
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft
File: 3CH4ZzeyOX3SsmCej7QGhuPI92E.mft (raw, json)
Hash identifier: pJp90s8qD7Jn6xuH5+Q/GZjkKXAiiVzeZOiBsFhhke8=
Subject key identifier: F4:4D:71:07:4C:A6:C1:87:47:97:37:F8:04:4C:3A:0B:E7:B3:48:18
Authority key identifier: DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61
Certificate issuer: /CN=A91C799C/serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761
Certificate serial: 0830
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft
Manifest number: 0826
Signing time: Sat 18 Apr 2026 20:54:10 +0000
Manifest this update: Sat 18 Apr 2026 20:54:09 +0000
Manifest next update: Sat 25 Apr 2026 20:54:09 +0000
Files and hashes: 1: 3CH4ZzeyOX3SsmCej7QGhuPI92E.crl (hash: A4cjGBissL1/PZDdztwZyoYDgrKMi3/klej2RFt5TA4=)
2: 9F5F0EC6135911EBBC97C718C4F9AE02.roa (hash: nGutShTIxEkwTwwnglW9O9WTwfSVkS3vcucRNmR+lNk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl
rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 20:54:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2096 (0x830)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C799C, serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761
Validity
Not Before: Apr 18 20:54:09 2026 GMT
Not After : Apr 25 20:54:09 2026 GMT
Subject: CN=69e3ef72-7056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:76:ae:67:de:c6:64:6d:21:94:ac:f1:42:
06:81:90:cb:4e:fa:92:28:80:47:14:4f:eb:ce:7c:
c0:d1:52:3f:04:81:7f:ff:b2:3e:2d:7d:c5:50:43:
14:05:14:ad:9a:e2:3b:07:67:05:2c:59:6e:75:a2:
3e:9f:5f:c3:49:d6:ca:74:7a:6c:03:97:91:0e:3d:
c0:3b:64:23:5c:84:23:0c:ea:23:f0:59:5b:d4:0d:
7e:3b:f3:64:69:07:b9:32:40:70:e6:3b:d4:52:e9:
73:81:5f:04:cb:02:b3:cf:81:67:8e:10:08:5c:f3:
51:11:c5:32:a9:2c:b5:4d:39:66:fd:af:90:aa:91:
fb:76:60:17:4d:c2:ee:e9:c8:38:f9:2b:9c:93:fd:
28:24:0d:92:da:7a:3f:13:1a:cb:93:b1:cd:6a:a4:
4c:83:0f:ac:66:38:b5:1f:7d:04:84:73:ce:c8:70:
60:ed:38:ca:3e:f0:21:b8:ae:45:ed:3d:90:5c:03:
49:18:36:dc:b3:f7:28:21:76:96:4f:7d:9e:0f:1d:
64:3b:b4:3e:c0:f9:d2:60:28:f7:6f:81:ce:ec:f1:
63:ca:43:04:c4:ce:24:ef:8e:af:08:53:1f:dc:b1:
fb:e3:7d:1e:f3:2f:02:05:63:44:a0:0b:e1:48:dd:
75:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4D:71:07:4C:A6:C1:87:47:97:37:F8:04:4C:3A:0B:E7:B3:48:18
X509v3 Authority Key Identifier:
keyid:DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:07:9c:93:eb:c7:9c:11:4f:b6:9a:bc:cb:6e:7e:42:2d:3d:
d9:27:5e:a3:05:fe:f5:22:10:c4:a5:3f:fd:b0:45:51:dc:73:
d4:44:e5:c9:dc:00:ce:9a:9f:10:70:02:6e:3c:76:df:54:1b:
e7:7d:84:ef:cf:9b:20:4a:f5:e2:0a:9d:a0:57:b6:8a:d5:f2:
76:c9:50:ed:81:70:62:53:04:f3:e3:58:04:87:3c:62:a2:c6:
b9:62:d9:30:fe:8f:91:68:ad:6f:c1:1f:f4:e2:80:31:eb:ae:
9c:ac:1f:ce:68:bc:9a:4e:d0:4b:50:ea:77:36:06:c2:5c:38:
c3:3c:a6:6c:48:6d:60:99:90:9e:78:fe:1c:dc:be:3d:ef:cd:
8e:76:71:fc:56:2f:bd:78:f9:bd:59:b8:38:68:0c:c1:46:02:
a8:c7:c6:4d:8e:56:c2:d5:d0:fd:df:5b:d4:ee:12:a3:65:d8:
e3:4b:83:83:be:99:84:33:71:c2:13:ae:95:61:b4:b8:f9:bf:
d1:4e:5d:bd:18:09:05:18:65:58:48:39:c6:c0:cb:f0:84:2c:
d8:7a:16:a6:e9:bb:78:3e:da:83:52:0b:0a:0c:f0:d0:df:96:
55:74:a9:ae:b3:ef:72:ca:89:06:26:f2:78:79:f9:5b:91:35:
fd:02:28:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:12 2026 by rpki-client