
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
File: 3BEw2GFrq8bOCI9fIOaXGamcMrs.mft (raw, json)
Hash identifier: MrC1DSGeCQCQlMryhKZdm6ZZZ4XOlm4uKCaubu/2l+U=
Subject key identifier: 0E:4A:E1:39:98:06:DD:72:DC:26:32:64:D6:24:FB:D8:D0:CB:DE:B9
Authority key identifier: DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB
Certificate issuer: /CN=A91B732A/serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB
Certificate serial: 0113
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
Manifest number: 0113
Signing time: Thu 21 May 2026 06:04:19 +0000
Manifest this update: Thu 21 May 2026 06:04:19 +0000
Manifest next update: Thu 28 May 2026 06:04:19 +0000
Files and hashes: 1: 3BEw2GFrq8bOCI9fIOaXGamcMrs.crl (hash: t+ZNlCzlmikhy7Y9TX6P6CWzPx+IvDX22Rk6zShRNP4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl
rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B732A, serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB
Validity
Not Before: May 21 06:04:19 2026 GMT
Not After : May 28 06:04:19 2026 GMT
Subject: CN=6a0ea063-e117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:f1:8e:a3:cd:6c:d1:fb:2f:01:c2:b8:4c:
4e:b6:89:21:3b:52:fc:88:fe:59:26:56:5c:c8:16:
48:69:89:b0:84:f1:2f:f8:a1:b8:02:c2:2e:de:8c:
f1:b7:79:73:fd:ab:da:f6:f3:c9:20:7d:b9:5f:c4:
35:5e:be:0d:93:0a:77:7e:29:ab:ff:b2:ef:04:69:
fb:a6:05:c0:5f:56:bb:a6:4d:c9:ff:3e:eb:de:6d:
a1:f8:c3:7f:92:03:08:48:b3:4b:cf:05:bb:fa:b9:
ec:9f:e2:e8:2d:54:2e:53:12:32:d0:01:bb:e3:73:
4d:d1:ca:85:ed:cd:ba:18:d9:16:59:c7:2e:77:91:
c9:e0:2d:c8:b7:1b:02:ce:f6:cf:29:e8:1d:46:d1:
56:16:ce:ef:10:c6:b7:38:88:1b:45:d3:2c:1d:3d:
52:8d:a5:b4:05:fb:8c:1b:f8:4c:b9:a6:4c:e2:18:
d6:26:10:26:ac:50:e2:6f:21:4a:68:3f:9c:75:3b:
56:92:93:2f:af:f9:73:c8:92:33:d2:8a:05:76:86:
10:e4:e3:e7:60:6f:2e:63:4f:20:28:e6:1b:33:8e:
d3:68:7c:d1:96:95:a7:46:01:cf:fb:aa:9b:16:fb:
db:03:b2:c7:1c:00:2a:70:9f:a0:3d:1e:ea:a7:cd:
14:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4A:E1:39:98:06:DD:72:DC:26:32:64:D6:24:FB:D8:D0:CB:DE:B9
X509v3 Authority Key Identifier:
keyid:DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:29:db:32:10:98:8a:cf:70:bc:ed:a2:36:03:94:39:75:e8:
5c:3d:06:b4:55:68:ca:2e:f6:33:d2:0e:bf:0c:c4:10:89:dc:
f0:d8:38:81:e1:6f:dd:89:af:91:3c:74:91:ec:a5:a5:55:7f:
44:d1:dd:c5:f7:0d:34:89:96:3c:b1:5a:98:c8:d0:05:d6:4e:
ed:86:86:c4:67:c1:d1:7a:36:e1:85:49:31:d5:b5:33:77:f2:
1e:ed:19:75:92:10:f2:78:12:18:c2:94:fb:b8:41:f2:ce:23:
e0:bc:63:a7:95:de:6b:d1:27:b6:b2:4d:7e:3d:98:a1:b4:58:
e4:fd:d1:56:d5:4b:89:cd:81:9e:0d:8c:c7:42:9b:a6:6d:21:
a4:35:10:70:e1:f3:45:d5:31:6d:d2:f1:4a:51:23:fe:c0:8d:
ab:dc:e0:19:79:49:5c:78:8b:c0:81:07:fa:03:61:0f:78:a7:
ae:1e:2f:7d:67:35:2c:94:4b:57:cc:b0:e4:bf:4e:1d:33:22:
75:40:6d:1f:dd:68:56:b6:15:2d:05:25:cd:b4:28:45:fb:95:
19:c2:79:42:e8:07:d4:9e:25:5d:04:37:98:2b:35:d4:f6:e2:
1e:b2:21:e5:07:b3:d7:e2:17:10:9b:e3:65:a6:56:a0:11:8a:
dc:58:75:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:35:59 2026 by rpki-client