
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
File: 3glSX1epVbpvLTKtIoMwQhUYLkU.mft (raw, json)
Hash identifier: iqeaacHyKLcykhovRzqcCs+pkivIBdge5kFiIvlogEk=
Subject key identifier: 71:58:BB:7D:35:73:27:EB:18:68:11:E7:E3:AE:8C:6B:D6:D6:E3:A7
Authority key identifier: DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45
Certificate issuer: /CN=A9119C32/serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
Certificate serial: 01F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
Manifest number: 01EB
Signing time: Sun 05 Apr 2026 02:51:49 +0000
Manifest this update: Sun 05 Apr 2026 02:51:48 +0000
Manifest next update: Sun 12 Apr 2026 02:51:48 +0000
Files and hashes: 1: 3glSX1epVbpvLTKtIoMwQhUYLkU.crl (hash: 42rkAfkdl3Hu3QUHzG0NKuozCbd05DYAY1uIWK1HITE=)
2: 5D79BDF8486C11EEB3C19A71C4F9AE02.roa (hash: z/CeXg1zE451kjdiV+L83Kbr1l7Vh3IeBEWeCzKi+60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl
rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119C32, serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
Validity
Not Before: Apr 5 02:51:48 2026 GMT
Not After : Apr 12 02:51:48 2026 GMT
Subject: CN=69d1ce45-527c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:9f:fe:3a:66:10:9c:33:06:80:6e:80:ac:
51:a1:68:45:40:e5:ef:bf:b5:af:38:0f:5d:8a:91:
0b:23:6e:74:0f:a1:25:cc:eb:34:b9:e8:97:e3:73:
88:b7:f7:f0:9a:e4:92:ae:a9:0a:c4:02:dc:c3:28:
38:e5:d6:39:40:97:99:72:fc:e7:fc:2a:43:12:3f:
dd:97:7b:4a:f2:66:cd:e0:d7:81:f6:5e:22:48:a1:
16:fa:8c:f9:8e:b9:26:a9:0b:28:9b:52:0b:3e:22:
b5:5f:05:f6:56:2f:3d:ba:1d:ef:a0:e6:99:0c:77:
43:ef:0c:95:37:23:45:17:5e:dc:4b:7a:f3:5e:e6:
6d:db:5d:b5:ca:a9:78:41:ba:b3:50:9c:1b:2e:67:
3a:48:43:a3:78:ce:2e:f5:3f:6d:93:21:f8:9b:f5:
98:6a:ed:24:10:0e:3b:44:1e:38:2f:7a:33:87:9d:
38:78:62:ab:2f:22:94:09:30:eb:c9:bc:6e:b5:01:
9c:a5:18:3b:e9:dd:37:6f:e3:f8:99:2e:25:c6:06:
a2:2c:eb:6d:a0:62:52:17:53:dc:63:a3:12:40:33:
56:e2:d9:52:89:9f:07:92:f4:0f:f5:33:8c:fe:ad:
e2:d0:7f:1c:35:da:ff:1c:25:18:34:5d:ec:26:db:
3e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:58:BB:7D:35:73:27:EB:18:68:11:E7:E3:AE:8C:6B:D6:D6:E3:A7
X509v3 Authority Key Identifier:
keyid:DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e5:8b:43:52:3d:26:35:7e:c2:bd:07:89:fc:81:8d:f0:e8:
37:50:a4:cc:fb:18:02:a6:ae:48:a6:bb:44:bc:f8:34:47:c5:
34:17:da:fa:2b:11:03:20:e8:22:73:c6:3c:42:8f:3e:a2:45:
ca:fe:ef:ea:6f:51:dc:2a:41:92:21:41:87:0b:92:17:41:b0:
7f:cd:dd:9c:e5:1d:02:65:b8:70:f3:7c:1f:39:56:67:09:b2:
3c:c6:81:be:0b:59:21:ac:2a:95:32:a5:5e:1e:1f:1f:de:d3:
29:49:2f:09:80:1e:7a:98:5c:02:7e:03:50:7a:86:6b:c0:be:
00:84:b7:cf:d4:97:47:25:7e:c9:3e:ea:ee:00:1a:16:95:b0:
46:bc:88:3a:ac:49:17:11:f4:ab:de:0a:c3:51:2d:1b:5a:49:
eb:76:d5:2f:d6:a2:32:e8:8a:05:36:3d:fe:37:8a:fc:60:29:
ae:7a:df:6d:d8:27:0d:0f:75:bc:a9:f0:75:05:60:ac:ce:ba:
65:36:22:61:43:33:11:1f:df:b3:10:b8:ea:9b:34:5b:5e:71:
a2:9e:09:c9:6b:76:e7:52:8e:3d:06:f5:ca:72:9e:31:8a:12:
ba:53:c1:f4:aa:34:df:7b:d0:f4:5e:e7:f4:91:0c:8f:84:c0:
1d:23:f0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:19 2026 by rpki-client