
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
File: n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft (raw, json)
Hash identifier: yG8S5cjTvE9AKlM3zb9C0LHcQRmM/RWm2lP49Bejb4w=
Subject key identifier: 22:47:9C:BC:42:2D:C5:E0:1E:D9:74:65:57:4D:62:57:4B:82:39:04
Authority key identifier: 9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7
Certificate issuer: /CN=A91F8282/serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
Manifest number: D4
Signing time: Fri 17 Apr 2026 06:27:22 +0000
Manifest this update: Fri 17 Apr 2026 06:27:21 +0000
Manifest next update: Fri 24 Apr 2026 06:27:21 +0000
Files and hashes: 1: n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl (hash: 8Ib8H+8mBgVVki/xu6vICjoawNo0hfF6Z+4vk5pvovA=)
2: 05EBB6CEFEF811EFB0C52572C4F9AE02.roa (hash: YgdZkpaRGf3qZu8ORhNwjKQyDofcMXRWEr4dow0fuZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl
rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:27:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8282, serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7
Validity
Not Before: Apr 17 06:27:21 2026 GMT
Not After : Apr 24 06:27:21 2026 GMT
Subject: CN=69e1d2ca-3b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:51:dd:d4:a2:dc:1d:20:63:98:24:11:d3:
eb:ec:68:12:db:5a:39:b0:12:8d:e4:ab:37:f1:15:
67:32:87:df:02:b8:ad:ad:cb:2a:5a:dc:a6:c4:ca:
c6:01:7c:04:db:a7:09:2d:88:70:98:c6:7f:7e:05:
58:ad:27:5f:38:94:1e:54:c2:49:09:cc:75:8d:d4:
3f:cc:f2:fb:6d:27:07:55:d9:4e:c2:c1:56:30:10:
77:4c:37:0d:69:37:e8:da:f3:e8:53:5d:87:d7:4c:
34:3b:b5:9c:c1:92:67:c7:bf:65:41:b9:05:09:48:
c1:23:51:34:1e:81:17:61:8d:86:54:bc:12:31:cc:
9f:0c:10:6c:3f:4f:e8:f2:56:9a:3d:40:d1:08:8f:
db:36:07:f0:fa:18:eb:54:43:04:4c:cc:a2:ee:45:
26:aa:48:a5:2b:cc:5b:ca:f1:f6:50:3f:fd:36:a9:
07:3a:5d:42:f5:e1:8b:c7:77:6d:4a:c0:c9:3c:19:
ce:0d:70:b4:01:8f:3d:8b:27:71:d0:d9:a3:3b:5e:
54:b6:49:0b:aa:56:14:21:2d:74:b2:96:f2:cd:6c:
38:31:97:1f:48:35:ab:91:3a:5d:b7:4a:01:ec:11:
b0:0a:87:41:36:69:a8:7a:65:d1:6e:69:e6:aa:98:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:47:9C:BC:42:2D:C5:E0:1E:D9:74:65:57:4D:62:57:4B:82:39:04
X509v3 Authority Key Identifier:
keyid:9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:c7:56:d8:e9:eb:90:4c:03:a7:1b:df:d2:eb:85:57:d6:8f:
06:5e:d0:58:e1:c6:10:80:99:b8:3b:ab:d6:65:d9:b1:a9:b4:
75:0e:8e:b7:95:fe:34:01:5f:f3:ea:29:52:8b:37:fc:a0:44:
43:87:f5:fc:04:c9:74:53:70:88:8b:52:d8:9e:f4:fb:dd:ef:
9c:36:0d:83:8b:59:ac:29:c3:6f:54:d8:e1:a5:0d:e9:5e:f0:
fe:ec:c1:ab:b3:ff:cd:53:1f:9c:c7:fc:2e:f0:26:1b:68:ac:
6c:9c:4b:4c:3f:55:d2:91:67:1d:68:cf:59:30:df:41:c7:ab:
af:5e:33:dd:af:6e:a5:b2:4a:92:1a:ef:2e:5e:13:4d:ce:47:
25:b6:51:52:d8:c5:27:e4:49:c9:e8:97:6d:00:f4:34:68:0c:
3b:e0:3f:9a:44:d9:8c:b6:35:f3:fd:3e:58:39:ce:d2:91:b4:
a9:5f:ec:e1:b1:24:9c:96:7f:b2:d1:07:13:9e:64:43:d4:0a:
70:06:59:b7:c9:ed:4f:35:1c:e4:52:b7:d0:1c:f3:97:27:a1:
b3:97:4b:d5:95:94:99:d5:e5:20:b4:fc:df:85:0f:5b:20:e1:
a0:10:ff:e5:f3:00:df:70:42:3c:bb:45:d8:34:21:2d:45:13:
37:87:20:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:02 2026 by rpki-client