
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
File: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft (raw, json)
Hash identifier: k0j3waiL54VxaGiiw2++Y4Kq75etOgVzJJgQcZ7uPao=
Subject key identifier: 19:F9:7B:5F:29:C3:D9:3D:0A:11:88:F5:60:C2:6B:95:CF:D0:19:CD
Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11
Certificate issuer: /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11
Certificate serial: 0AD6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
Manifest number: 0AC8
Signing time: Mon 02 Mar 2026 00:59:44 +0000
Manifest this update: Mon 02 Mar 2026 00:59:43 +0000
Manifest next update: Mon 09 Mar 2026 00:59:43 +0000
Files and hashes: 1: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl (hash: 93nv5SibHWFIaTPEATXphzCzTk3RzIQ5ZGbFsgyxAJM=)
2: 47772F946C2011EAA5965B3CC4F9AE02.roa (hash: gthIzMyilnDr9O/SMY6/sn4SwcV0DCBMCWSIc0OaLZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl
rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2774 (0xad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D76BE, serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11
Validity
Not Before: Mar 2 00:59:43 2026 GMT
Not After : Mar 9 00:59:43 2026 GMT
Subject: CN=69a4e100-28f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4b:d5:e6:ac:3e:ae:1a:8d:4a:7a:c1:9f:ec:
80:a1:dc:5e:d0:27:be:5f:24:1c:29:e1:1c:17:ab:
73:b1:d8:41:16:d3:72:d5:a7:84:1d:da:d5:a0:fb:
80:85:12:a6:dd:ce:1c:66:26:af:92:7a:0c:f7:b2:
13:33:4c:a9:1b:25:4f:21:9d:3d:b6:d2:5c:38:8c:
33:16:c2:4c:ee:da:4e:b8:e1:c0:56:3e:cf:25:d4:
ba:17:71:c5:15:00:6c:3f:14:3f:4b:77:f6:1d:c0:
da:9e:b8:78:09:74:6a:58:0a:f5:81:57:f0:bb:eb:
57:05:69:8b:25:2c:57:db:c1:d2:7f:9e:7b:06:17:
5f:7e:31:7a:cf:9a:6e:37:57:49:f6:e4:7f:d6:4d:
61:47:c7:d5:6c:fa:ab:0e:5e:5d:43:20:3b:d8:4a:
16:6c:75:19:c1:4e:d2:5d:34:4f:6a:30:81:ff:93:
4a:f2:c7:5d:fd:8e:8d:48:fc:4e:c3:9b:bc:78:88:
28:60:48:92:4f:66:0f:12:2f:38:bc:45:1e:1b:29:
14:4f:4b:c8:b8:f7:62:ce:42:7f:e6:cf:70:e9:b3:
de:74:c6:76:98:79:12:db:f7:2f:be:4a:c7:d7:fc:
64:82:4c:59:4c:c0:54:b7:e5:bc:be:2c:fe:a4:88:
c6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F9:7B:5F:29:C3:D9:3D:0A:11:88:F5:60:C2:6B:95:CF:D0:19:CD
X509v3 Authority Key Identifier:
keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:3b:02:90:4e:16:01:89:d0:a2:7f:c3:3e:ed:fa:67:86:12:
af:6c:34:ee:9a:af:7a:46:dc:21:ab:fd:0d:e4:a1:60:77:42:
c4:e0:3a:14:43:03:40:de:40:cc:80:c6:2b:b6:6e:9c:c5:e6:
39:b7:a9:d3:2f:13:b1:23:72:6c:34:37:74:28:0d:e9:ed:e5:
d7:dd:74:ab:a7:4a:26:86:a3:77:a6:63:fb:91:e8:57:75:42:
a0:d6:41:90:52:26:e6:66:16:51:a4:36:22:7d:90:0e:03:18:
3d:e9:14:ce:b6:f7:9f:a8:68:b4:04:fe:ed:0f:50:fb:b0:74:
78:c0:1c:06:03:7f:8f:d7:02:aa:22:6f:66:f1:91:71:e1:6c:
62:50:89:66:05:0d:38:44:5f:eb:4b:d5:d0:f0:7e:4c:c2:03:
e7:5a:d6:07:b2:06:eb:4e:21:df:36:4e:53:ce:3d:bd:c8:c5:
f0:c5:a6:0e:8a:c8:0c:6d:e3:1b:0d:2f:48:d3:dd:fd:72:27:
8f:a0:8d:fb:04:08:62:93:13:71:10:fe:9b:00:b9:c6:3d:4a:
b1:f0:f2:18:d9:70:16:f7:a9:c5:2f:a0:d1:42:b7:b2:7d:97:
85:19:87:43:ab:d0:f2:c0:df:00:42:f1:ec:e6:7b:ab:92:e2:
05:55:e9:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDc2QkUxMTAvBgNVBAUTKEREMTE4QkJCMzQ5RjJDOUI0MEREOUJCNzFBNUI2MUM2
NEJEQjNFMTEwHhcNMjYwMzAyMDA1OTQzWhcNMjYwMzA5MDA1OTQzWjAYMRYwFAYD
VQQDEw02OWE0ZTEwMC0yOGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0UvV5qw+rhqNSnrBn+yAodxe0Ce+XyQcKeEcF6tzsdhBFtNy1aeEHdrVoPuA
hRKm3c4cZiavknoM97ITM0ypGyVPIZ09ttJcOIwzFsJM7tpOuOHAVj7PJdS6F3HF
FQBsPxQ/S3f2HcDanrh4CXRqWAr1gVfwu+tXBWmLJSxX28HSf557BhdffjF6z5pu
N1dJ9uR/1k1hR8fVbPqrDl5dQyA72EoWbHUZwU7SXTRPajCB/5NK8sdd/Y6NSPxO
w5u8eIgoYEiST2YPEi84vEUeGykUT0vIuPdizkJ/5s9w6bPedMZ2mHkS2/cvvkrH
1/xkgkxZTMBUt+W8viz+pIjGmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBn5e18p
w9k9ChGI9WDCa5XP0BnNMB8GA1UdIwQYMBaAFN0Ri7s0nyybQN2btxpbYcZL2z4R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZCRS80NEMyOUUwRTZC
NzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxKdEEzWnUzR2x0aHhrdmJQ
aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNSR0x1elNmTEp0QTNadTNHbHRoeGt2YlBoRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NzZCRS80NEMyOUUwRTZCNzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxK
dEEzWnUzR2x0aHhrdmJQaEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaDsCkE4WAYnQon/DPu36Z4YSr2w07pqvekbcIav9DeShYHdCxOA6FEMDQN5A
zIDGK7ZunMXmObep0y8TsSNybDQ3dCgN6e3l1910q6dKJoajd6Zj+5HoV3VCoNZB
kFIm5mYWUaQ2In2QDgMYPekUzrb3n6hotAT+7Q9Q+7B0eMAcBgN/j9cCqiJvZvGR
ceFsYlCJZgUNOERf60vV0PB+TMID51rWB7IG604h3zZOU849vcjF8MWmDorIDG3j
Gw0vSNPd/XInj6CN+wQIYpMTcRD+mwC5xj1KsfDyGNlwFvepxS+g0UK3sn2XhRmH
Q6vQ8sDfAELx7OZ7q5LiBVXpXA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:13 2026 by rpki-client