
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
File: 3MvMmJOAkJntArcXgYQ2VBazHhw.mft (raw, json)
Hash identifier: MaKxmB3pM/wpmRep1FLEsB+22mTDCNt2EZxtcpcFHSQ=
Subject key identifier: 66:CB:61:A8:77:0D:8E:4E:AD:81:59:BA:D4:94:59:0F:9E:2B:7D:8C
Authority key identifier: DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C
Certificate issuer: /CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C
Certificate serial: 042C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
Manifest number: 0426
Signing time: Sun 05 Apr 2026 00:08:06 +0000
Manifest this update: Sun 05 Apr 2026 00:08:05 +0000
Manifest next update: Sun 12 Apr 2026 00:08:05 +0000
Files and hashes: 1: 3MvMmJOAkJntArcXgYQ2VBazHhw.crl (hash: GZcfXRMwPVC9vU9jMDh3vq223SlGJstyCoWCk6noKU8=)
2: 23F9CE72A41911ECBDBED829C4F9AE02.roa (hash: jDls2g86m7GV6UJnx5UHRHLT+1GVeljl8mbGfPYQmlg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl
rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:08:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1068 (0x42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE91, serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C
Validity
Not Before: Apr 5 00:08:05 2026 GMT
Not After : Apr 12 00:08:05 2026 GMT
Subject: CN=69d1a7e6-c952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:08:4a:8b:21:bd:d0:fd:49:7a:64:ae:75:03:
58:9b:be:ad:51:8b:d4:08:c2:ca:76:3e:89:54:1f:
d7:01:7c:2c:87:91:d2:c9:e3:ad:8b:9b:c1:2a:a5:
1e:5d:b9:33:a1:d8:ed:6d:8e:42:42:0a:f6:cc:2b:
9d:dc:b4:ca:a7:b3:4c:aa:f7:f9:1a:28:d6:ed:e3:
4a:33:d1:e2:59:7f:59:fc:c0:49:a1:af:ff:75:64:
c2:ab:8a:16:15:37:4f:46:6b:cb:aa:31:2f:35:f1:
0b:85:98:f9:d5:4c:d1:01:c9:ba:1d:61:f6:12:c2:
d2:d5:bc:32:84:58:c1:5f:17:a2:15:24:c8:a7:6c:
70:a0:b4:c3:0b:48:95:57:c0:2e:f2:ea:56:56:7e:
03:75:8a:26:d9:b7:31:93:d8:8e:af:5b:74:9d:9e:
fe:fd:ff:1c:89:f2:b2:d7:e1:33:d6:14:d2:71:28:
20:4f:df:94:af:bb:9e:55:4a:26:18:db:a9:ec:0d:
72:09:d8:a0:34:4d:67:c0:4a:22:0a:38:bd:e2:1b:
f4:ac:d7:06:eb:4d:d5:ab:0d:2a:d1:83:76:23:25:
10:7d:17:5d:3c:3a:5a:b5:a7:d0:0c:f3:6d:40:e7:
3b:09:39:ed:e3:68:2c:43:59:35:cd:19:3d:c8:e9:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CB:61:A8:77:0D:8E:4E:AD:81:59:BA:D4:94:59:0F:9E:2B:7D:8C
X509v3 Authority Key Identifier:
keyid:DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:4b:ee:26:22:60:e2:89:14:26:6b:c3:46:28:d9:4a:80:7d:
80:ac:99:00:c1:03:17:0a:2e:13:12:b2:4c:4b:7a:80:4a:9e:
bf:8f:e3:01:6c:26:b1:e1:36:db:65:f9:98:d7:df:50:24:66:
16:07:95:78:d3:c0:3c:7b:5c:7c:bb:98:89:4b:25:18:e3:98:
3a:93:a3:8d:e4:17:60:54:fc:c7:7e:dd:70:5f:c6:45:c3:d9:
92:e2:4e:75:6b:6e:51:c3:89:89:b9:46:cf:0b:0c:db:8f:7d:
c8:e2:1e:60:b1:94:d3:76:0b:a6:c8:5c:fe:82:bf:2f:97:a6:
48:b2:09:cb:9a:d3:9f:47:25:52:3e:bc:ed:80:19:04:3e:fb:
c0:57:e7:93:c6:fc:37:b1:5f:d3:cd:48:4e:9f:cb:02:f4:57:
e1:bf:e4:70:1d:bd:5f:2a:f7:91:4a:12:cd:e9:d7:a7:cb:4d:
84:4e:96:c2:88:db:27:59:57:9b:de:a0:e4:b6:78:96:32:06:
20:08:06:09:2d:db:7b:05:4d:f6:db:8e:9a:eb:ac:d5:a3:8e:
6b:c6:50:a9:f7:c1:e7:a1:aa:72:58:e1:60:ce:ac:58:65:2f:
11:7e:10:96:0c:d2:c1:ac:53:69:df:58:27:05:c0:61:79:10:
c1:52:6d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:03 2026 by rpki-client