
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
File: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft (raw, json)
Hash identifier: obFkmxLeKf3EdCG1PgWuHzzwb4EuM4krA1tEa4/qVtQ=
Subject key identifier: F1:D2:2D:20:58:B1:0E:98:FD:17:3C:A4:87:BF:38:E8:DF:A8:9E:76
Authority key identifier: DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73
Certificate issuer: /CN=A91B5AAA/serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873
Certificate serial: 0BCC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
Manifest number: 40DD
Signing time: Sat 28 Feb 2026 14:50:12 +0000
Manifest this update: Sat 28 Feb 2026 14:50:12 +0000
Manifest next update: Sat 07 Mar 2026 14:50:12 +0000
Files and hashes: 1: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl (hash: ZVSQvJjXjgLlJIxAYt5XxX5a4vk8e/YxCmBeXXO9N2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl
rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3020 (0xbcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5AAA, serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873
Validity
Not Before: Feb 28 14:50:12 2026 GMT
Not After : Mar 7 14:50:12 2026 GMT
Subject: CN=69a300a4-cec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:21:80:09:1b:e2:cb:2a:a0:97:2b:88:89:
73:89:5b:53:11:00:0c:42:c3:97:fc:de:b4:b9:37:
1e:3d:10:54:3f:3e:21:52:8b:9e:15:e1:ac:a9:3a:
aa:db:e1:45:24:a1:09:70:9b:14:11:24:75:2f:a0:
7a:11:1d:e6:18:6a:81:ba:26:14:bd:7b:3e:90:ed:
4c:73:b5:6a:a1:5e:ae:6d:53:c0:bc:8a:f4:64:1a:
86:79:80:6e:4f:f8:0e:e9:e9:e7:83:84:2e:99:fd:
9b:85:aa:8d:64:55:54:77:cf:6a:8d:90:03:6d:ff:
4c:e4:3b:1d:61:33:d1:9d:8b:c0:eb:78:c0:a0:f7:
f4:c8:a7:c3:cf:ab:09:a0:49:8a:9e:a4:22:55:dc:
65:53:3d:3e:81:bc:cd:b7:c9:58:38:d9:af:b0:cd:
11:f2:bf:90:68:c8:93:eb:cf:41:df:57:48:ce:9e:
d7:33:35:86:1f:6c:d6:27:61:4b:b3:0e:c7:e5:5a:
c0:b1:93:50:89:af:75:06:9a:21:ef:7b:65:d8:d6:
6a:5e:19:dd:9d:ce:85:19:f1:84:9c:16:70:a0:de:
19:34:e4:8e:80:47:e0:ef:51:0c:06:f5:30:41:bc:
00:24:9d:6c:f9:59:33:28:8b:6e:83:a6:f0:6f:1b:
63:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D2:2D:20:58:B1:0E:98:FD:17:3C:A4:87:BF:38:E8:DF:A8:9E:76
X509v3 Authority Key Identifier:
keyid:DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:15:cc:fe:ff:52:f2:9f:d7:47:d2:9c:ee:4b:9f:b9:a9:7d:
cb:76:db:fe:5a:29:0b:f3:66:aa:b5:ba:ac:86:8b:24:bb:72:
27:52:96:20:a9:6f:72:48:44:b5:02:43:b0:e5:fa:c9:97:ff:
07:7a:9e:bd:ec:d2:be:96:22:40:cd:30:12:64:db:1a:77:37:
31:b5:ae:ca:e2:08:d1:dc:15:e7:57:7a:c4:8e:1b:2f:a1:85:
f5:b3:7b:41:e8:b0:09:03:17:5e:99:d5:a8:5a:8a:66:31:35:
08:ed:52:b0:3d:8e:37:d9:0b:a2:5e:ce:77:7b:3d:7c:85:34:
26:7d:37:af:46:58:ea:a3:e6:88:e0:4e:07:80:ce:62:be:9d:
4b:5f:f7:f9:93:32:63:94:b8:5b:74:d2:0f:a2:ac:16:cd:5f:
d1:62:6f:de:5b:2c:d7:87:2d:bd:be:57:fc:38:c1:50:8f:34:
48:a3:66:18:b4:5f:d3:88:79:f8:fd:3d:84:99:b3:f4:ec:d2:
23:f1:e1:2b:1d:18:07:d2:e8:5a:f6:0a:5b:7b:1d:70:f8:bc:
e1:0e:bd:a9:62:16:c2:51:90:b3:65:f9:4d:7b:f4:59:96:7b:
a4:f5:95:db:c5:fd:4a:32:84:4c:4e:67:2a:3a:cf:32:d0:30:
28:41:56:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVBQUExMTAvBgNVBAUTKERDRjU0NzBDNUM4NzgyODhENjFEOUVBNUE1MTVENTg1
MEU3QjU4NzMwHhcNMjYwMjI4MTQ1MDEyWhcNMjYwMzA3MTQ1MDEyWjAYMRYwFAYD
VQQDDA02OWEzMDBhNC1jZWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqoYhgAkb4ssqoJcriIlziVtTEQAMQsOX/N60uTcePRBUPz4hUoueFeGsqTqq
2+FFJKEJcJsUESR1L6B6ER3mGGqBuiYUvXs+kO1Mc7VqoV6ubVPAvIr0ZBqGeYBu
T/gO6enng4Qumf2bhaqNZFVUd89qjZADbf9M5DsdYTPRnYvA63jAoPf0yKfDz6sJ
oEmKnqQiVdxlUz0+gbzNt8lYONmvsM0R8r+QaMiT689B31dIzp7XMzWGH2zWJ2FL
sw7H5VrAsZNQia91Bpoh73tl2NZqXhndnc6FGfGEnBZwoN4ZNOSOgEfg71EMBvUw
QbwAJJ1s+VkzKItug6bwbxtjwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPHSLSBY
sQ6Y/Rc8pIe/OOjfqJ52MB8GA1UdIwQYMBaAFNz1Rwxch4KI1h2epaUV1YUOe1hz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFBQS84RjU4OTI5NDFE
OTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdvaldIWjZscFJYVmhRNTdX
SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNQVkhERnlIZ29qV0haNmxwUlhWaFE1N1dITS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUFBQS84RjU4OTI5NDFEOTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdv
aldIWjZscFJYVmhRNTdXSE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmhXM/v9S8p/XR9Kc7kufual9y3bb/lopC/NmqrW6rIaLJLtyJ1KWIKlvckhE
tQJDsOX6yZf/B3qevezSvpYiQM0wEmTbGnc3MbWuyuII0dwV51d6xI4bL6GF9bN7
QeiwCQMXXpnVqFqKZjE1CO1SsD2ON9kLol7Od3s9fIU0Jn03r0ZY6qPmiOBOB4DO
Yr6dS1/3+ZMyY5S4W3TSD6KsFs1f0WJv3lss14ctvb5X/DjBUI80SKNmGLRf04h5
+P09hJmz9OzSI/HhKx0YB9LoWvYKW3sdcPi84Q69qWIWwlGQs2X5TXv0WZZ7pPWV
28X9SjKETE5nKjrPMtAwKEFWQQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:31:42 2026 by rpki-client