
$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
File: 3VdGDwwSvgVGE6L0KWewfaVoe_A.mft (raw, json)
Hash identifier: re69GYRt3vuXVelR4XiarHPZ7KR5GylrtydaKq3aBMc=
Subject key identifier: C7:67:E1:C1:7A:98:7C:A2:35:4E:8E:45:44:4D:B5:6E:81:DB:64:5D
Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0
Certificate issuer: /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
Manifest number: 0121
Signing time: Fri 17 Apr 2026 05:24:40 +0000
Manifest this update: Fri 17 Apr 2026 05:24:39 +0000
Manifest next update: Fri 24 Apr 2026 05:24:39 +0000
Files and hashes: 1: 3VdGDwwSvgVGE6L0KWewfaVoe_A.crl (hash: ZVlTul7umqfw5nVl+530P57AL87MBZpLbc9lrXO9fjM=)
2: ABF1FAF2860211EF8D8AD011C4F9AE02.roa (hash: QzecNRiadvNS3uXz4puDDg8aeFgkZFgzMCT4KbxjYQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl
rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91566DC, serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
Validity
Not Before: Apr 17 05:24:39 2026 GMT
Not After : Apr 24 05:24:39 2026 GMT
Subject: CN=69e1c417-0225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9f:0a:d5:3b:ce:90:ad:3c:b5:47:d4:e1:68:
87:a1:0e:a9:f5:f1:38:50:78:a5:bd:77:8c:8b:16:
f1:cd:46:35:a7:5b:c7:30:a9:c1:95:5a:07:81:2f:
96:94:19:40:27:0d:f3:15:79:ef:2b:5b:d3:ac:8b:
38:e1:95:4a:8d:0e:cf:be:18:77:a7:90:80:06:b3:
83:6b:b2:2b:02:4f:52:ec:dd:f5:ba:14:2e:16:9d:
7d:88:eb:71:e2:99:47:db:5d:2e:7d:d6:ac:54:fb:
9a:0f:e4:0a:77:25:a8:b1:ac:ee:40:e8:bf:c0:07:
98:c3:d7:46:7a:c6:52:db:b6:cb:d1:86:4b:66:1a:
37:72:e1:f4:ee:1a:4d:9e:bd:2e:ec:a3:24:74:26:
1c:4e:dc:4f:5a:28:c0:49:68:0e:15:33:80:0b:3d:
ee:70:ec:5b:03:13:84:a2:56:21:ef:38:61:07:02:
32:e9:15:39:9b:63:88:bb:38:8b:cc:d9:da:5d:95:
3d:23:ac:3a:1d:7a:ff:e1:58:b9:6d:0a:b3:7d:7f:
b9:98:ee:2d:ea:41:d6:d7:9c:c4:ca:24:94:36:b8:
f8:1f:4a:39:4f:1c:6c:e5:88:e6:93:04:7e:f7:7b:
f4:b4:2d:2d:40:f3:30:6a:18:79:06:9f:94:9c:06:
0c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:67:E1:C1:7A:98:7C:A2:35:4E:8E:45:44:4D:B5:6E:81:DB:64:5D
X509v3 Authority Key Identifier:
keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:78:40:b6:46:1d:53:0c:46:fa:40:7a:2c:1a:ca:cb:5a:d8:
ac:6f:fb:80:2d:70:9f:d3:c9:6e:e7:3d:eb:25:1a:15:8c:73:
80:8a:86:e9:13:51:aa:7d:d4:76:e9:9e:b8:0b:4f:9b:6f:d4:
93:7f:46:08:87:42:49:62:86:65:41:76:5f:b4:48:47:22:cf:
d5:5e:e0:15:80:c6:b1:f1:b7:73:df:23:03:df:19:65:f4:2d:
d8:4b:63:e2:0f:10:50:95:be:25:3f:1a:d2:79:23:cf:b8:9d:
58:86:b0:2c:6d:49:67:f7:b8:4f:3f:4e:35:a8:e9:0f:95:42:
be:d5:a8:b4:f3:e2:ec:92:12:de:38:97:18:fb:c1:50:ac:83:
26:04:35:1d:08:e9:b2:77:0e:0c:a8:d6:75:43:58:7d:3b:64:
83:4c:01:84:3e:3d:25:89:21:aa:31:db:e0:ad:4e:9f:7b:cc:
89:06:b2:e5:7b:55:a7:4a:bc:f7:a0:64:b3:6d:1f:da:7f:34:
20:8f:1a:cf:a3:ac:9e:4a:b1:81:42:fd:b7:5e:44:1b:3f:d1:
3c:7c:e3:7f:89:cb:64:b9:03:cb:78:4f:be:3c:17:9e:25:6c:
ba:70:d2:8f:dc:83:b0:92:61:97:9c:c5:4b:66:de:95:b4:01:
2b:bb:c3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:23:54 2026 by rpki-client