
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
File: 3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft (raw, json)
Hash identifier: 0kzf6Ag+QQj3HhgNEPkR6vrMww/fen1UZb3jAVdS0T0=
Subject key identifier: 29:21:8D:E2:7F:98:AE:24:1B:53:4E:7B:B4:56:A8:78:65:ED:B8:0A
Authority key identifier: DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0
Certificate issuer: /CN=A91A5201/serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
Manifest number: A8
Signing time: Wed 11 Mar 2026 06:01:41 +0000
Manifest this update: Wed 11 Mar 2026 06:01:40 +0000
Manifest next update: Wed 18 Mar 2026 06:01:40 +0000
Files and hashes: 1: 3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl (hash: Qo0bvOIBkvgXJ6COWeA0Bctqdw8AiPRciv92ClrWJQY=)
2: D0CA23541BC611F09FDAC047C4F9AE02.roa (hash: 0ABnHn0tYQYE8SzbXPlx35zELqu/1VmLMO+AifbeoVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl
rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 06:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5201, serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
Validity
Not Before: Mar 11 06:01:40 2026 GMT
Not After : Mar 18 06:01:40 2026 GMT
Subject: CN=69b10544-fb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3a:9d:8a:2a:cb:05:9a:05:88:d6:86:4e:4e:
73:1e:c9:6f:16:91:11:9f:f6:c6:c7:f0:25:e8:3e:
9f:cd:bd:09:82:4c:5a:77:29:03:50:68:20:1d:83:
18:56:62:78:39:eb:ff:9a:66:97:79:af:ee:f1:f7:
b3:32:3f:f3:cb:a8:36:a7:fe:c2:7b:09:3a:76:ca:
cd:a3:43:10:a9:f2:c7:0e:9d:1b:06:7d:74:f7:1a:
c3:3a:1f:f3:dc:8b:00:fb:88:c6:79:f5:61:3c:7c:
fd:c0:f6:59:08:0c:db:9d:d8:f9:13:77:39:b9:7a:
76:b5:e3:54:33:a4:6b:e6:63:04:08:a9:4d:f3:59:
6d:e5:4c:67:ad:41:66:f9:6b:fe:f1:19:d7:3b:b3:
b7:28:ee:ab:7f:d9:90:46:6e:39:10:f9:01:ba:e7:
9e:5b:18:4d:a4:18:3e:c1:eb:fa:90:c9:40:2f:f1:
fa:4f:8e:5f:b7:d9:bf:ce:2e:5a:f6:2c:3b:88:ec:
59:73:52:62:96:0d:cf:c0:4e:c1:21:fa:5f:07:85:
8c:04:81:ed:fe:c2:bb:6a:ce:63:e3:b9:22:65:f5:
4e:bd:fd:20:8a:e5:19:67:4c:b1:80:73:7d:d3:21:
87:02:5d:a5:2c:d1:dd:fa:b9:ff:36:41:82:08:6e:
4b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:21:8D:E2:7F:98:AE:24:1B:53:4E:7B:B4:56:A8:78:65:ED:B8:0A
X509v3 Authority Key Identifier:
keyid:DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:0a:89:55:53:ca:0d:a7:c0:f6:2c:ca:83:ff:d4:8b:a9:46:
31:81:34:ff:bf:dc:94:27:3f:ca:de:dd:48:c0:bd:6c:7f:d3:
e9:59:49:35:fc:91:da:aa:7d:14:88:e9:17:29:62:ae:9f:e5:
a4:c5:08:8f:de:da:17:b6:38:a7:1b:ad:44:0b:92:eb:18:e6:
d8:7e:e6:8a:5b:5e:8b:78:c8:db:e4:50:61:d7:19:2a:57:5e:
bb:38:c3:91:5a:9d:d5:b5:8c:6a:9c:ff:4d:4b:2d:70:74:1f:
d2:14:d9:6e:9a:f4:cb:7f:d7:3c:7b:43:c6:59:af:6b:39:59:
09:dc:df:cf:47:50:7f:6f:78:cd:d3:e7:1f:83:8c:09:0c:f2:
8e:27:2e:5d:4d:d3:05:f3:ad:d4:fc:bd:b4:5a:8f:ad:99:0f:
4b:c9:53:7c:70:d6:62:bd:00:7a:b7:7c:4f:c3:71:93:08:64:
31:e7:82:63:76:30:b4:83:39:77:9e:80:e5:62:e4:95:e6:c4:
aa:3f:8b:4f:ce:48:c8:62:70:8d:7a:9f:0b:1e:88:fc:b7:65:
4a:d5:72:0b:82:8e:8f:ef:b4:c8:93:1c:81:58:56:ca:92:c9:
af:29:a8:84:1d:70:76:35:b5:c4:69:2c:17:e1:6d:04:3e:6d:
82:80:69:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:56:15 2026 by rpki-client