
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
File: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft (raw, json)
Hash identifier: j259Lb0tietBJB9+OfymhPen0kvlJpSs+c1cnAWERI0=
Subject key identifier: 26:A2:26:98:D1:3E:D2:B4:0E:76:61:23:91:FB:CA:25:11:8C:7B:03
Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
Certificate issuer: /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Certificate serial: 03D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
Manifest number: 03C0
Signing time: Sun 01 Mar 2026 22:48:52 +0000
Manifest this update: Sun 01 Mar 2026 22:48:51 +0000
Manifest next update: Sun 08 Mar 2026 22:48:51 +0000
Files and hashes: 1: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl (hash: 2Bn6qot7tKEROm1bNMpuOOn06kXvB/kfVOrVvqL9x9g=)
2: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (hash: k2oBvP0OHpEhn0rFjfJBUkA03yXoD6fncIA5rTRi8ZU=)
3: 67A55414D56911EFB3E08134C4F9AE02.roa (hash: kAzpZUfwrPPULu39+opOJk6qvp1ijsjz0hw+Ol5r+ds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl
rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980 (0x3d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6DB3, serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Validity
Not Before: Mar 1 22:48:51 2026 GMT
Not After : Mar 8 22:48:51 2026 GMT
Subject: CN=69a4c254-66dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9c:22:4c:22:f4:8f:c3:b5:b1:8e:fa:da:23:
2c:7b:a7:01:56:63:8c:d2:48:2b:f9:f3:99:c7:7f:
e0:96:ed:6f:0d:c0:c6:74:f7:84:f4:75:89:27:ed:
78:12:2b:fb:1d:14:35:66:70:b2:e4:0d:b7:2f:00:
df:c1:d8:43:13:d8:95:bb:e6:9c:3d:8d:06:79:ad:
dc:b8:14:01:5d:a2:66:2c:4c:6c:e6:d2:ee:ce:4b:
ea:96:37:e9:ff:0d:1d:b1:9d:2e:cc:66:d4:47:05:
c5:bd:58:ee:a7:14:71:57:2f:45:c8:4c:59:fc:30:
80:90:62:1d:5b:af:0f:5e:a3:27:5e:72:48:f6:ea:
4a:5d:b2:77:71:32:d1:4f:fa:1b:56:7a:aa:ae:9a:
f1:b4:31:87:96:90:8c:d2:b6:cb:6d:a5:9b:97:51:
1d:87:a1:9d:70:3d:f2:51:90:26:49:fb:72:cb:ad:
84:cd:82:4f:df:43:77:30:75:e7:27:b5:70:c6:09:
d5:f9:e0:c3:ca:2c:b1:bf:3c:99:76:6b:67:2f:d2:
9f:81:6c:82:a2:63:69:60:56:7a:3d:b2:1b:5c:05:
3d:53:be:81:00:56:62:e3:54:36:36:4c:bb:13:f6:
25:bd:06:9e:c7:c6:25:f5:06:09:13:f9:1b:73:9b:
d9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A2:26:98:D1:3E:D2:B4:0E:76:61:23:91:FB:CA:25:11:8C:7B:03
X509v3 Authority Key Identifier:
keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:b7:87:14:53:0d:1d:79:89:37:1a:50:4d:62:8d:e6:4d:d5:
f3:2b:d4:b9:8b:0d:c0:45:34:b4:e6:a7:fe:3b:cc:5c:7e:dd:
47:ed:89:a3:50:15:90:aa:db:22:82:6a:c0:8d:ef:eb:51:73:
04:8e:7c:07:48:a1:d9:f4:2a:cc:e9:fc:89:43:7d:91:2f:92:
4d:ae:c4:31:7b:78:84:6e:3a:b1:cf:92:b3:e9:ca:5f:3a:0e:
6e:e9:a6:57:58:ce:44:be:5c:e1:e0:cc:08:22:68:b5:f0:c5:
e0:e6:7d:51:a7:6c:d6:12:2e:28:76:e4:8d:2e:2e:ab:bd:25:
7c:92:af:1e:67:11:de:02:a5:14:fb:5a:28:39:90:e6:ee:46:
26:14:71:a8:ca:c6:82:13:d5:24:8d:b6:29:6f:4d:23:c7:2e:
b4:6f:9c:51:31:87:38:9f:36:11:55:77:80:7c:f8:a2:bb:22:
05:b9:97:5e:28:53:96:2d:bf:a6:cf:e5:20:02:68:be:9b:6c:
56:c7:83:9c:f4:f7:67:3c:e4:1a:47:ba:85:95:9a:7a:6e:79:
fc:af:96:05:17:b9:c3:ee:ef:37:22:fa:93:4a:31:88:5b:89:
2b:c6:c2:a6:d8:6e:14:e3:74:f7:bc:60:76:e3:ef:73:de:77:
f9:78:bc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:27:19 2026 by rpki-client