
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft
File: c3WC7E6P4530LA3CKbo30bazhlo.mft (raw, json)
Hash identifier: R3LEx3nXhfIlpnlweFXvM5CQq66nM1pGi/YXWmhTXO8=
Subject key identifier: 2D:FC:73:B7:E1:F5:4F:01:A1:96:AB:38:75:53:15:12:10:59:D1:AE
Authority key identifier: 73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A
Certificate issuer: /CN=A917F4A6/serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft
Manifest number: 94
Signing time: Sun 05 Apr 2026 06:59:29 +0000
Manifest this update: Sun 05 Apr 2026 06:59:29 +0000
Manifest next update: Sun 12 Apr 2026 06:59:29 +0000
Files and hashes: 1: c3WC7E6P4530LA3CKbo30bazhlo.crl (hash: MqwHuiR3R6kgegtB3WR6TovW/nXGeICkOqLYXNanXXs=)
2: 254F258E7ED011F083509E2BC4F9AE02.roa (hash: q70RPKxzbm6NVXCmryGNBnf7zGx3p9P/q7+H8CK0/2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl
rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:59:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F4A6, serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A
Validity
Not Before: Apr 5 06:59:29 2026 GMT
Not After : Apr 12 06:59:29 2026 GMT
Subject: CN=69d20851-fee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:b4:af:b1:25:92:1f:28:f7:8c:35:57:87:
7c:38:b7:7a:ae:5f:3d:aa:4a:1c:2a:a4:e2:09:51:
88:6b:7e:42:38:6d:dc:e0:ad:4a:4b:ef:ab:ed:29:
78:91:f0:23:21:dd:72:49:0a:ec:d3:cd:5f:ec:9a:
65:4f:f7:47:2b:f4:e5:90:98:cd:da:89:9c:77:aa:
39:d5:51:9e:18:8e:38:05:b2:ce:f3:77:0f:74:aa:
68:81:0c:59:4e:9f:07:fc:90:b6:b3:7d:26:4b:aa:
1b:0f:d3:76:5f:60:6f:a4:b3:b4:7b:1b:d7:3a:b6:
3c:5e:4a:e7:4d:ca:d0:ed:72:8d:15:18:29:4c:0a:
58:a2:dd:7a:bd:02:5c:14:64:e2:b6:23:8c:32:61:
13:b9:93:e7:ff:fc:d3:ab:6f:84:f4:32:6a:50:22:
8c:a7:f7:e8:27:a1:63:fb:d8:58:2d:4a:ac:d4:5e:
a5:4a:3d:bf:ea:88:23:ad:cd:4e:6c:94:c7:89:7c:
0e:7b:87:cb:1c:46:c0:93:ed:82:72:df:47:f9:e9:
02:f1:20:e6:84:35:e9:e6:38:3a:31:45:cf:5f:b8:
50:1a:90:fb:1c:55:46:43:fa:ea:31:14:f4:c7:95:
0a:24:d9:f0:6a:7d:d4:5d:0b:8e:b8:ef:0b:18:e0:
f2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FC:73:B7:E1:F5:4F:01:A1:96:AB:38:75:53:15:12:10:59:D1:AE
X509v3 Authority Key Identifier:
keyid:73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:12:82:98:79:0e:bd:43:20:fc:f4:87:18:11:52:82:ba:a8:
a4:62:26:6b:6b:30:c1:2b:51:ef:78:a2:e3:02:78:55:75:1c:
1c:85:17:de:4d:35:0f:5f:fd:30:9c:bd:78:46:a2:f7:7a:9e:
a2:69:73:fe:74:c2:3c:dd:21:ee:61:fb:da:28:e1:cf:ed:a0:
e6:2e:65:5b:3c:5b:79:7a:23:f5:15:fb:43:4d:a7:9e:8b:d7:
56:7f:a8:9d:c8:f2:05:a9:df:ee:7d:14:c8:ef:2b:1c:ae:3e:
36:a3:20:8a:16:47:82:87:ce:5e:94:3f:62:20:e2:a9:6c:e7:
c7:6a:8f:5a:d4:53:a9:3b:f8:37:e2:da:c3:34:ed:46:cf:43:
87:51:3d:6a:25:06:66:44:eb:bf:96:5f:95:16:2b:48:29:b6:
31:53:94:ef:9e:db:57:94:af:e6:62:16:70:4c:59:1e:ec:27:
88:16:2e:c9:ed:16:0d:ac:e4:cd:5a:29:83:c1:fe:43:3c:cd:
77:bf:d5:ef:19:70:f6:7a:31:72:7b:8c:a3:f4:53:8b:9e:f4:
08:27:3a:01:8b:80:94:fd:ce:f1:b2:e2:fc:86:34:af:70:db:
1d:8a:14:2d:a0:f3:01:cc:e1:ad:58:bd:f5:d4:b6:2a:fb:49:
b0:4a:33:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:51 2026 by rpki-client