
$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
File: 3K6HG3xct5vH7PZ5s7LTyVan2eM.mft (raw, json)
Hash identifier: 9efF+iec3k/kxE6gdxi73xpyYJl2br0ARt2K2IM/jBA=
Subject key identifier: B6:B7:7E:6D:79:7D:C4:D0:C9:F9:E4:19:A1:65:AF:FA:A8:72:41:70
Authority key identifier: DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
Certificate issuer: /CN=A91604AC/serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
Certificate serial: 072B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
Manifest number: 071D
Signing time: Mon 20 Apr 2026 21:53:17 +0000
Manifest this update: Mon 20 Apr 2026 21:53:16 +0000
Manifest next update: Mon 27 Apr 2026 21:53:16 +0000
Files and hashes: 1: 3K6HG3xct5vH7PZ5s7LTyVan2eM.crl (hash: S/cj6KXL7urhc8EFkjstfmv3WXhm35BARzd3vWIyYSE=)
2: 0081F3D6F22111EE8EEC070EC4F9AE02.roa (hash: gt5MzzOyMRjHAQJ1OB2Ov2agdEJbjl0iI4HuG5lS+Fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl
rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 21:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1835 (0x72b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91604AC, serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
Validity
Not Before: Apr 20 21:53:16 2026 GMT
Not After : Apr 27 21:53:16 2026 GMT
Subject: CN=69e6a04c-5ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e5:70:eb:20:44:a8:41:73:9b:73:68:ab:5a:
02:44:1f:f1:56:04:70:bd:4b:c4:23:12:64:fa:77:
fe:88:63:58:16:94:5e:ad:c0:df:52:90:00:97:8c:
63:b4:f4:85:0c:fd:d9:c4:5f:7b:06:f0:76:fe:25:
0e:48:a4:bc:73:6d:40:39:23:c0:48:96:4a:6e:b7:
dc:b0:3f:51:6e:c5:29:f6:37:23:4e:b1:ea:3d:35:
dc:a6:17:f1:ae:99:22:cb:6b:65:bb:95:79:56:77:
bb:ac:35:72:56:41:f7:93:4c:f4:b5:5a:cb:26:5a:
1d:e1:ab:66:ec:21:b2:9e:99:bc:8f:72:2a:32:47:
a7:7e:f0:17:1a:09:d3:12:47:5a:de:ff:25:ea:32:
98:ea:a3:c8:55:e5:a7:a6:e9:83:8b:54:8b:3e:40:
5d:b5:83:ee:c4:dd:e8:5f:64:30:20:45:6f:3d:53:
99:10:36:66:37:4d:41:d5:0c:34:a2:a1:81:25:67:
78:f5:a8:e9:e5:b9:2e:ee:d4:26:73:26:63:17:2c:
63:8c:80:ec:75:ee:5d:04:8e:69:c3:4e:fa:93:2e:
dc:4a:d7:cf:84:27:89:e1:80:1d:41:08:66:a0:1a:
9f:fb:cc:26:a8:5f:5a:5e:96:2b:d4:ac:c3:c7:e1:
9f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B7:7E:6D:79:7D:C4:D0:C9:F9:E4:19:A1:65:AF:FA:A8:72:41:70
X509v3 Authority Key Identifier:
keyid:DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:19:2d:7d:08:7b:1f:87:cc:d9:db:a1:5c:13:2e:28:23:fe:
