
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft
File: 3NoGnj7_iVbAFXKBanAjUZXwZyU.mft (raw, json)
Hash identifier: 5+smbLjAG5T9YRT/NPcyYZL6wTE9Jdp5OMWOlNvCCUI=
Subject key identifier: 20:A9:9E:EB:67:0F:DF:49:4B:16:F2:FE:B2:CB:13:AD:25:92:83:68
Authority key identifier: DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25
Certificate issuer: /CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft
Manifest number: 01A7
Signing time: Fri 17 Apr 2026 03:54:48 +0000
Manifest this update: Fri 17 Apr 2026 03:54:48 +0000
Manifest next update: Fri 24 Apr 2026 03:54:48 +0000
Files and hashes: 1: 3NoGnj7_iVbAFXKBanAjUZXwZyU.crl (hash: uewArTIrBLuLEHKG7FF+Qvms+bCyTTRZbb8zgkLwo2c=)
2: 37D72D7CC17C11EE8391A218C4F9AE02.roa (hash: f0Nq6bNqAFhlnNadTuboxrgMX1sJQBWxkk0foam6u60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl
rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:54:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9F31, serialNumber=DCDA069E3EFF8956C01572816A70235195F06725
Validity
Not Before: Apr 17 03:54:48 2026 GMT
Not After : Apr 24 03:54:48 2026 GMT
Subject: CN=69e1af08-a350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:03:e3:4a:a6:71:44:05:6e:2d:44:98:19:
7e:db:7d:3e:4c:92:cd:30:5f:0e:53:18:72:ce:d1:
ad:c9:fa:5d:af:d2:ec:53:9d:75:b5:a0:0b:10:6d:
b0:cf:f0:84:c1:2a:2c:c6:f3:c6:c0:ef:ce:8f:11:
2d:37:d7:ba:1f:2e:d1:71:b7:a5:38:3e:b3:55:fe:
a0:d6:c4:70:71:8a:07:c5:27:eb:fd:ee:01:1f:22:
bb:90:d3:0d:02:56:0a:ef:d7:ae:19:4d:ed:4b:1b:
55:9e:3b:67:23:9c:bb:85:21:50:a1:5b:f9:82:2c:
58:82:2b:72:23:e7:4b:29:b8:bc:39:bb:83:79:42:
2b:12:f1:6b:c2:50:b9:5f:53:0a:d6:ab:29:ed:4c:
40:6f:97:55:5e:1b:a3:1d:74:36:69:e3:0f:aa:a4:
98:7a:74:bb:a8:9e:fb:13:91:1c:33:31:ff:ca:45:
c5:b0:db:ac:1e:21:81:a4:94:66:fd:2d:bf:ba:4e:
b1:d7:20:d6:66:e9:35:2d:1b:37:f5:e2:4c:4e:9a:
ae:b4:34:9d:4c:77:e5:20:76:da:11:71:2f:ef:86:
21:59:ab:a5:2f:36:c2:a2:d1:cd:d4:2f:43:b0:8b:
3d:80:d7:4a:a8:e8:d2:c0:27:f9:7e:87:a6:00:4d:
a2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A9:9E:EB:67:0F:DF:49:4B:16:F2:FE:B2:CB:13:AD:25:92:83:68
X509v3 Authority Key Identifier:
keyid:DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:10:6d:cb:ae:ab:d5:84:ef:ce:06:92:b1:b0:04:07:10:f8:
2f:ef:2e:ba:77:7a:15:d0:33:e9:97:b3:67:0f:2d:92:d9:a9:
5f:7b:8d:27:62:6c:1c:7c:6d:70:6b:fe:9b:c2:46:e7:a7:a0:
ce:8a:55:09:0b:28:f3:17:39:7c:e9:56:26:6a:24:fc:04:59:
1c:86:e5:b9:16:a9:7d:ca:6c:38:8a:1f:c9:a9:38:4c:d5:ac:
bb:83:ef:2d:a4:66:1d:28:e6:ee:ed:30:f0:66:a1:7f:3d:b4:
63:7b:a0:d5:f0:6e:d8:10:17:a6:58:7c:eb:53:42:f3:85:68:
f9:b7:42:a3:9b:06:cf:15:cf:f2:d8:a2:78:f5:3f:ca:45:6c:
5a:4c:ac:39:fb:d5:8f:b6:f4:21:ee:41:e0:bf:4a:02:91:4c:
24:a1:16:c0:f9:9b:86:93:20:6f:57:c0:b9:71:60:48:59:3e:
33:32:15:1d:dc:9f:1b:c6:b4:58:bb:83:96:7a:83:fc:fd:44:
25:9d:66:95:cf:af:df:24:9c:fa:c6:3f:bd:d7:61:31:d8:86:
59:f4:9f:86:8d:66:16:d8:a8:21:a7:74:54:ac:7e:0b:e6:96:
43:f7:0d:97:dc:c7:35:7c:7a:eb:97:a4:09:4f:4a:e7:b7:c8:
07:9e:da:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:40:27 2026 by rpki-client