
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft
File: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft (raw, json)
Hash identifier: h86QwNgBgY/7QbavmzQFeXtOMTSp2ZrrtESh12WmDhU=
Subject key identifier: 04:5A:22:44:72:C1:C1:89:D3:7E:83:74:86:5D:B5:42:6C:E1:A7:04
Authority key identifier: DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E
Certificate issuer: /CN=A91DC4E1/serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E
Certificate serial: 1C0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft
Manifest number: 1BE6
Signing time: Thu 16 Apr 2026 16:11:12 +0000
Manifest this update: Thu 16 Apr 2026 16:11:11 +0000
Manifest next update: Thu 23 Apr 2026 16:11:11 +0000
Files and hashes: 1: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl (hash: sgYFDu6t9vADuR5E2035a/0fhqGJo3flfJ3OOAoulaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl
rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7183 (0x1c0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC4E1, serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E
Validity
Not Before: Apr 16 16:11:11 2026 GMT
Not After : Apr 23 16:11:11 2026 GMT
Subject: CN=69e10a20-8b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:68:6c:39:4b:d9:bb:58:bf:42:50:21:ae:
07:85:de:b8:5e:9d:50:05:61:8e:07:8b:66:2d:e5:
4d:bc:bf:99:f6:78:31:83:2a:4e:b8:23:8b:90:32:
55:0b:4a:6c:9b:e0:58:3e:58:54:fc:83:7d:c2:dd:
a9:8e:c3:c2:a4:f6:63:bb:e9:18:ad:f6:7b:d6:3c:
a1:30:5e:4e:7d:d9:b6:21:1f:5f:0e:96:ee:ed:8d:
ce:96:96:2c:c5:22:6b:c6:57:81:bb:e5:b5:39:fc:
60:06:11:33:4a:dc:d7:44:4b:ab:2b:0e:78:57:8e:
e1:aa:15:19:fc:66:5f:c6:63:a3:d2:07:0f:18:99:
03:c1:52:c1:24:64:18:37:40:a1:7f:19:ed:33:e8:
89:ee:6e:4e:b4:aa:a0:ca:c0:1a:8a:03:64:06:88:
b2:b9:a4:e8:0f:a9:87:04:8d:fd:66:2d:6c:31:89:
a0:06:21:d0:8f:e4:36:90:b1:b3:de:ae:94:69:2f:
91:63:c8:d5:53:0e:1e:e0:3e:69:7a:16:1a:cc:28:
d4:c7:25:91:fd:d1:99:38:74:48:dd:7f:43:0d:6c:
37:d7:f1:20:00:ea:1d:e4:aa:09:ce:76:ac:b6:3b:
d9:c0:29:3f:09:09:25:3f:99:b1:67:e8:0e:6c:fa:
7a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5A:22:44:72:C1:C1:89:D3:7E:83:74:86:5D:B5:42:6C:E1:A7:04
X509v3 Authority Key Identifier:
keyid:DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:6c:04:7f:15:eb:b4:f5:5b:b3:68:bf:ae:10:c0:ec:f6:c0:
5e:d8:38:25:f4:a0:6f:ba:dc:7c:6a:74:f5:5f:a5:5b:d5:27:
6a:79:a8:bc:65:d3:35:86:94:4b:ed:18:66:f1:d6:ef:17:72:
ce:11:b6:e7:0c:3c:31:b8:f8:08:df:64:08:1f:db:62:42:c3:
ff:64:51:91:18:8e:e8:c8:63:84:86:fa:2a:fe:ce:53:3a:2a:
f1:97:da:93:52:c8:c0:f7:7d:4a:5c:49:08:6b:72:3c:35:6f:
94:c2:96:eb:79:4b:e5:d4:15:42:61:80:2b:0f:9f:b0:38:eb:
d8:3d:cb:11:d4:aa:cd:03:20:ea:78:3f:7e:93:85:2f:bd:32:
28:39:59:78:3d:64:a1:75:94:a5:44:69:b7:45:42:55:ad:e7:
51:9f:fb:08:c6:8b:37:b6:f3:12:1f:d7:42:12:34:bb:bd:15:
86:8c:ec:3d:3f:59:81:d0:44:41:9c:3d:0e:63:07:b0:90:10:
76:15:2e:17:b9:cb:89:84:d7:5b:05:aa:88:3d:63:43:5a:bb:
8f:e4:51:85:39:d5:38:d8:db:b2:d9:c8:a4:41:de:a3:ce:ec:
27:c0:f7:9b:c0:f4:3a:49:09:06:4a:72:8f:a5:0a:46:6d:1a:
a3:2f:72:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:21 2026 by rpki-client