
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
File: 3M1VNVK6-KZcGgZrM0f3kyRPV14.mft (raw, json)
Hash identifier: LScjpKvNUYZl/si2hHJ3/4ILZsehl2nXnQJChJKL78k=
Subject key identifier: D4:6B:4D:A0:14:94:30:49:9F:8E:5B:BC:D7:BD:E3:70:42:8C:F8:7F
Authority key identifier: DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E
Certificate issuer: /CN=A91BD829/serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E
Certificate serial: 0ADA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
Manifest number: 0ACE
Signing time: Mon 20 Apr 2026 19:22:25 +0000
Manifest this update: Mon 20 Apr 2026 19:22:24 +0000
Manifest next update: Mon 27 Apr 2026 19:22:24 +0000
Files and hashes: 1: 3M1VNVK6-KZcGgZrM0f3kyRPV14.crl (hash: /IYAetQxlj0kdMFT0TNG/b3TzAEVMB9S9NDlqGluOoM=)
2: 1D28516E70DA11EA957FDE74C4F9AE02.roa (hash: gtJjhkrsvX4UbJWPIxhCIDDPfa2ngXQGjRcobVE2Yx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl
rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 19:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2778 (0xada)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD829, serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E
Validity
Not Before: Apr 20 19:22:24 2026 GMT
Not After : Apr 27 19:22:24 2026 GMT
Subject: CN=69e67cf0-dd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:36:6b:46:f2:d9:f7:4d:c5:d4:bc:75:b6:b2:
5c:60:a3:de:7c:5a:88:0c:05:91:70:09:fa:1b:e5:
25:06:80:cd:f4:59:2e:25:93:68:25:b5:81:e9:b7:
84:d4:8b:4e:78:b6:e7:16:78:da:7d:5f:44:9a:ea:
25:86:d1:cd:b7:3f:79:af:02:36:6a:8e:09:34:97:
de:76:c9:60:e4:8e:61:24:1a:33:6c:e6:1f:80:49:
c4:25:95:a0:ca:c4:cf:2f:35:de:80:cf:2e:65:89:
75:e4:33:2e:00:33:25:bb:c1:b3:0b:30:2a:f9:89:
13:1d:11:89:7f:ad:b2:97:8c:53:74:ad:67:c0:fc:
6e:c0:db:04:d1:9d:65:c3:f9:68:76:f9:df:b1:b7:
d4:14:ef:86:b9:81:a3:80:cc:1d:1a:f6:f8:b3:24:
8a:bf:d8:50:fb:bd:93:28:8d:80:4f:66:a7:b7:1e:
63:1a:14:70:f5:ef:cf:f3:4e:a7:d9:9e:51:4f:e6:
2d:09:f2:ce:8a:52:35:7f:6c:9c:c0:f4:3d:f8:8e:
bd:df:7d:35:05:e7:2b:dd:e6:4c:dd:35:54:78:d4:
4c:02:64:ef:16:03:30:a4:b7:f7:d7:26:cb:de:d3:
b9:90:0e:88:36:30:e0:5e:82:c7:8d:96:53:0e:ee:
18:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6B:4D:A0:14:94:30:49:9F:8E:5B:BC:D7:BD:E3:70:42:8C:F8:7F
X509v3 Authority Key Identifier:
keyid:DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:98:79:b3:ee:74:43:81:39:f1:6b:06:17:25:75:7e:08:2b:
45:76:26:20:93:46:6e:d5:22:9a:0e:ed:4b:b8:99:ae:a8:b9:
54:f5:aa:6c:36:4f:36:2e:d6:d2:95:08:a8:40:f2:80:bb:06:
d1:45:d5:33:d4:01:71:54:2f:43:5f:a3:6f:6d:51:ca:be:a7:
7e:b1:eb:42:a6:4b:e2:1a:a4:0e:e2:3a:66:bf:57:f1:ae:a0:
1b:ee:db:a7:8a:87:d5:bb:2f:ac:87:0e:8d:69:73:95:87:45:
b6:62:8d:75:63:b9:cf:6d:f8:c0:34:9c:94:5a:d7:dd:45:0a:
32:a9:45:20:1c:e9:ee:43:7e:16:1c:db:20:5e:da:1a:4e:48:
8d:27:43:6b:82:bd:6d:14:b5:f6:08:e5:af:bc:2a:83:32:90:
31:64:9f:bc:46:13:19:47:2b:84:c2:bc:d6:75:9d:45:2c:27:
b2:9d:55:a6:a6:32:a6:28:59:c6:87:6c:18:3f:e8:4c:f8:65:
7f:c2:99:ed:19:f0:55:d0:35:f1:81:ac:19:b1:91:76:30:2a:
8d:11:29:a0:25:1a:ad:15:7e:7f:e7:58:d9:3a:03:4a:51:32:
87:d4:20:65:1b:54:19:ba:f9:59:c3:8b:0d:fd:ed:48:16:c8:
1b:db:74:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 10:27:51 2026 by rpki-client