
$ rpki-client -vvf rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
File: pi3nVqmxabvP97VW1DMAlV1A4yA.mft (raw, json)
Hash identifier: ozTkrShkfUnZ3953+1icjwqKOhzkSkHDeRnfTcLgLMI=
Subject key identifier: 3D:D2:BA:7E:9E:18:6C:A2:1A:45:2A:52:A0:D7:F4:71:DC:32:49:6B
Authority key identifier: A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20
Certificate issuer: /CN=A91104BD/serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320
Certificate serial: 0C03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
Manifest number: 0BFA
Signing time: Tue 02 Jun 2026 18:51:35 +0000
Manifest this update: Tue 02 Jun 2026 18:51:34 +0000
Manifest next update: Tue 09 Jun 2026 18:51:34 +0000
Files and hashes: 1: pi3nVqmxabvP97VW1DMAlV1A4yA.crl (hash: je2O2s1XEa4Oi+/wvAq57gEEGLUFMbL3buCMGXR2Nto=)
2: D326CC30384411EA9D540B58C4F9AE02.roa (hash: miF3Bd+XSLHucz0FC/5HkJ/vce5TslwDpsNS9Q4tZB4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl
rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3075 (0xc03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91104BD, serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320
Validity
Not Before: Jun 2 18:51:34 2026 GMT
Not After : Jun 9 18:51:34 2026 GMT
Subject: CN=6a1f2636-941d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:ca:bb:1a:80:20:ad:02:f9:4b:8b:10:1b:
b1:41:4e:6f:2d:60:95:05:e8:a4:00:90:e4:ad:72:
e0:b5:e9:a1:91:66:12:47:07:8a:03:18:56:7a:85:
0d:09:6c:7f:ba:24:85:b9:e5:7a:b4:7c:a3:bd:46:
59:76:e0:a8:cf:99:16:8f:c7:6d:e9:56:b4:49:a4:
db:35:ab:4b:5f:e4:3a:c4:3b:5f:c6:24:30:81:3b:
32:38:4d:a9:69:d9:0d:70:b7:76:58:95:eb:3c:b2:
ff:96:68:dd:bb:ec:83:76:5b:7a:c0:0e:ba:cc:11:
0d:98:17:99:fa:b4:71:2e:d1:85:02:fb:f9:99:c1:
5d:89:b1:1d:07:a5:60:a5:bc:aa:c8:7d:73:68:be:
81:7c:c5:86:e9:c3:5c:0a:58:7b:88:b3:fe:fb:68:
c9:ef:e3:18:60:27:bf:e7:f2:47:51:0b:0e:82:58:
ac:72:2d:5c:47:57:99:08:fd:90:26:72:0b:88:77:
43:4d:aa:47:1e:ec:88:2b:bf:ce:06:fb:33:43:32:
8e:c4:e4:0c:7d:ef:c7:53:43:0c:ad:7c:19:7d:5e:
fb:cb:26:5e:2f:8a:98:c7:17:36:31:10:7d:08:e9:
5f:19:26:2b:c5:5f:cb:5a:d7:bc:56:c3:0d:c4:4b:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D2:BA:7E:9E:18:6C:A2:1A:45:2A:52:A0:D7:F4:71:DC:32:49:6B
X509v3 Authority Key Identifier:
keyid:A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:7c:3d:16:f6:ae:f5:40:63:3d:fa:ee:ed:78:5e:a4:fb:44:
