN=69a4d963-0518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:00:29:4c:a3:53:d4:d8:4d:f6:a8:84:ee:43:
d3:f7:2b:34:ea:36:a5:3f:d6:02:b2:6c:0f:ab:05:
bf:93:72:ea:1e:67:1e:b2:08:88:ae:38:ac:bf:30:
18:d8:81:c4:9e:7c:35:ae:2a:a3:5d:13:bb:78:f7:
02:93:40:f0:ca:0e:3b:7a:e3:a1:87:e4:09:60:1c:
9c:d4:06:29:47:28:04:88:3d:75:cb:e9:bf:06:8d:
1a:4d:2e:ac:19:f6:17:f5:e4:1f:c3:90:dc:9b:2b:
7f:47:97:1f:6e:88:96:df:d0:07:4f:5c:fa:d8:35:
70:15:e1:2f:78:7b:e1:be:bd:24:53:f9:80:c8:e6:
5a:4b:63:4a:bc:64:d9:6c:c9:86:ec:10:ce:48:1d:
48:ec:d0:d2:fe:e1:ff:85:19:ca:5a:ec:24:30:42:
31:bd:1d:b9:8c:db:ef:91:b1:9a:6f:01:1c:d9:43:
92:f9:38:6e:87:de:99:ad:a6:14:21:3f:a4:92:62:
40:54:29:f5:0d:82:7b:30:0d:53:09:1f:72:a7:85:
d6:e1:a3:21:96:58:c6:e8:a2:84:63:e8:9d:d8:a6:
73:00:16:76:bd:00:d2:1c:ff:cd:c9:79:76:d5:55:
90:01:8b:0e:d1:83:01:f4:47:d2:17:69:a8:c6:f3:
c5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6D:08:F9:25:0E:56:2A:D8:E4:48:2B:3F:8A:41:BE:0E:D6:D4:2C
X509v3 Authority Key Identifier:
keyid:3D:BD:D7:ED:41:24:80:E9:35:5C:27:F3:C1:13:B5:64:0D:31:86:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6c:47:58:12:8c:11:d1:f6:43:43:00:40:84:35:86:f2:1d:
a5:2a:29:93:71:81:f8:b8:b1:db:da:fa:e4:11:33:5b:24:cd:
f2:af:02:b4:d1:fd:b9:73:c5:e9:e8:0e:b3:40:3d:79:e8:43:
6f:a2:77:ac:73:d1:aa:11:74:56:b6:e4:1b:ad:fc:31:dd:0f:
b1:b7:19:d8:0a:8c:31:3c:ef:e3:12:57:f1:81:0b:e1:bf:38:
16:82:05:47:4e:11:b0:c3:e8:17:ad:e3:c0:c6:3e:a1:71:8a:
5a:14:e0:15:e9:a8:f1:04:c7:3d:ec:c4:11:39:4b:c6:50:ce:
6a:86:81:17:22:25:a2:5b:e6:b7:18:b0:38:a4:8f:5f:5e:21:
cb:a8:38:bc:48:8d:e2:e7:65:b6:24:de:85:db:79:fa:91:35:
db:af:31:e4:dc:5e:c6:2b:8c:9b:ff:41:d4:a1:b2:d0:62:78:
8c:ed:d3:94:d8:be:9a:b0:8b:1f:aa:4e:21:32:eb:34:43:43:
8a:68:8c:8b:7a:21:3d:38:cb:e9:f9:54:bd:81:9c:96:d2:78:
6d:7a:83:35:71:fa:72:21:df:1b:bb:39:f1:5f:e4:c9:d7:29:
7b:e9:03:dc:2c:26:d1:76:f0:b2:e5:fe:8c:24:68:10:78:10:
ff:3f:04:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:25 2026 by rpki-client