
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft
File: P3JyYLCUlEIN1npzBNggXUL_P_E.mft (raw, json)
Hash identifier: Ubizlig9bBs6fukERe7e2kkR/jqnOyqTg8O82ED/u4U=
Subject key identifier: 58:87:A2:B3:A0:11:E0:53:28:61:0F:C0:88:E7:ED:6D:5E:96:77:83
Authority key identifier: 3F:72:72:60:B0:94:94:42:0D:D6:7A:73:04:D8:20:5D:42:FF:3F:F1
Certificate issuer: /CN=A91CA58E/serialNumber=3F727260B09494420DD67A7304D8205D42FF3FF1
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft
Manifest number: 72
Signing time: Fri 17 Apr 2026 07:29:41 +0000
Manifest this update: Fri 17 Apr 2026 07:29:41 +0000
Manifest next update: Fri 24 Apr 2026 07:29:41 +0000
Files and hashes: 1: P3JyYLCUlEIN1npzBNggXUL_P_E.crl (hash: vz0ems0x3WkHwpKMR8XWjJSviey8JkZtB40QvxgIV+c=)
2: 3DC1FF148C6911F08611A235C4F9AE02.roa (hash: H7bTNR9e6JUVDLggIpGg5EM1qrYQVGxo8ckcLbi2lxE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.crl
rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA58E, serialNumber=3F727260B09494420DD67A7304D8205D42FF3FF1
Validity
Not Before: Apr 17 07:29:41 2026 GMT
Not After : Apr 24 07:29:41 2026 GMT
Subject: CN=69e1e165-0744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:eb:85:b7:cc:ca:22:ac:d8:ea:7f:04:e1:98:
d4:87:f3:ac:48:aa:80:4d:10:47:08:6d:11:bc:85:
eb:6d:44:8d:7e:d5:13:2c:8a:8d:16:4f:8f:b9:8d:
a3:34:7d:66:d4:4d:55:97:49:b9:d8:14:ac:2f:a2:
f6:b5:70:3f:24:d1:ae:3c:71:ba:15:f6:4b:ec:61:
01:8b:40:7b:9d:96:d1:4e:97:f5:78:59:40:a6:cf:
0e:89:9e:ba:3d:86:48:68:eb:12:89:5f:91:de:15:
ab:6b:11:97:06:82:77:e3:d9:a8:9c:70:da:08:00:
94:3c:70:26:a3:23:7f:fc:76:29:9f:d2:03:ac:25:
35:87:13:00:c1:62:6b:16:f0:03:2b:8e:67:f7:a4:
ca:9f:6d:55:5e:95:bd:69:b4:3b:54:03:8f:65:7a:
24:76:cb:8c:28:5f:2b:21:fd:ee:17:e5:ec:d9:a2:
03:47:1f:e2:71:1f:a9:8f:7d:99:66:04:c9:0b:60:
3c:9f:ff:c1:32:fe:3e:af:3f:30:89:87:b8:ac:37:
45:72:20:ed:08:e4:09:24:7e:ce:df:39:8b:ff:46:
0f:98:78:63:87:bb:89:14:ae:cf:6c:0f:71:81:a3:
1f:a3:f6:70:e4:b6:fd:33:f3:57:ec:d4:9b:34:50:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:87:A2:B3:A0:11:E0:53:28:61:0F:C0:88:E7:ED:6D:5E:96:77:83
X509v3 Authority Key Identifier:
keyid:3F:72:72:60:B0:94:94:42:0D:D6:7A:73:04:D8:20:5D:42:FF:3F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:08:5d:33:fe:44:b4:a9:03:30:e1:ca:c0:59:ad:d0:a8:e3:
a2:24:cf:7d:ec:db:9f:68:46:1f:8b:a8:77:7d:45:55:e8:d0:
5c:a3:11:43:57:5d:91:ca:ac:6f:98:57:2e:58:be:d8:4a:46:
d7:c4:11:f1:86:84:69:ef:45:08:26:99:b6:a3:0c:42:03:99:
25:9b:75:20:80:9d:ad:e0:89:1a:5c:c9:55:b6:17:02:0a:02:
23:ed:80:35:ec:ab:6d:e3:9c:5c:d7:d0:60:46:4a:25:06:09:
a8:21:9b:ea:5e:cc:6a:f1:85:d6:87:2a:5b:c4:70:ed:e4:7a:
ea:01:78:17:f3:b2:3c:ec:45:9d:7f:7d:24:b9:b6:d3:de:2a:
e4:4e:e2:b3:1b:f9:73:99:05:50:d1:43:6a:d2:89:10:ff:e2:
6c:82:1b:94:c1:d0:92:49:4b:3d:4a:90:0f:b3:2f:1a:07:de:
86:34:e8:53:ae:ef:b8:4b:d7:f1:a7:5a:72:c9:ca:f1:e1:67:
d7:60:a9:aa:ca:3a:28:ff:27:94:a2:76:bc:91:5f:b3:38:97:
3a:ca:9a:3f:f0:34:a1:e8:64:69:ce:5b:59:7e:63:17:ac:7e:
3e:2f:63:d5:c7:bc:6a:86:a4:7e:20:c6:c1:99:24:88:b1:a8:
d3:87:e5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:14:51 2026 by rpki-client