4e:74:87:6f:b8:b1:9d:dc:30:75:79:5a:1b:c9:fd:ee:b2:ef:
c2:5f:53:cd:8e:a1:99:84:b6:f7:40:dc:ae:9b:7f:6a:0e:c2:
d3:a1:f5:d4:5a:b4:80:fe:d4:d9:db:8e:06:e6:93:d6:22:d1:
da:80:a6:46:a2:0c:2d:54:3d:b4:38:4d:3a:24:8e:4f:9f:e6:
4f:5b:28:4c:e2:1a:34:e7:0a:59:40:9b:0a:33:56:41:fb:9d:
5c:c5:05:57:3b:c4:aa:01:f9:bd:29:7b:77:4b:10:7f:d6:e0:
74:25:e2:09:1c:ff:b3:53:76:33:fb:44:ea:21:43:c5:fb:fc:
15:4a:7b:12:a5:69:a2:58:b6:bc:46:6f:dd:07:1d:9e:f4:7b:
8b:cd:5a:0d:ba:74:9a:14:0e:22:df:10:18:49:de:3e:00:13:
fb:2a:a4:60:cd:f1:28:58:87:aa:5b:69:ca:13:ed:03:e5:d2:
bb:6b:d5:33:ea:bb:fd:5a:12:6d:3f:e2:27:a6:e1:95:9e:9b:
6a:92:52:d8:ed:c3:ad:a1:47:33:58:12:d1:dc:17:ff:2b:16:
25:4e:7e:61:cb:3a:c6:c0:c5:5a:f4:79:ec:fe:d2:58:61:2f:
89:e4:35:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICByswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA0QUMxMTAvBgNVBAUTKERDQUU4NzFCN0M1Q0I3OUJDN0VDRjY3OUIzQjJEM0M5
NTZBN0Q5RTMwHhcNMjYwNDIwMjE1MzE2WhcNMjYwNDI3MjE1MzE2WjAYMRYwFAYD
VQQDEw02OWU2YTA0Yy01ZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi+Vw6yBEqEFzm3Noq1oCRB/xVgRwvUvEIxJk+nf+iGNYFpRercDfUpAAl4xj
tPSFDP3ZxF97BvB2/iUOSKS8c21AOSPASJZKbrfcsD9RbsUp9jcjTrHqPTXcphfx
rpkiy2tlu5V5Vne7rDVyVkH3k0z0tVrLJlod4atm7CGynpm8j3IqMkenfvAXGgnT
Ekda3v8l6jKY6qPIVeWnpumDi1SLPkBdtYPuxN3oX2QwIEVvPVOZEDZmN01B1Qw0
oqGBJWd49ajp5bku7tQmcyZjFyxjjIDsde5dBI5pw076ky7cStfPhCeJ4YAdQQhm
oBqf+8wmqF9aXpYr1KzDx+GfpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLa3fm15
fcTQyfnkGaFlr/qockFwMB8GA1UdIwQYMBaAFNyuhxt8XLebx+z2ebOy08lWp9nj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy80OTcyMDk5Njgx
NDUxMUVCQjJERDVENEJDNEY5QUUwMi8zSzZIRzN4Y3Q1dkg3UFo1czdMVHlWYW4y
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNLNkhHM3hjdDV2SDdQWjVzN0xUeVZhbjJlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDRBQy80OTcyMDk5NjgxNDUxMUVCQjJERDVENEJDNEY5QUUwMi8zSzZIRzN4Y3Q1
dkg3UFo1czdMVHlWYW4yZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACxktfQh7H4fM2duhXBMuKCP+TnSHb7ixndwwdXlaG8n97rLvwl9TzY6hmYS2
90Dcrpt/ag7C06H11Fq0gP7U2duOBuaT1iLR2oCmRqIMLVQ9tDhNOiSOT5/mT1so
TOIaNOcKWUCbCjNWQfudXMUFVzvEqgH5vSl7d0sQf9bgdCXiCRz/s1N2M/tE6iFD
xfv8FUp7EqVpoli2vEZv3QcdnvR7i81aDbp0mhQOIt8QGEnePgAT+yqkYM3xKFiH
qltpyhPtA+XSu2vVM+q7/VoSbT/iJ6bhlZ6bapJS2O3DraFHM1gS0dwX/ysWJU5+
Ycs6xsDFWvR57P7SWGEvieQ1CA==
-----END CERTIFICATE-----
Generated at Wed Apr 22 05:27:41 2026 by rpki-client