
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft
File: P3PMOoZ5wNsESRpHvnaddbptwZQ.mft (raw, json)
Hash identifier: mwwd0B111NVyb340zGBYdLjTlkPtRD3wJkQIF5MxWDU=
Subject key identifier: 7C:82:BC:C3:D4:E5:9D:F9:4F:D6:2E:07:05:4F:5B:BE:E3:04:60:B6
Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94
Certificate issuer: /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194
Certificate serial: 0279
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft
Manifest number: 0271
Signing time: Fri 17 Apr 2026 01:51:35 +0000
Manifest this update: Fri 17 Apr 2026 01:51:34 +0000
Manifest next update: Fri 24 Apr 2026 01:51:34 +0000
Files and hashes: 1: P3PMOoZ5wNsESRpHvnaddbptwZQ.crl (hash: aGqjYNPrb/Pw+8V1fu4kcjz7hHoyiKF4pIM/ZugFABc=)
2: 777244A4506A11EE8D08A11BC4F9AE02.roa (hash: cHa7YclYlDuD3d6uVoFpYSql4Y83b6GnqkLI1omuRXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl
rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633 (0x279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6DEC, serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194
Validity
Not Before: Apr 17 01:51:34 2026 GMT
Not After : Apr 24 01:51:34 2026 GMT
Subject: CN=69e19227-ebc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:22:94:d8:70:33:45:2d:30:6a:e8:e1:58:
5a:aa:48:f7:71:83:b5:8b:5c:39:e3:bb:19:d9:2f:
ba:f5:6d:f6:30:ce:72:3a:4a:54:44:65:23:25:f2:
ea:02:57:72:67:26:4c:4f:43:68:a0:ea:48:05:e3:
67:28:00:f7:dc:ac:d7:ea:a2:13:64:c5:21:1d:0e:
61:8d:3c:d0:40:b1:fd:c5:fe:80:58:35:04:40:0c:
9a:d5:00:92:8c:dd:1a:56:09:b5:70:4c:50:f2:bb:
1c:e3:fe:23:1d:e8:99:aa:93:39:90:52:21:f0:44:
5d:aa:65:42:b0:62:3d:31:05:5c:e7:23:69:25:79:
48:7e:c5:44:92:0a:47:48:c3:8b:2a:14:46:b2:fc:
67:97:79:e2:c5:5e:58:76:db:bd:32:21:23:ea:f8:
f5:dd:69:f1:51:e4:dd:7e:4e:af:ae:3d:da:7d:31:
7e:c1:f3:3a:b4:88:8e:1d:43:ea:45:a5:ea:84:d2:
8e:02:1a:69:8f:e2:72:4f:5e:63:17:dc:9c:e0:19:
a3:f5:3c:13:23:e6:6d:e6:df:ff:98:92:f4:e7:86:
fc:df:7b:84:b1:e6:53:c0:ce:08:60:06:13:d0:cb:
c2:3c:0e:6d:b1:61:23:02:59:84:27:dd:f7:21:2c:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:82:BC:C3:D4:E5:9D:F9:4F:D6:2E:07:05:4F:5B:BE:E3:04:60:B6
X509v3 Authority Key Identifier:
keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:3b:80:14:a6:70:0b:94:96:da:c5:37:57:c5:09:bb:c7:76:
aa:0d:ec:65:e7:d1:06:59:7e:31:ce:e7:34:1b:fc:fb:fb:16:
65:fa:45:07:ce:74:29:ec:d9:3c:a3:b1:cb:75:66:a3:9d:06:
cc:3e:43:eb:93:17:1e:38:1e:0c:3d:c2:36:ef:ba:a6:1e:ff:
13:dd:c1:08:bd:25:cc:34:41:53:15:9e:b3:1e:ce:fd:b1:d4:
a4:64:2c:17:98:62:7b:4f:48:c1:25:b2:19:ab:68:67:6f:25:
26:1c:bc:ec:88:be:4b:85:6e:99:4c:fb:41:6b:de:c7:75:1e:
f9:3c:1f:9e:25:5d:8b:a5:20:6c:db:49:2f:31:39:6f:79:6f:
19:3c:9a:f4:a7:41:44:44:f7:08:7a:74:08:2f:42:09:42:af:
8f:af:d8:d3:5f:20:e4:90:6a:bd:4b:de:be:2d:82:1a:e4:07:
7e:6d:60:75:2f:bb:49:d3:89:56:f7:b0:14:bd:12:b8:34:25:
9c:01:e2:ab:49:6e:f6:c6:3b:d7:3b:03:37:d5:d4:5a:d7:35:
6b:25:02:b9:ac:13:50:7c:af:fa:bb:33:94:2f:bf:49:51:ef:
c6:eb:ef:7c:00:fe:fe:e2:08:c5:4e:20:3d:e0:71:5a:81:79:
3b:bc:d4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:20 2026 by rpki-client