
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
File: b3tF49x2JsN_igHgq46krwVfSYo.mft (raw, json)
Hash identifier: 6FuyQ9lATT+YGKyUbsS+kpW1+qgEQQEOrOd4dZM3yJc=
Subject key identifier: CC:25:03:43:C2:4F:6E:BC:19:3D:DC:7C:19:52:5D:2C:FC:D0:1A:2D
Authority key identifier: 6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A
Certificate issuer: /CN=A91F0AF0/serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
Certificate serial: 11AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
Manifest number: 1EA2
Signing time: Mon 02 Mar 2026 00:38:34 +0000
Manifest this update: Mon 02 Mar 2026 00:38:32 +0000
Manifest next update: Mon 09 Mar 2026 00:38:32 +0000
Files and hashes: 1: b3tF49x2JsN_igHgq46krwVfSYo.crl (hash: ebPWSPzEkVgZZgQv4JjM4V6DSg6C5uOFu05PqWGW1OU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl
rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:38:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4527 (0x11af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0AF0, serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
Validity
Not Before: Mar 2 00:38:32 2026 GMT
Not After : Mar 9 00:38:32 2026 GMT
Subject: CN=69a4dc09-8b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:dc:e9:b0:c7:5b:a7:40:ea:4c:91:66:d3:
6d:6c:47:f4:0d:02:37:43:ba:96:42:9e:f2:19:47:
c3:b8:ca:08:7e:dc:8a:f1:df:66:ee:c2:48:66:c2:
c1:46:5e:16:f1:22:a5:87:ae:e4:0b:8e:b6:13:d3:
31:4b:b0:0f:9c:00:01:b1:e7:75:c0:d1:57:10:2a:
b9:8d:4e:42:d4:13:78:8c:bb:06:ee:bc:b1:8a:35:
75:bb:7a:26:26:36:e9:3d:b9:95:9b:03:4c:ad:30:
15:ad:54:a9:78:3e:06:ec:d0:47:82:3e:d5:9f:f0:
87:9f:4a:58:a2:04:a3:92:87:b7:6b:ae:a6:6b:7b:
3b:dd:f0:b0:6c:6b:bd:a8:bd:dc:a8:5e:bb:74:55:
6e:63:58:e3:f7:c1:73:83:3c:fe:ed:7e:6c:61:92:
4f:e1:59:0d:23:b6:a3:1c:1b:17:0a:c9:10:78:18:
f2:f9:5e:2a:75:7a:5c:4b:d2:be:ea:0d:8a:9b:96:
c4:bd:bc:08:a0:c8:9f:d9:5d:8e:49:8a:18:bb:e3:
d1:3f:07:94:3c:01:39:b4:1c:15:7c:19:43:f2:8c:
64:24:c3:96:2d:37:bf:cd:cc:59:dd:03:f0:7d:00:
ad:5b:52:52:e3:df:f7:85:40:f1:0f:07:f0:b2:31:
73:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:25:03:43:C2:4F:6E:BC:19:3D:DC:7C:19:52:5D:2C:FC:D0:1A:2D
X509v3 Authority Key Identifier:
keyid:6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:fa:e7:9a:bd:03:8d:25:13:ff:7a:fa:e8:a0:2f:11:24:0e:
fe:bc:0b:4c:50:e1:35:bd:8d:82:b9:86:ee:87:69:c9:cc:e4:
f2:d0:bf:08:3f:fe:66:23:e5:be:9f:b9:18:8a:cd:4b:1c:27:
cb:36:9f:b5:2a:12:e8:b3:13:ec:c1:00:93:02:9a:33:be:11:
f2:98:df:91:f7:04:bd:59:9a:46:38:f6:07:1b:b8:d9:3c:ae:
16:2f:20:3a:2c:22:6b:ee:27:25:92:cd:0c:93:3f:ef:c1:4b:
bf:6a:fc:e2:cc:f5:cd:11:14:ce:15:56:ef:c3:65:ab:70:a6:
95:d0:30:4e:70:c9:fa:ea:6b:ee:12:36:91:1a:a1:64:fe:ed:
f2:6f:88:60:24:ad:20:3f:3f:92:c1:09:1d:fe:eb:80:34:ba:
69:e8:39:48:72:39:a1:82:f8:4f:0a:3d:9e:36:7e:a8:ad:86:
48:cd:f9:1d:e8:ba:3c:97:d1:30:e2:f0:4d:11:c7:a0:f0:d7:
cf:c8:97:52:e3:e0:af:6e:87:84:e0:68:5d:98:cf:a2:5a:88:
58:97:0f:0a:b6:ff:2e:8d:a0:85:c2:a5:50:09:bd:89:9a:1c:
50:82:c3:c0:f9:3d:c9:8e:1c:e3:be:eb:eb:a2:2b:11:bd:aa:
9d:a5:01:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:00 2026 by rpki-client