
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft
File: 3rTAuQf6yhxdN3a9SUb0uqjKazA.mft (raw, json)
Hash identifier: l48c/O5f1c83ZeAPSNehrhSXRHwcru9z3cNrCDGi1fU=
Subject key identifier: 0A:12:08:8C:8E:CD:C1:98:BC:01:7E:3F:94:7B:50:AF:D7:6F:2C:14
Authority key identifier: DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30
Certificate issuer: /CN=A91F3B5F/serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30
Certificate serial: CA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft
Manifest number: C6
Signing time: Fri 17 Apr 2026 06:38:09 +0000
Manifest this update: Fri 17 Apr 2026 06:38:09 +0000
Manifest next update: Fri 24 Apr 2026 06:38:09 +0000
Files and hashes: 1: 3rTAuQf6yhxdN3a9SUb0uqjKazA.crl (hash: ok7GoQXXWSPdB7d0NWeXe3agQu7o/VGmlnp2G1CcNmc=)
2: 0B65C980136D11F09F542C81C4F9AE02.roa (hash: wGUGCDLQuCuMzbcHbV/cBOi37S+j6xYKnWjU86HEOho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl
rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B5F, serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30
Validity
Not Before: Apr 17 06:38:09 2026 GMT
Not After : Apr 24 06:38:09 2026 GMT
Subject: CN=69e1d551-2681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:e6:3e:16:41:43:37:c1:8a:c3:bb:ec:bc:
4a:f9:f8:60:b8:02:c9:0c:b2:81:f9:4c:a8:aa:f2:
16:02:1e:6d:f5:fd:6c:5e:5d:65:36:de:64:18:ed:
cd:22:15:01:2f:2e:6d:5e:98:d3:9c:98:d7:0d:03:
90:27:68:50:ea:92:66:03:76:15:02:4a:78:a5:48:
de:70:b8:72:f3:c0:8d:9c:ab:1d:6d:95:9a:0d:c3:
58:1e:10:24:c6:3e:13:b7:e3:12:d0:84:c8:8a:81:
29:b4:67:b5:5e:55:b8:b2:3f:b4:fe:01:cf:79:39:
4e:87:a0:09:be:8f:41:0d:eb:09:c5:51:2c:19:12:
c4:d3:55:e0:59:e4:8a:9c:a0:6d:9d:74:c4:f0:b0:
59:cc:0f:38:34:bc:1c:66:59:9a:12:b3:a3:54:bc:
49:e1:ca:0c:28:f8:75:ae:f4:da:49:8a:e9:6e:08:
4d:3e:07:91:a7:03:fd:38:7f:d3:26:23:a9:a2:84:
b0:15:cc:47:a4:29:7e:98:c7:52:6a:4b:14:75:0a:
a0:3b:99:9b:48:53:6b:36:f6:17:62:f6:9e:fa:14:
c3:08:94:20:21:ab:ae:57:b7:dc:2f:67:80:b0:67:
32:ea:c9:0e:f1:27:ac:b7:a8:46:33:2e:ac:bf:47:
b0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:12:08:8C:8E:CD:C1:98:BC:01:7E:3F:94:7B:50:AF:D7:6F:2C:14
X509v3 Authority Key Identifier:
keyid:DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:24:43:c7:a4:ca:7f:95:0e:a8:1f:09:e5:29:cc:74:68:6a:
e4:40:7b:64:c3:2f:52:9e:9e:26:0b:f4:09:04:cc:0e:38:e5:
80:e2:0b:10:27:b7:d2:ca:36:ab:06:99:13:05:65:c3:d1:a3:
5f:70:16:18:0c:6d:eb:76:73:da:02:a3:cb:db:73:d0:43:cc:
45:76:99:f5:c0:47:cc:a8:83:fe:ea:cb:d4:64:03:e5:85:94:
b5:f1:83:92:11:83:ba:e3:f6:60:80:71:36:30:2e:94:96:f2:
6b:e1:e3:f3:67:95:57:46:bf:5d:b1:3f:0d:8a:35:70:db:c7:
17:44:4e:f0:69:8d:a8:cb:d2:28:54:1e:a4:bf:63:c1:55:75:
cc:a4:a4:96:e4:a6:ac:75:7d:59:06:70:ee:70:9a:1c:6d:4f:
0e:23:41:f3:a4:fb:04:f2:ff:04:2a:14:08:59:4f:44:5a:b4:
04:46:9c:98:63:77:20:48:57:b8:b8:2a:4c:82:62:4d:3a:dc:
54:73:a8:a8:05:6b:3b:4c:e0:a2:6c:16:06:ac:b5:f7:2a:a0:
5f:2c:34:c4:77:12:32:f0:18:3d:c9:80:36:8a:bb:48:bc:74:
44:32:ce:f8:bb:e4:a3:f5:f3:61:a7:fc:a5:a8:1c:65:0c:17:
d1:6e:3f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:30:50 2026 by rpki-client