
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
File: 3BEw2GFrq8bOCI9fIOaXGamcMrs.mft (raw, json)
Hash identifier: WxWftuGuz5tf3vQo0oQ23RXoIA2+EUUFv0dV8h+kMUA=
Subject key identifier: 54:36:7A:11:0C:74:41:2C:7A:34:41:6C:4C:81:3E:CE:3E:11:22:C3
Authority key identifier: DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB
Certificate issuer: /CN=A91B732A/serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
Manifest number: 0101
Signing time: Wed 15 Apr 2026 05:46:41 +0000
Manifest this update: Wed 15 Apr 2026 05:46:40 +0000
Manifest next update: Wed 22 Apr 2026 05:46:40 +0000
Files and hashes: 1: 3BEw2GFrq8bOCI9fIOaXGamcMrs.crl (hash: cSH+85bTefPFS5RFnMhUBOveKLvzQJFD9f4+lI8+KA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl
rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 05:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B732A, serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB
Validity
Not Before: Apr 15 05:46:40 2026 GMT
Not After : Apr 22 05:46:40 2026 GMT
Subject: CN=69df2641-d32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:18:1e:80:2f:f1:d8:b7:3c:aa:36:9b:f9:
88:71:4d:df:96:67:f5:a2:c7:63:f0:48:01:e8:64:
26:fa:4b:73:44:71:01:5b:57:8d:bb:9b:0a:66:fc:
2f:3a:11:9e:aa:1f:a3:18:5d:bb:bf:e3:09:d8:07:
2c:60:80:49:f8:e8:ad:74:4b:6c:c1:c4:7b:bd:29:
42:b2:a4:23:3e:83:67:b9:17:15:e0:b7:13:fc:14:
dd:2d:8a:ea:12:06:19:e2:36:6e:3e:29:ef:b0:ab:
32:c7:1b:8b:87:ed:02:13:ca:15:d5:ab:96:e4:34:
d4:29:68:fb:01:33:e3:54:ed:e6:86:fb:ba:c6:af:
c9:4b:c8:83:41:1a:a7:70:0f:44:f2:4c:de:d7:85:
4f:2e:10:9e:8b:13:80:2b:a9:c5:22:1f:20:eb:0f:
43:70:68:48:30:2c:5e:66:5a:d5:8b:d8:33:35:7c:
b8:90:81:56:8e:08:66:04:d8:a7:0d:05:8c:2f:8b:
45:43:cc:29:6b:81:1f:77:45:5b:61:06:e9:8c:0d:
40:ef:e9:85:7f:7a:8d:1c:eb:31:d5:96:c3:dd:b4:
b4:50:13:18:83:91:b6:63:6b:d2:b4:ab:1d:ac:0c:
04:79:ab:9a:41:d9:15:75:41:f5:20:f9:7d:73:fd:
50:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:36:7A:11:0C:74:41:2C:7A:34:41:6C:4C:81:3E:CE:3E:11:22:C3
X509v3 Authority Key Identifier:
keyid:DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:85:30:8d:e8:a8:e9:d5:d3:0b:25:17:44:0a:83:38:ca:db:
a2:46:89:63:f0:29:be:fa:ab:ff:9d:b9:cc:7c:12:71:2a:f2:
2e:12:5f:28:10:4a:e4:d9:cb:b6:2a:15:b1:cd:be:66:bc:7c:
62:58:61:ba:02:8c:86:59:f4:cf:51:7d:ab:4a:87:af:d4:a6:
51:43:35:3a:b2:47:c1:61:7c:c4:c4:22:11:09:d6:c0:2a:f6:
01:31:fa:8f:89:0d:5e:8c:aa:7e:ff:e0:d3:e0:c4:98:75:95:
fc:b1:90:c6:31:14:66:1e:61:e2:b5:a7:76:48:3d:de:92:96:
25:f9:97:47:85:10:23:4d:40:0d:52:f7:8f:17:03:28:8c:22:
22:40:1e:59:93:28:e5:c5:73:a8:3c:5e:9e:cf:19:3c:2a:0d:
a6:48:2d:da:48:3c:1c:bf:d1:79:78:3e:87:45:9a:f2:7a:fe:
3e:a0:a8:13:56:56:a0:7f:94:b7:dc:e6:ad:29:9b:a3:59:85:
48:c9:d0:52:06:ce:bd:c4:eb:68:24:46:6c:ba:d0:23:b7:7d:
f3:ab:ef:dd:5e:2b:f1:7a:e8:d7:7f:65:be:f9:62:80:17:60:
1e:46:4c:0f:0b:54:9a:9f:a7:5c:dc:75:41:b9:4a:cb:ba:a6:
0f:d4:83:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjczMkExMTAvBgNVBAUTKERDMTEzMEQ4NjE2QkFCQzZDRTA4OEY1RjIwRTY5NzE5
QTk5QzMyQkIwHhcNMjYwNDE1MDU0NjQwWhcNMjYwNDIyMDU0NjQwWjAYMRYwFAYD
VQQDEw02OWRmMjY0MS1kMzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwbYYHoAv8di3PKo2m/mIcU3flmf1osdj8EgB6GQm+ktzRHEBW1eNu5sKZvwv
OhGeqh+jGF27v+MJ2AcsYIBJ+OitdEtswcR7vSlCsqQjPoNnuRcV4LcT/BTdLYrq
EgYZ4jZuPinvsKsyxxuLh+0CE8oV1auW5DTUKWj7ATPjVO3mhvu6xq/JS8iDQRqn
cA9E8kze14VPLhCeixOAK6nFIh8g6w9DcGhIMCxeZlrVi9gzNXy4kIFWjghmBNin
DQWML4tFQ8wpa4Efd0VbYQbpjA1A7+mFf3qNHOsx1ZbD3bS0UBMYg5G2Y2vStKsd
rAwEeauaQdkVdUH1IPl9c/1QEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFQ2ehEM
dEEsejRBbEyBPs4+ESLDMB8GA1UdIwQYMBaAFNwRMNhha6vGzgiPXyDmlxmpnDK7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzMyQS8wODlCQzRFNkI2
MzExMUVGQTJEN0ZCNjNDNEY5QUUwMi8zQkV3MkdGcnE4Yk9DSTlmSU9hWEdhbWNN
cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNCRXcyR0ZycThiT0NJOWZJT2FYR2FtY01ycy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NzMyQS8wODlCQzRFNkI2MzExMUVGQTJEN0ZCNjNDNEY5QUUwMi8zQkV3MkdGcnE4
Yk9DSTlmSU9hWEdhbWNNcnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa4Uwjeio6dXTCyUXRAqDOMrbokaJY/Apvvqr/525zHwScSryLhJfKBBK5NnL
tioVsc2+Zrx8YlhhugKMhln0z1F9q0qHr9SmUUM1OrJHwWF8xMQiEQnWwCr2ATH6
j4kNXoyqfv/g0+DEmHWV/LGQxjEUZh5h4rWndkg93pKWJfmXR4UQI01ADVL3jxcD
KIwiIkAeWZMo5cVzqDxens8ZPCoNpkgt2kg8HL/ReXg+h0Wa8nr+PqCoE1ZWoH+U
t9zmrSmbo1mFSMnQUgbOvcTraCRGbLrQI7d986vv3V4r8Xro139lvvligBdgHkZM
DwtUmp+nXNx1QblKy7qmD9SDTw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:55:47 2026 by rpki-client