85:4b:8b:35:a8:36:d6:1d:92:68:44:8f:44:66:78:db:be:7f:
4c:ce:ed:18:26:86:b2:d7:0d:de:1c:ae:26:d0:99:b4:69:88:
ae:ed:b2:5c:38:f6:83:1d:3f:c5:dc:e8:f0:de:e0:8c:07:9a:
92:ed:fd:fc:d3:d9:21:bb:06:51:ed:84:f0:46:5b:0e:ba:87:
18:b0:29:3f:53:64:c8:c1:5b:10:bf:04:2d:ce:95:82:6f:c8:
f8:f2:13:46:bb:f5:a3:cb:f5:b2:31:7e:cb:51:4b:3e:22:d4:
19:b4:1c:7b:33:76:16:a8:79:54:bd:e6:db:2c:90:f9:04:a1:
c2:b8:da:f4:00:13:7b:9b:d6:12:0c:f4:29:e4:b3:1b:71:b3:
99:ac:72:02:fe:80:62:e9:e6:b0:af:9d:7b:1f:2c:2e:b6:5f:
2d:c8:5d:97:ab:5e:31:74:f4:f4:3f:c8:91:f8:8d:5e:8f:d8:
e1:e4:2d:0a:25:eb:a9:96:cc:ed:89:c6:ef:3e:a7:22:53:92:
a7:fe:95:8c:66:53:53:56:ff:66:46:d6:2c:f3:e1:bd:08:f6:
fa:e4:02:7d:94:00:4b:ac:49:b6:88:23:05:f8:89:af:9d:7a:
4a:36:8f:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA0QkQxMTAvBgNVBAUTKEE2MkRFNzU2QTlCMTY5QkJDRkY3QjU1NkQ0MzMwMDk1
NUQ0MEUzMjAwHhcNMjYwNjAyMTg1MTM0WhcNMjYwNjA5MTg1MTM0WjAYMRYwFAYD
VQQDEw02YTFmMjYzNi05NDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmP3KuxqAIK0C+UuLEBuxQU5vLWCVBeikAJDkrXLgtemhkWYSRweKAxhWeoUN
CWx/uiSFueV6tHyjvUZZduCoz5kWj8dt6Va0SaTbNatLX+Q6xDtfxiQwgTsyOE2p
adkNcLd2WJXrPLL/lmjdu+yDdlt6wA66zBENmBeZ+rRxLtGFAvv5mcFdibEdB6Vg
pbyqyH1zaL6BfMWG6cNcClh7iLP++2jJ7+MYYCe/5/JHUQsOglisci1cR1eZCP2Q
JnILiHdDTapHHuyIK7/OBvszQzKOxOQMfe/HU0MMrXwZfV77yyZeL4qYxxc2MRB9
COlfGSYrxV/LWte8VsMNxEsqCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD3Sun6e
GGyiGkUqUqDX9HHcMklrMB8GA1UdIwQYMBaAFKYt51apsWm7z/e1VtQzAJVdQOMg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDRCRC80MzczRDUwQzM4
NDMxMUVBQTYxOTJFNTNDNEY5QUUwMi9waTNuVnFteGFidlA5N1ZXMURNQWxWMUE0
eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BpM25WcW14YWJ2UDk3VlcxRE1BbFYxQTR5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDRCRC80MzczRDUwQzM4NDMxMUVBQTYxOTJFNTNDNEY5QUUwMi9waTNuVnFteGFi
dlA5N1ZXMURNQWxWMUE0eUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkHw9Fvau9UBjPfru7XhepPtEhUuLNag21h2SaESPRGZ4275/TM7tGCaGstcN
3hyuJtCZtGmIru2yXDj2gx0/xdzo8N7gjAeaku39/NPZIbsGUe2E8EZbDrqHGLAp
P1NkyMFbEL8ELc6Vgm/I+PITRrv1o8v1sjF+y1FLPiLUGbQcezN2Fqh5VL3m2yyQ
+QShwrja9AATe5vWEgz0KeSzG3GzmaxyAv6AYunmsK+dex8sLrZfLchdl6teMXT0
9D/IkfiNXo/Y4eQtCiXrqZbM7YnG7z6nIlOSp/6VjGZTU1b/ZkbWLPPhvQj2+uQC
fZQAS6xJtogjBfiJr516SjaP6Q==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:41:36 2026 by rpki-client