
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft
File: 3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft (raw, json)
Hash identifier: aUPybNfi8M0vo++JcThMMRmMgtFMXg6RZsxY6eoy63k=
Subject key identifier: 51:CA:E9:84:DE:AD:D0:38:BA:E1:DB:96:F9:E1:71:93:1A:FA:10:CE
Authority key identifier: DD:AE:AA:53:40:2B:70:A9:4F:73:7C:1B:0D:5D:95:01:F8:29:F0:39
Certificate issuer: /CN=A91D2A10/serialNumber=DDAEAA53402B70A94F737C1B0D5D9501F829F039
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft
Manifest number: 10
Signing time: Wed 15 Apr 2026 08:38:00 +0000
Manifest this update: Wed 15 Apr 2026 08:37:59 +0000
Manifest next update: Wed 22 Apr 2026 08:37:59 +0000
Files and hashes: 1: 3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl (hash: LzSLPQIEh7KL79ZJUVa671X7lnBdbYNQ9Na1tMUd+dA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl
rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2A10, serialNumber=DDAEAA53402B70A94F737C1B0D5D9501F829F039
Validity
Not Before: Apr 15 08:37:59 2026 GMT
Not After : Apr 22 08:37:59 2026 GMT
Subject: CN=69df4e68-db4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:ca:88:d3:01:00:5f:0d:9c:cb:0f:a0:5e:
32:83:1f:63:51:76:56:74:bd:9d:0b:79:ae:fe:c4:
2b:50:eb:a1:6a:8d:5c:c9:b1:0e:c9:81:22:95:49:
1d:15:cf:85:6b:91:fb:5c:30:ce:29:f2:f0:13:8e:
f0:27:2a:90:92:e2:22:ee:90:05:e9:84:55:32:ba:
10:7d:68:a6:1b:aa:cd:9b:04:b5:ed:55:08:1c:8e:
37:99:84:76:a2:a5:f4:87:26:58:cd:3c:a7:fb:2c:
06:33:1e:1c:00:65:66:36:5d:bd:fd:37:56:49:b3:
94:18:a2:5b:07:d2:d7:62:3d:c0:36:fa:23:cc:7f:
36:f8:0d:bc:3d:2e:6e:b0:ee:34:e7:89:6a:12:e7:
ee:d4:5d:9f:cd:d8:53:81:11:9f:97:59:a6:5e:59:
30:38:03:d9:05:29:02:15:1d:59:63:92:1b:2b:9f:
38:f5:4d:be:4a:41:e9:ef:77:12:4a:1b:a6:52:ae:
76:7d:cc:90:3f:fd:52:2b:1f:87:9e:72:87:e7:70:
d3:5e:f5:19:a5:7a:73:38:00:f6:6a:94:87:68:c7:
84:ca:12:7d:ad:53:86:68:ff:24:99:9e:42:42:9f:
f4:74:e9:f6:3f:fc:86:71:a7:68:62:87:28:b9:04:
63:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CA:E9:84:DE:AD:D0:38:BA:E1:DB:96:F9:E1:71:93:1A:FA:10:CE
X509v3 Authority Key Identifier:
keyid:DD:AE:AA:53:40:2B:70:A9:4F:73:7C:1B:0D:5D:95:01:F8:29:F0:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:7b:ef:0a:e6:89:90:6b:f7:74:f8:23:43:43:13:81:b0:cd:
c8:0a:ad:f1:87:67:93:c1:cd:f9:40:1a:83:7d:19:91:f2:2b:
39:06:ef:36:9c:f5:aa:a7:c0:0a:88:34:d5:53:27:2d:6b:db:
d5:ae:3a:d9:45:ca:80:da:8a:47:b5:90:79:b7:b4:46:59:89:
49:a2:9c:fa:87:c1:25:86:cd:ac:57:e8:c8:d2:be:96:bc:e6:
f1:bf:ef:15:de:ac:7d:81:5a:52:d3:f7:21:c3:42:54:f8:2c:
e7:ac:92:6c:5a:69:a8:4c:8b:bd:15:93:6e:34:18:21:12:8a:
43:77:59:3d:f1:7e:f3:89:a1:92:b8:06:4f:13:05:a8:4e:c6:
6d:d1:4d:54:7a:78:57:65:ff:70:31:3b:0e:4c:ef:f5:8e:05:
88:dd:11:1d:7a:5a:62:fe:de:32:3d:0a:2b:b8:b5:07:20:c7:
60:14:0b:95:aa:7c:04:9d:20:40:2f:a5:97:71:91:a8:28:54:
55:11:04:92:79:10:0f:3b:87:49:c7:67:35:32:22:65:ca:19:
32:de:6a:77:57:4b:f6:db:18:5a:7f:d1:6c:5f:80:ce:c8:59:
30:d3:b6:ef:c7:93:af:6c:4e:4c:7b:0c:34:ee:48:10:32:03:
fd:a0:67:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:41:32 2026 by rpki-client