
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
File: C3f3vSPLQoWNC7_29-OscxNVMdU.mft (raw, json)
Hash identifier: K23L9DigZPhp8shTG7X1MrWh6ubGcyKcDLnVW3I+6Fc=
Subject key identifier: D3:DF:F8:DE:E3:EE:FB:8B:6F:7B:69:A9:31:7B:EE:6A:CF:57:A3:11
Authority key identifier: 0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5
Certificate issuer: /CN=A91EBC61/serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
Manifest number: FE
Signing time: Wed 15 Apr 2026 05:47:00 +0000
Manifest this update: Wed 15 Apr 2026 05:46:59 +0000
Manifest next update: Wed 22 Apr 2026 05:46:59 +0000
Files and hashes: 1: C3f3vSPLQoWNC7_29-OscxNVMdU.crl (hash: IrMmlyOsn9dADqcoxa+lVoY8IT45csHqKX48JyhZ2Sc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl
rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 05:46:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBC61, serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5
Validity
Not Before: Apr 15 05:46:59 2026 GMT
Not After : Apr 22 05:46:59 2026 GMT
Subject: CN=69df2654-dff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f4:81:3e:f1:93:e8:b9:e0:a7:3d:91:a8:0a:
eb:94:f7:48:27:3b:dd:81:15:94:c4:4c:b1:c8:f3:
17:90:86:82:76:8f:4e:8d:1b:4b:26:af:8e:c3:51:
de:33:cc:aa:60:ed:d5:13:ad:ba:50:ac:6f:8c:df:
03:cc:f5:07:2f:c1:65:01:62:3e:ba:86:5c:c6:b2:
3e:8a:aa:d3:22:52:1a:4c:d8:bc:c9:88:49:16:55:
9e:31:b7:00:07:a4:ec:0c:b7:e2:00:68:9c:06:f5:
8a:04:db:7d:8a:10:1d:5d:01:92:df:2e:82:c9:b8:
21:7c:3e:86:e0:c0:0d:91:34:1d:6f:0e:5b:f3:73:
88:cd:af:0f:35:3a:38:19:c8:61:0d:02:40:e5:a7:
4d:22:4a:2f:ec:ee:9d:80:4b:fe:b6:de:24:5e:9b:
f1:15:63:d8:a1:2d:be:dc:1a:78:da:36:7a:f5:6f:
e8:48:6e:c0:bd:e8:8d:31:8e:cc:f6:55:9b:0b:aa:
b7:84:82:6e:3c:55:7e:7a:72:8b:c5:47:96:dc:f0:
89:f8:6b:99:11:af:08:cf:77:0d:21:07:62:54:3e:
a4:c6:00:a9:a8:f1:92:f1:39:11:35:4d:55:f3:69:
db:4b:0f:ab:f7:35:e4:bf:c4:27:e1:dd:d1:62:fa:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DF:F8:DE:E3:EE:FB:8B:6F:7B:69:A9:31:7B:EE:6A:CF:57:A3:11
X509v3 Authority Key Identifier:
keyid:0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c0:dd:e3:f8:ba:83:26:f4:74:6a:ec:7f:56:8e:da:db:10:
d4:36:9c:f1:27:24:49:87:61:f1:74:56:13:42:f2:b8:02:92:
a8:54:e7:10:42:62:e0:29:20:60:fa:16:7d:b1:31:98:2a:39:
1e:23:37:b6:01:09:7a:68:6c:63:68:ca:54:d7:7d:2a:e0:ab:
88:64:87:cf:d6:a5:3d:36:dd:1e:ea:40:2a:00:a3:48:6f:f7:
fc:aa:31:ca:0f:47:07:2a:d6:30:a8:b0:d0:79:d9:b4:fd:32:
a6:43:2d:1e:2e:df:76:f3:82:0a:c6:f1:ed:fc:f7:b4:6f:bc:
4e:3c:35:56:2e:28:95:13:fb:ca:5b:8d:95:fd:07:51:35:db:
88:da:d0:42:75:53:76:8d:d8:92:c1:44:d9:9c:a2:16:ba:44:
3c:31:10:8c:58:a9:81:25:34:e7:6c:bc:ae:4d:78:93:f7:c8:
d4:8e:bb:47:e3:70:77:2e:9f:72:65:e0:80:ee:44:c1:ff:71:
cf:e7:c0:96:57:df:c1:56:d7:33:46:c7:d7:53:98:df:98:e9:
95:f7:f1:cf:0d:f5:be:df:41:06:80:c2:67:c1:5e:16:6e:fa:
c5:84:36:16:6b:90:9b:d2:c4:83:ee:93:28:e1:f7:db:b1:dc:
8b:90:16:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:31 2026 by rpki-client