
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft
File: B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft (raw, json)
Hash identifier: hU655O6xopcyMJbvOtO/YKFtO9HyCmemRzkS68o+85s=
Subject key identifier: BD:65:F0:8A:E6:F4:84:1B:E2:18:B3:43:C0:CA:05:29:15:55:5F:D2
Authority key identifier: 07:7B:EA:9B:FE:30:06:46:16:5C:34:36:C7:D4:CC:38:34:6C:6B:A3
Certificate issuer: /CN=A91C13E1/serialNumber=077BEA9BFE300646165C3436C7D4CC38346C6BA3
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft
Manifest number: 0158
Signing time: Sun 01 Mar 2026 06:01:50 +0000
Manifest this update: Sun 01 Mar 2026 06:01:49 +0000
Manifest next update: Sun 08 Mar 2026 06:01:49 +0000
Files and hashes: 1: B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl (hash: TGiZPX79GE+lfC3PTfpsyTeCwcFAvPAhLsovfPzs+Jo=)
2: 5BFDCF8C05FE11EFA2A14B6DC4F9AE02.roa (hash: zw1ksNYvuYvz/L+PTYal5s6UlMhRxYj97KDb6gSbQJk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl
rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C13E1, serialNumber=077BEA9BFE300646165C3436C7D4CC38346C6BA3
Validity
Not Before: Mar 1 06:01:49 2026 GMT
Not After : Mar 8 06:01:49 2026 GMT
Subject: CN=69a3d64e-942a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:2f:50:dc:aa:5c:50:b1:42:4e:8e:d2:ef:
02:f6:e0:34:32:97:f0:d5:65:6c:68:bb:23:35:c0:
d1:93:0a:4d:ed:b5:da:9a:f0:9f:c3:db:80:9b:5c:
b9:bd:45:d9:60:dc:9a:73:29:6a:ae:75:fe:aa:8e:
67:ac:4b:0c:4e:99:68:84:03:a0:93:87:1e:4d:7b:
5b:3f:c2:7a:00:b6:34:5c:9f:04:73:99:a9:c4:74:
13:90:87:98:81:3e:20:a1:b5:98:c9:93:6a:ed:26:
06:51:a5:b7:d1:9d:c2:16:7a:0a:1c:b1:b3:d2:b1:
f8:c5:80:5e:31:c9:08:54:8f:93:0f:b2:34:53:94:
f4:99:10:a6:31:eb:0d:22:80:58:27:dd:37:60:dd:
d8:2d:00:f1:2c:02:ca:c2:64:52:1c:7e:86:de:15:
8b:f5:0e:98:13:ad:b1:c5:21:e9:78:3c:21:3d:26:
58:cc:3e:c1:91:6e:c1:b3:d4:3c:d3:c7:80:ba:22:
a9:31:eb:51:92:e5:71:60:73:bf:d4:03:f6:d7:a5:
86:0f:b9:df:fb:29:d2:37:4a:ce:1f:6a:a6:82:00:
f7:28:6f:9d:2c:5e:b1:50:d9:55:c1:c4:cf:dc:f3:
e2:17:1d:92:eb:e1:61:6a:c7:be:fb:2e:79:5e:16:
f2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:65:F0:8A:E6:F4:84:1B:E2:18:B3:43:C0:CA:05:29:15:55:5F:D2
X509v3 Authority Key Identifier:
keyid:07:7B:EA:9B:FE:30:06:46:16:5C:34:36:C7:D4:CC:38:34:6C:6B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:b1:ec:29:80:94:2b:91:74:6e:2a:bc:e9:e6:31:0f:e4:67:
3b:35:fb:42:65:5a:2f:9d:3a:74:da:00:4c:0c:54:2b:68:92:
d3:3d:2e:a4:f8:77:4b:42:ef:97:22:30:dd:00:e8:75:29:29:
a7:1c:52:42:a3:ea:d9:4a:c7:03:d5:67:49:73:47:b6:10:ca:
ea:b5:07:6f:6f:0b:35:77:0e:7e:1c:ed:17:28:a0:71:db:a7:
22:85:85:fc:7b:cb:29:8b:1d:40:21:06:69:79:95:a9:3e:25:
6e:d9:6c:b4:06:ad:02:5e:72:55:c8:83:19:60:42:0a:2d:bc:
e0:50:ee:7e:6c:f2:97:3c:b0:9c:ec:a9:38:af:ae:b2:25:27:
fd:04:b6:9e:9f:cc:fa:12:7d:ad:80:63:ac:8e:20:e2:dc:be:
ee:3a:81:de:97:56:b4:c1:bc:79:8b:65:1d:6e:5e:3c:c2:be:
3c:c7:41:f3:82:9b:d2:7e:50:48:52:61:bf:67:ee:1c:0f:6b:
70:40:09:d6:72:9d:82:9b:c3:ee:47:26:8c:f6:cf:96:6a:4e:
8b:42:12:12:26:93:b5:ae:56:83:6b:9e:9c:fb:2f:3d:9d:50:
7a:76:65:ad:32:75:28:18:14:ca:2a:a0:67:25:11:33:9d:93:
2b:85:61:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:42 2026 by rpki-client