
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
File: b3fBnxHTKqqkLiaRb3SC77j5ehw.mft (raw, json)
Hash identifier: xvXUD9bEuQ+WQYme273VEAb4BmEdO1u//zonE1LaYC4=
Subject key identifier: 2A:D8:E2:62:50:11:46:2F:7C:F4:05:EC:95:4A:69:B6:51:A4:49:88
Authority key identifier: 6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C
Certificate issuer: /CN=A913D125/serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
Manifest number: DE
Signing time: Tue 03 Mar 2026 06:11:01 +0000
Manifest this update: Tue 03 Mar 2026 06:11:01 +0000
Manifest next update: Tue 10 Mar 2026 06:11:01 +0000
Files and hashes: 1: b3fBnxHTKqqkLiaRb3SC77j5ehw.crl (hash: dJFdA2Rp6VNLbVjvCke//y/GsbSBlkzf0nDev8jHkEo=)
2: 62743016CC1111EFA5744A6FC4F9AE02.roa (hash: hlc/zBoAtbTj6NsgQPISupfKKjQQ309kzeQx+JZUlfI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl
rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:11:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D125, serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
Validity
Not Before: Mar 3 06:11:01 2026 GMT
Not After : Mar 10 06:11:01 2026 GMT
Subject: CN=69a67b75-ca8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:7a:f1:8b:f8:c9:d6:50:1e:39:57:a9:64:
0b:4b:4e:27:27:63:df:33:72:5c:38:dc:0c:9c:f4:
69:0f:1d:25:c6:e5:6c:fb:75:9d:76:74:b2:03:e5:
ef:c6:cb:b2:8e:1d:3e:b4:2f:93:bc:30:33:ce:32:
d8:f5:7e:3c:c1:26:43:24:46:0e:34:a7:32:ae:ce:
bd:bf:df:a2:66:b0:fe:80:0a:0a:9c:71:a3:64:89:
8a:0c:1e:01:cf:22:2b:ae:aa:b6:5f:19:4c:fe:33:
ae:9c:2a:79:07:91:4f:6f:ab:f6:0f:7b:1e:24:84:
31:c5:69:bf:0b:33:6a:22:11:92:90:0f:73:6e:a8:
99:14:18:60:f5:ad:9e:b0:a7:4e:58:f2:a1:f3:ef:
f7:8a:98:3d:2e:f8:27:9f:86:6b:15:be:5a:0c:40:
f8:83:64:0a:bd:41:88:26:7f:94:98:90:0c:e6:4c:
1a:cc:f7:5c:d6:c9:d2:19:cc:4e:e9:9a:ac:51:07:
ba:3e:bb:e4:30:ac:a5:29:fe:55:1c:1e:df:51:48:
fe:74:93:ad:e0:51:48:79:df:e3:c8:f8:4f:50:69:
ab:34:56:3e:b9:ae:0c:36:ed:6e:16:d0:d6:71:5e:
64:9f:01:eb:de:f9:8d:49:ee:b0:4a:a7:65:db:6f:
13:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D8:E2:62:50:11:46:2F:7C:F4:05:EC:95:4A:69:B6:51:A4:49:88
X509v3 Authority Key Identifier:
keyid:6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b8:ad:6e:2f:dd:5d:db:8f:d9:21:19:ed:fd:1e:3d:6f:6c:
87:b4:f5:01:21:3e:08:06:8b:7c:f1:3c:90:a1:31:ef:7e:20:
b9:2c:0a:ca:fe:91:30:dc:cd:57:69:d8:7f:1e:f1:57:22:91:
6b:e9:b3:52:c4:ea:bc:ab:f9:e4:ab:57:82:1d:a3:c9:a6:02:
83:11:f5:dc:ef:41:b9:01:d3:84:23:b1:ac:0b:a3:42:16:70:
77:e0:d1:a9:53:5d:7c:1c:b4:44:07:65:a5:6e:4b:df:f7:52:
65:89:8b:8b:00:39:7a:f4:28:88:25:04:94:b1:47:03:8d:56:
0c:00:79:1b:e9:5a:b3:4b:a0:d6:7c:15:77:72:b1:53:88:65:
7f:39:9e:b9:07:7b:46:f8:50:0d:43:91:b0:e1:49:4c:1f:c5:
69:5e:29:c9:32:c2:71:8c:11:3a:b0:53:3d:df:46:1a:53:b5:
91:d4:88:34:f5:e0:47:23:58:90:5e:2a:70:0e:44:ef:b6:2e:
c7:71:f6:b4:8c:e0:84:c1:0f:30:7c:54:17:1e:6d:a7:34:c2:
53:ce:75:a3:5a:69:bb:5a:0d:2b:ef:64:48:4b:89:57:f2:ce:
fd:fd:79:84:ff:37:58:fb:2b:b4:a9:53:f8:77:82:ca:4a:54:
53:6d:8b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:37:20 2026 by rpki-client