
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
File: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft (raw, json)
Hash identifier: PinAzuYvden0f9JiAIoylArAYxwrVsLQ9ceb0S9nZHg=
Subject key identifier: AD:F6:6B:97:BF:7C:7B:B7:C6:1C:11:6A:8A:36:04:E0:6D:67:3E:7E
Authority key identifier: DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6
Certificate issuer: /CN=A91CDFFB/serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
Certificate serial: 08BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
Manifest number: 08B2
Signing time: Mon 02 Mar 2026 00:12:26 +0000
Manifest this update: Mon 02 Mar 2026 00:12:24 +0000
Manifest next update: Mon 09 Mar 2026 00:12:24 +0000
Files and hashes: 1: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl (hash: kE4QJti5podU8YwXriFet7yEkLPEs8wcB8CPpDO+mKY=)
2: CA42E5689FA411EBBC1FFB40C4F9AE02.roa (hash: 3Ec92baJsmBFXlv6Q2B/yYGvWMA45NR4PIY2EvsfluM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl
rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2239 (0x8bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDFFB, serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
Validity
Not Before: Mar 2 00:12:24 2026 GMT
Not After : Mar 9 00:12:24 2026 GMT
Subject: CN=69a4d5ea-7b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b5:bc:37:d1:e1:e8:35:bf:1a:89:aa:27:e7:
05:61:7a:eb:e1:88:0b:0c:f2:14:bd:bf:a7:81:ac:
8c:83:1f:d5:b7:f5:19:fa:47:41:e7:b5:42:b5:a5:
b8:67:cb:04:a3:e9:1b:34:45:71:b7:dc:2d:8a:2b:
20:8b:10:54:71:43:8b:65:5c:ce:01:fd:e4:6a:44:
b4:89:80:6e:e7:da:e2:4d:8c:ce:47:6f:00:ca:13:
d1:81:0c:f9:4b:a6:67:e4:2f:64:e7:20:ba:5c:e3:
75:02:1f:03:a4:93:e6:50:fc:03:3a:9d:f9:9e:99:
d6:77:2a:2d:b9:07:8e:6d:6f:94:1f:8e:f8:1f:d6:
bb:4e:c4:15:82:48:9e:c8:7f:00:d8:da:e6:80:2d:
8a:d2:15:49:2d:77:97:d5:b2:0c:a2:06:21:a5:0f:
36:c6:bc:c8:74:5e:c3:63:8b:c4:ad:4e:73:fd:7b:
ad:77:75:98:30:62:64:32:f1:bb:18:31:9a:bc:22:
98:47:d5:76:39:f8:cb:10:37:2a:b6:92:0b:4e:23:
55:e9:f1:86:1d:84:ec:b1:69:45:da:ee:38:01:60:
d2:69:4f:6e:56:b9:27:df:f4:e0:3e:db:2b:d1:04:
0c:4c:3a:4e:08:d8:b7:01:74:bf:52:3b:60:40:7a:
57:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F6:6B:97:BF:7C:7B:B7:C6:1C:11:6A:8A:36:04:E0:6D:67:3E:7E
X509v3 Authority Key Identifier:
keyid:DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:2a:09:ab:04:4f:c7:60:5c:a2:46:28:31:93:a5:cb:eb:19:
76:4f:4b:86:6b:bb:c6:d5:0f:e1:10:bf:64:d2:8d:8e:0b:d2:
d9:ad:8f:58:14:48:37:33:53:14:83:30:8d:f2:61:a5:26:7f:
01:5c:20:bf:9e:8e:fa:63:85:8a:17:27:ac:ca:33:f2:b9:17:
ec:6d:60:24:bc:5a:63:5d:57:21:32:1e:51:9e:a7:77:38:b4:
3b:85:e8:81:2d:9f:0e:2c:e8:1d:33:43:3f:51:89:33:8a:ef:
0d:97:a0:cd:f6:98:a2:d5:60:c3:5c:cc:4b:04:75:9a:57:50:
3d:d3:f8:99:56:aa:d6:d0:83:d6:6a:90:5b:b5:d4:e6:fb:15:
a1:12:85:34:bf:0c:9d:cf:2a:f4:3d:c2:ec:b4:a9:e8:cc:fb:
de:d1:b6:9c:53:03:38:f3:14:2b:ae:2f:b0:9e:36:32:05:f8:
1e:63:3e:63:63:d4:69:58:5f:cb:de:fc:a2:70:1d:6f:47:d0:
9d:ec:ac:3c:24:e0:e4:27:ee:2a:65:f3:3a:b7:be:93:5a:92:
1e:f3:0d:2a:36:ee:c0:7a:0b:83:29:c4:9e:c2:02:10:26:5d:
34:ea:06:73:1d:e9:d5:34:9a:2c:85:8e:c7:92:ee:ee:43:25:
51:bd:df:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:54 2026 by rpki-client