
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
File: 3HxGdMlvt2fql8B49oDvV07eu78.mft (raw, json)
Hash identifier: ye8fb+FHRAQDlpGEHwCBf/fLL48tEMumVTTlFEYqOe4=
Subject key identifier: F9:EA:87:C5:E7:34:27:67:BC:7D:61:D2:80:3E:6F:55:8B:40:F5:20
Authority key identifier: DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF
Certificate issuer: /CN=A917CD31/serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF
Certificate serial: 070F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
Manifest number: 0705
Signing time: Sat 04 Apr 2026 21:47:33 +0000
Manifest this update: Sat 04 Apr 2026 21:47:32 +0000
Manifest next update: Sat 11 Apr 2026 21:47:32 +0000
Files and hashes: 1: 3HxGdMlvt2fql8B49oDvV07eu78.crl (hash: nZsJ02SYbS2TRgh2V96ZXNyTO7uic9h004iNmXgTPmY=)
2: A88A17FA823C11EBB35EF50FC4F9AE02.roa (hash: 7b7X7lAmpe4VIztKAFHWhrlQ0MJNaUA4ExxoVQIfMEA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl
rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:47:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1807 (0x70f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CD31, serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF
Validity
Not Before: Apr 4 21:47:32 2026 GMT
Not After : Apr 11 21:47:32 2026 GMT
Subject: CN=69d186f4-997d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:59:d4:f6:58:4f:68:1c:bb:f5:79:e6:19:
eb:7e:7d:fc:fa:0c:44:4a:f6:19:19:07:ba:cc:a1:
37:e1:01:7b:f7:72:d9:d2:83:ac:c2:40:14:78:6e:
a5:a5:ca:73:41:e6:c9:5f:fa:3b:73:84:dd:25:97:
cb:49:4a:c9:a0:64:95:ac:e3:32:87:de:f7:c2:df:
40:31:3a:e4:af:f2:fe:99:b0:ef:44:18:69:74:11:
fc:45:1e:63:49:6f:1a:ba:37:6b:a2:fe:77:4d:ab:
ba:ea:83:5e:2f:65:43:38:dc:36:b1:0b:11:55:f7:
05:d6:2c:9a:8f:24:22:b6:b1:ee:c6:d2:12:2e:7a:
ba:29:77:58:29:49:cc:a5:76:3a:87:72:9a:c8:61:
60:07:3a:a0:9b:e9:15:fe:c2:c8:05:2f:70:b8:05:
f5:ba:09:90:ce:95:65:c2:32:46:aa:02:b7:42:c1:
c0:eb:c7:9d:31:17:71:38:1d:f2:04:59:72:bb:43:
08:b8:a1:7f:22:0d:fb:83:91:66:01:56:9e:4f:85:
d8:6b:05:98:76:65:6e:90:e7:a9:e7:c0:57:23:68:
c8:e9:ce:34:87:a1:6b:db:15:d6:70:5a:d7:af:0e:
16:93:8d:f1:93:bf:1a:5f:3e:8b:66:80:d2:73:e4:
1a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EA:87:C5:E7:34:27:67:BC:7D:61:D2:80:3E:6F:55:8B:40:F5:20
X509v3 Authority Key Identifier:
keyid:DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:65:d8:91:99:fc:ed:66:d1:e6:ef:b3:d4:8a:d9:18:cc:4f:
76:67:45:ac:41:81:fa:d9:fc:ed:c5:95:58:88:d9:d2:41:09:
e3:66:16:58:19:57:f7:54:51:34:18:50:c2:79:26:f3:7d:1f:
52:b7:f4:86:a2:5e:df:1b:d9:d3:03:32:64:8c:96:92:95:d9:
f4:ca:8e:6e:33:fa:51:1e:c6:2a:73:57:6d:6f:29:0e:db:ac:
7e:a2:53:ee:22:f2:ae:70:07:3d:2a:97:51:b5:2d:74:f3:ba:
2d:91:ab:68:3b:7f:da:fc:f4:68:33:77:80:d7:83:63:52:56:
4c:9e:3c:01:81:36:c0:24:7e:f7:cc:42:60:a3:b4:9f:ff:35:
83:a8:70:2c:27:8c:c9:1b:65:82:59:ad:03:9b:64:5d:56:2a:
89:a3:72:44:58:dd:2b:51:5d:cd:27:5b:62:1e:eb:d4:d6:36:
b2:f4:e6:2a:6d:c7:67:3b:b1:d4:d7:98:23:d8:9e:df:b7:ca:
88:8c:7b:53:4f:65:23:ad:e6:ea:44:c1:b1:e8:55:17:f7:43:
d6:de:00:bd:e0:26:e5:88:2c:11:7a:e0:2f:2c:77:65:d0:29:
ef:5f:53:69:74:c7:ba:a3:c0:3d:8d:2f:64:e7:c5:1b:66:88:
2c:0f:63:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:01 2026 by rpki-client