
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
File: M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json)
Hash identifier: fW0wxfRGaw32M6pjFPjjvwjyP0RcqxT0eV48I/gwJFQ=
Subject key identifier: D3:25:34:71:1E:46:1D:1C:1A:6F:0C:6E:5C:D2:80:98:D8:8F:2F:CE
Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Certificate serial: 04BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
Manifest number: 049E
Signing time: Sat 04 Apr 2026 23:47:25 +0000
Manifest this update: Sat 04 Apr 2026 23:47:25 +0000
Manifest next update: Sat 11 Apr 2026 23:47:25 +0000
Files and hashes: 1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: cuMF+lyxPAyn+u6B8U2lKNlnbagu+K+dIfJuiDziR4w=)
2: BC58A5C66DD311F09E550D38C4F9AE02.roa (hash: M/opGFmlb9jaN3RmTRwWVxME38lrA5KzlqcKDnyMekw=)
3: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: mocm69lqZdjVVtWbDT8lrUYvlh6Uzdf4NnBQ902rsro=)
4: BBA03BF86DD311F09E550D38C4F9AE02.roa (hash: bzANKnbyeKHQq6L/luZgy8RCyHrFKy2/gJCau298tQs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl
rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:47:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1212 (0x4bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Validity
Not Before: Apr 4 23:47:25 2026 GMT
Not After : Apr 11 23:47:25 2026 GMT
Subject: CN=69d1a30d-e54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ff:5c:ea:fc:cb:46:d0:cd:0f:f1:4d:90:51:
47:2b:6d:da:f9:92:4e:9b:f7:9c:f9:54:09:25:c3:
32:f0:b7:f5:d7:2a:de:0c:06:a7:68:b5:63:3b:31:
7b:d4:5e:e8:e4:da:3c:f8:cf:73:9a:ed:8d:b8:52:
95:32:cc:0a:5f:f0:a1:e4:65:f2:d1:4e:5e:15:c2:
87:aa:3c:12:04:bc:e8:87:72:22:80:a8:1b:6e:4d:
9a:5c:bb:1a:88:54:73:da:73:0f:35:50:40:fd:0b:
48:cf:d6:9a:be:a4:12:67:2d:f5:13:7c:1e:cb:30:
92:bf:8a:4b:dd:87:ba:4a:17:c8:b3:57:5f:7c:73:
fe:26:d2:93:dc:77:09:b3:c9:f1:c8:81:ba:51:17:
5b:7c:32:4d:6e:d0:74:f1:78:e3:43:42:d8:42:0b:
b8:55:0d:c3:99:86:c5:91:a4:7b:64:a7:8a:41:0f:
68:a1:e6:b8:3b:77:0b:32:be:ff:6f:40:69:31:46:
d6:42:fc:f2:2f:8d:3d:40:e7:f2:2a:97:1a:61:78:
7e:1a:bc:45:1c:56:38:85:37:38:07:f6:4c:f3:4f:
cc:5c:21:85:12:ad:89:e2:e0:37:c0:ac:06:24:2d:
98:37:5d:b5:c2:28:46:b6:47:52:48:83:ee:64:0b:
66:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:25:34:71:1E:46:1D:1C:1A:6F:0C:6E:5C:D2:80:98:D8:8F:2F:CE
X509v3 Authority Key Identifier:
keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:d1:9b:bc:2c:50:17:74:21:5e:39:e4:3d:7d:f6:62:a6:d5:
66:42:09:0b:b3:86:06:fa:38:53:25:84:92:e6:48:cf:ea:cd:
ba:ed:84:ff:d7:e4:05:9a:79:97:5d:b8:8f:f1:c3:7f:1e:04:
6a:cb:ea:07:f8:1e:7b:a1:9c:f6:70:56:cb:9d:29:95:e8:1e:
dd:dd:be:e8:16:f9:6c:f6:01:88:ad:59:50:51:a1:0d:84:8d:
b8:10:f6:62:2c:d1:25:eb:82:ec:c7:42:7c:02:78:6d:ef:a3:
4d:58:bd:6a:33:d0:35:5e:16:8f:5a:8b:b5:f7:b7:ed:70:ae:
00:a5:04:68:88:d6:ac:f6:68:30:00:1e:2a:fc:21:12:05:23:
74:e2:6b:e4:26:67:ff:92:29:26:2a:28:46:58:82:4b:fa:4e:
3b:0f:c6:e5:cb:23:fe:55:ab:a7:fd:bb:2d:ad:c0:42:aa:bd:
0f:25:31:a8:22:b8:7c:e9:b7:94:3c:db:4e:48:32:16:0b:85:
43:06:26:25:36:6b:af:38:65:fb:81:3b:2a:1a:de:b7:73:86:
8c:e2:ef:06:b6:6d:94:68:e0:0f:3b:9e:3f:62:4a:a8:f5:ac:
3e:54:34:fb:8c:21:67:24:f3:fe:12:4c:61:c4:74:b7:bf:a1:
1c:85:c6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:14:35 2026 by rpki-client