
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft
File: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft (raw, json)
Hash identifier: pp6MznGRSJonTQZyidtmV5tM28LZRpovKUp7EadCRSA=
Subject key identifier: A2:75:17:C9:3B:18:DE:78:1F:99:28:E9:FD:F7:51:E5:DB:1E:C6:C7
Authority key identifier: DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F
Certificate issuer: /CN=A917AFE7/serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F
Certificate serial: 056E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft
Manifest number: 0565
Signing time: Sat 04 Apr 2026 23:08:53 +0000
Manifest this update: Sat 04 Apr 2026 23:08:53 +0000
Manifest next update: Sat 11 Apr 2026 23:08:53 +0000
Files and hashes: 1: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl (hash: FQ2q9aO2CO8b7QGxSu1trQZo6UJxVLCc4TYVEPZslZU=)
2: D3D1604C2B6711EC8CD1C61FC4F9AE02.roa (hash: 5wECY0S1TItQf52Puzm7/lHfnEoyS0N/i319+RZPTPk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl
rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1390 (0x56e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AFE7, serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F
Validity
Not Before: Apr 4 23:08:53 2026 GMT
Not After : Apr 11 23:08:53 2026 GMT
Subject: CN=69d19a05-6b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:70:79:52:fa:b8:99:fd:71:db:1b:0f:a6:
38:f2:5a:99:1c:35:a1:6f:06:0b:dd:dc:15:ea:33:
4c:e2:23:4d:24:e7:80:44:5c:31:85:39:d1:33:89:
4e:7a:f1:78:fa:c0:23:c8:ae:eb:1d:38:5a:a9:94:
7d:87:02:f7:b8:f9:a8:57:ec:c9:ea:35:6e:f6:98:
2f:bc:df:55:4d:03:2e:d8:25:ce:13:23:fd:62:1a:
50:32:a2:01:e6:35:d0:fd:58:a9:44:c2:5e:17:61:
1e:2b:8e:41:a5:a6:b2:24:d1:61:2e:1d:ce:77:d4:
65:cb:22:9e:87:37:58:3e:c5:e9:94:5f:6f:d1:35:
80:09:e5:8a:9e:92:1b:6d:b4:38:a4:e5:67:88:09:
4b:6e:2f:cb:99:f8:e5:e8:0e:fd:c5:74:2a:31:ec:
30:d6:9a:67:a4:ab:4b:e7:b4:82:a6:68:fe:c8:a7:
27:eb:f8:da:44:53:64:c1:2b:da:c4:25:fa:fb:50:
b7:97:3b:ed:5a:21:d2:86:a7:ee:2e:32:26:c6:8a:
b9:4c:46:5f:a9:5f:ec:f0:ce:c8:81:16:7d:25:8e:
3d:f0:f5:bc:d6:44:a7:d4:c3:98:67:6e:41:84:2c:
4b:73:f5:9e:ac:97:18:b6:e3:ef:79:43:d9:36:27:
43:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:75:17:C9:3B:18:DE:78:1F:99:28:E9:FD:F7:51:E5:DB:1E:C6:C7
X509v3 Authority Key Identifier:
keyid:DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:90:43:38:92:48:a3:f4:5e:3d:dd:cc:ee:c4:70:87:5d:58:
42:89:7d:fd:cb:20:e5:e3:09:2d:1f:eb:94:37:13:70:73:8c:
9d:15:ca:ed:c9:26:78:bf:47:a8:33:ee:37:b6:af:b8:12:dc:
af:86:7c:87:54:1b:90:c4:96:ae:63:c1:1e:85:46:e2:08:6d:
05:bc:be:6c:56:b6:34:08:fb:ed:5f:78:c5:4e:3b:c8:7a:31:
71:70:11:ab:db:af:6f:eb:eb:40:c7:59:b6:a7:b1:2a:32:0c:
f9:73:d9:69:ca:97:dc:4f:d5:ba:a0:86:24:bd:11:6d:84:7a:
50:ab:1c:68:09:9d:94:50:fe:bc:dc:e5:ab:32:93:b1:61:3c:
2a:84:56:9d:57:d5:f2:1f:ac:3a:04:a6:c3:a6:7b:5f:48:e3:
5c:da:86:3f:38:13:ec:92:b4:58:33:b8:51:f6:db:7e:e8:c5:
15:5d:c7:ed:81:bb:df:5b:72:e2:01:9a:02:dd:1b:e1:28:aa:
08:42:e0:81:17:7c:d0:12:c3:68:47:07:50:fa:6e:83:2b:63:
5c:38:83:a6:34:ea:cc:87:59:43:d7:ff:fb:86:08:29:45:d0:
a8:09:f9:ed:62:f3:8b:a4:43:ec:06:83:9d:08:bc:cf:bb:35:
dd:3c:60:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0FGRTcxMTAvBgNVBAUTKERDQzA3QTlEOEZGRTM3OEREREFGM0NEMEU0MUE5RUY2
RkREMzE0OEYwHhcNMjYwNDA0MjMwODUzWhcNMjYwNDExMjMwODUzWjAYMRYwFAYD
VQQDEw02OWQxOWEwNS02Yjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx9ZweVL6uJn9cdsbD6Y48lqZHDWhbwYL3dwV6jNM4iNNJOeARFwxhTnRM4lO
evF4+sAjyK7rHThaqZR9hwL3uPmoV+zJ6jVu9pgvvN9VTQMu2CXOEyP9YhpQMqIB
5jXQ/VipRMJeF2EeK45BpaayJNFhLh3Od9RlyyKehzdYPsXplF9v0TWACeWKnpIb
bbQ4pOVniAlLbi/Lmfjl6A79xXQqMeww1ppnpKtL57SCpmj+yKcn6/jaRFNkwSva
xCX6+1C3lzvtWiHShqfuLjImxoq5TEZfqV/s8M7IgRZ9JY498PW81kSn1MOYZ25B
hCxLc/WerJcYtuPveUPZNidDBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKJ1F8k7
GN54H5ko6f33UeXbHsbHMB8GA1UdIwQYMBaAFNzAep2P/jeN3a880OQanvb90xSP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUZFNy9GOEI2NTM3NDI5
MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40M2RyenpRNUJxZTl2M1RG
STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNNQjZuWV8tTjQzZHJ6elE1QnFlOXYzVEZJOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QUZFNy9GOEI2NTM3NDI5MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40
M2RyenpRNUJxZTl2M1RGSTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn5BDOJJIo/RePd3M7sRwh11YQol9/csg5eMJLR/rlDcTcHOMnRXK7ckmeL9H
qDPuN7avuBLcr4Z8h1QbkMSWrmPBHoVG4ghtBby+bFa2NAj77V94xU47yHoxcXAR
q9uvb+vrQMdZtqexKjIM+XPZacqX3E/VuqCGJL0RbYR6UKscaAmdlFD+vNzlqzKT
sWE8KoRWnVfV8h+sOgSmw6Z7X0jjXNqGPzgT7JK0WDO4UfbbfujFFV3H7YG731ty
4gGaAt0b4SiqCELggRd80BLDaEcHUPpugytjXDiDpjTqzIdZQ9f/+4YIKUXQqAn5
7WLzi6RD7AaDnQi8z7s13TxgMg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:06 2026 by rpki-client