
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
File: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft (raw, json)
Hash identifier: xo2yG+09viPbgxFPWfE35IktYsLJn3XfptM1TpWoLf4=
Subject key identifier: D5:45:ED:D5:0A:D5:E0:B9:B7:A1:B9:35:A9:34:43:B9:BC:E4:8B:B9
Authority key identifier: DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73
Certificate issuer: /CN=A91B5AAA/serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873
Certificate serial: 0BE7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
Manifest number: 4112
Signing time: Sat 18 Apr 2026 14:48:01 +0000
Manifest this update: Sat 18 Apr 2026 14:48:00 +0000
Manifest next update: Sat 25 Apr 2026 14:48:00 +0000
Files and hashes: 1: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl (hash: yeoV40RWWIO9J9zxmOQJ9ysZXt6CGTVxRRFafkT6lTk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl
rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3047 (0xbe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5AAA, serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873
Validity
Not Before: Apr 18 14:48:00 2026 GMT
Not After : Apr 25 14:48:00 2026 GMT
Subject: CN=69e399a0-aa9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7b:61:2e:8b:b5:00:84:07:19:9d:44:d2:c2:
92:6f:92:e1:46:d5:54:de:69:e9:88:e5:54:18:33:
af:df:a5:fc:73:76:bc:78:3b:cb:f0:f7:9e:2e:5a:
0b:4f:c1:1c:5e:e7:b3:c2:f8:24:b4:6a:3e:fa:8a:
33:47:6a:12:4d:e8:78:2c:89:4e:1c:b2:47:07:9b:
41:77:1a:31:64:38:2c:ca:c1:cd:45:37:ca:f2:58:
da:61:42:05:5e:3c:85:2a:2a:09:e1:6b:18:e8:6d:
d0:ac:33:d8:5d:fe:a9:dc:51:91:74:4a:17:6d:0d:
09:ef:46:1f:15:77:f2:91:b1:82:ec:75:68:b1:6f:
f7:10:d7:fa:84:24:76:9a:de:ce:e3:c3:13:05:be:
c3:be:ed:8e:a2:42:10:a4:21:0f:f1:08:6d:0b:89:
39:67:b6:6f:9e:1e:62:c2:e5:02:e2:c0:60:41:0d:
3f:2b:d3:c2:14:71:78:ca:58:bf:36:f5:47:bb:78:
4a:e3:0f:c0:b1:55:58:ef:ff:f6:62:4f:4d:f7:a5:
02:13:16:f9:20:0c:48:7b:40:1d:ca:5e:79:af:a9:
f2:c5:a9:5f:da:ab:7a:0e:ca:bb:d3:31:8e:a4:fe:
d3:18:96:d6:a0:86:20:eb:38:d8:63:e3:0d:e0:2c:
f3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:45:ED:D5:0A:D5:E0:B9:B7:A1:B9:35:A9:34:43:B9:BC:E4:8B:B9
X509v3 Authority Key Identifier:
keyid:DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:df:bd:4a:74:11:e4:7e:d9:10:f6:7b:de:2a:3a:85:95:c8:
51:f2:36:7c:63:d4:f1:6d:5a:3a:a7:d6:75:bb:22:71:e0:34:
56:b8:55:7b:d9:a0:57:cf:38:d9:de:1e:20:a6:9d:96:b2:65:
ee:7c:d7:af:a1:22:88:d4:06:ba:f3:72:73:70:c0:89:bf:7a:
8b:96:d2:65:5a:37:80:ef:69:e9:4d:95:0d:ce:da:03:5d:31:
d2:f9:7c:4d:93:cd:a7:ff:bd:90:d4:fc:62:2a:6a:89:50:b6:
d5:84:ae:86:f9:95:8a:f8:e6:4d:31:3f:c2:24:66:4d:bb:9a:
16:2a:ca:03:80:14:f8:20:44:be:3f:2d:86:e7:4a:95:dd:7e:
78:a7:56:c7:36:7c:0c:83:b3:a5:e7:29:3a:ce:34:28:24:9c:
9d:f9:07:0a:14:93:40:bd:b0:ed:b7:7a:50:41:87:57:72:9f:
e6:ab:d8:15:b9:18:4f:25:17:2b:af:27:c1:c0:38:e4:03:27:
88:e2:30:0e:aa:8c:df:5b:6f:a1:68:2d:01:97:4e:f2:2e:39:
86:8f:83:67:fc:8d:6d:3c:e4:fb:c0:19:18:2d:b3:95:1e:40:
d6:e5:65:e8:c1:10:1b:47:3e:af:62:a3:a5:1e:9b:ad:71:f4:
76:6a:0c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:00:46 2026 by rpki-client