
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
File: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft (raw, json)
Hash identifier: g1hQt4RgdQnCNeCp0NiPGQh82sS/YrJUlHZfyP4wpbY=
Subject key identifier: FD:6D:7F:54:35:9E:46:D0:E0:8F:D0:26:80:99:24:27:F5:45:23:25
Authority key identifier: DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73
Certificate issuer: /CN=A91B5AAA/serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873
Certificate serial: 0BE0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
Manifest number: 4104
Signing time: Sat 04 Apr 2026 14:48:18 +0000
Manifest this update: Sat 04 Apr 2026 14:48:18 +0000
Manifest next update: Sat 11 Apr 2026 14:48:18 +0000
Files and hashes: 1: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl (hash: jAe4mxZ7IWAw+MPD45iiLM+eQzqovCxX14wDAsYVlxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl
rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3040 (0xbe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5AAA, serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873
Validity
Not Before: Apr 4 14:48:18 2026 GMT
Not After : Apr 11 14:48:18 2026 GMT
Subject: CN=69d124b2-a217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:0e:d7:aa:f2:ff:88:72:6b:87:6b:ce:5c:
64:f2:bc:59:d6:2b:a7:0c:df:54:e5:d2:e9:00:1e:
08:78:4f:17:5d:db:f3:4e:83:e5:f3:d5:73:dc:19:
94:59:ea:a6:83:8b:a0:99:4e:ea:fd:8d:85:1e:33:
30:bc:94:2b:0e:8a:79:5e:7c:f4:b0:0e:06:70:ff:
6a:06:67:e6:d2:ec:14:09:6a:d6:ff:03:a1:88:33:
76:cc:6d:fb:b7:ec:33:3d:6e:3f:09:7a:25:70:45:
c8:32:56:ae:7b:78:08:c9:39:6d:fe:86:2c:f1:be:
cf:bd:4f:e9:ab:8b:e8:7a:ff:e2:8e:84:d8:aa:57:
76:4a:2e:49:1a:35:11:19:f9:cd:74:0d:11:fe:2d:
69:f4:40:bf:20:65:64:15:e5:86:08:db:56:0a:44:
bf:82:82:d8:54:33:00:0b:1f:52:31:31:57:20:0d:
90:26:a3:50:f1:36:77:8d:ea:3f:2e:75:8c:0a:05:
1a:e8:6a:23:8d:7a:bb:b0:ba:b2:17:25:a7:6b:5b:
14:5c:de:fc:00:68:cd:ec:22:64:12:37:5a:6d:5d:
31:9b:8c:40:ba:c5:7b:0d:ae:5f:3e:0e:f3:fe:b7:
df:5a:76:89:9b:e4:e3:2b:34:b6:dd:61:6e:3a:6d:
ce:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6D:7F:54:35:9E:46:D0:E0:8F:D0:26:80:99:24:27:F5:45:23:25
X509v3 Authority Key Identifier:
keyid:DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8d:97:f9:d5:55:c8:ab:f7:4a:65:ec:9b:55:6a:9c:4f:22:
57:ff:6c:a5:79:b5:16:85:d6:2b:09:1c:fa:3f:ff:40:13:9a:
14:fc:07:99:41:0e:42:6a:22:72:4c:fd:e9:01:90:75:7c:68:
2a:96:c6:c7:f3:8b:8b:0b:6f:90:a6:b0:29:41:4a:32:59:3a:
65:47:15:10:67:7d:9c:79:d2:eb:21:64:05:c9:9b:8a:50:32:
17:ef:a7:d8:65:24:12:34:0e:63:e1:73:b1:6e:0d:5f:96:2a:
6c:aa:de:a2:84:86:fe:55:7b:24:96:2e:fb:8e:ab:55:d1:09:
e6:57:a2:e1:1e:0c:b3:45:5e:ae:25:ce:0b:93:69:49:52:8c:
57:06:a6:49:0b:b3:d2:7f:b9:2d:03:de:99:b1:af:72:81:46:
1f:b2:34:fb:5e:35:67:7c:b6:53:cc:83:f6:b4:20:82:46:41:
64:b1:86:3f:50:29:be:cf:09:43:d1:37:fa:ec:24:15:f5:83:
17:dc:f2:82:42:17:6f:a8:6d:1c:f2:dd:a6:e6:a9:b1:e0:22:
9f:26:b1:3a:4f:08:b9:eb:67:a1:ff:89:ef:cb:8e:4c:d5:d1:
7b:e8:75:d8:02:9c:7a:28:8e:a6:e5:0f:63:b4:0d:e6:14:3c:
3b:eb:a3:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVBQUExMTAvBgNVBAUTKERDRjU0NzBDNUM4NzgyODhENjFEOUVBNUE1MTVENTg1
MEU3QjU4NzMwHhcNMjYwNDA0MTQ0ODE4WhcNMjYwNDExMTQ0ODE4WjAYMRYwFAYD
VQQDEw02OWQxMjRiMi1hMjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuNEO16ry/4hya4drzlxk8rxZ1iunDN9U5dLpAB4IeE8XXdvzToPl89Vz3BmU
Weqmg4ugmU7q/Y2FHjMwvJQrDop5Xnz0sA4GcP9qBmfm0uwUCWrW/wOhiDN2zG37
t+wzPW4/CXolcEXIMlaue3gIyTlt/oYs8b7PvU/pq4voev/ijoTYqld2Si5JGjUR
GfnNdA0R/i1p9EC/IGVkFeWGCNtWCkS/goLYVDMACx9SMTFXIA2QJqNQ8TZ3jeo/
LnWMCgUa6GojjXq7sLqyFyWna1sUXN78AGjN7CJkEjdabV0xm4xAusV7Da5fPg7z
/rffWnaJm+TjKzS23WFuOm3OGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP1tf1Q1
nkbQ4I/QJoCZJCf1RSMlMB8GA1UdIwQYMBaAFNz1Rwxch4KI1h2epaUV1YUOe1hz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFBQS84RjU4OTI5NDFE
OTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdvaldIWjZscFJYVmhRNTdX
SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNQVkhERnlIZ29qV0haNmxwUlhWaFE1N1dITS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUFBQS84RjU4OTI5NDFEOTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdv
aldIWjZscFJYVmhRNTdXSE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS42X+dVVyKv3SmXsm1VqnE8iV/9spXm1FoXWKwkc+j//QBOaFPwHmUEOQmoi
ckz96QGQdXxoKpbGx/OLiwtvkKawKUFKMlk6ZUcVEGd9nHnS6yFkBcmbilAyF++n
2GUkEjQOY+FzsW4NX5YqbKreooSG/lV7JJYu+46rVdEJ5lei4R4Ms0VeriXOC5Np
SVKMVwamSQuz0n+5LQPembGvcoFGH7I0+141Z3y2U8yD9rQggkZBZLGGP1Apvs8J
Q9E3+uwkFfWDF9zygkIXb6htHPLdpuapseAinyaxOk8Iuetnof+J78uOTNXRe+h1
2AKceiiOpuUPY7QN5hQ8O+ujeQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:18 2026 by rpki-client