
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft
File: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft (raw, json)
Hash identifier: fr9YaBoehWJfgRxl9JpxcsL+QUgtryf0U8gpqh5W498=
Subject key identifier: AD:CC:58:A4:B8:E7:B0:AB:55:61:ED:3C:15:F5:E2:13:9F:45:B0:7E
Authority key identifier: DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E
Certificate issuer: /CN=A91DC4E1/serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E
Certificate serial: 1C4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft
Manifest number: 1C26
Signing time: Tue 18 Aug 2026 16:20:32 +0000
Manifest this update: Tue 18 Aug 2026 16:20:31 +0000
Manifest next update: Tue 25 Aug 2026 16:20:31 +0000
Files and hashes: 1: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl (hash: NumlK5Uri8SByzOIlyZ/1kmfoBx5ITnQX0XFWZSD7/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl
rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 16:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7247 (0x1c4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC4E1, serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E
Validity
Not Before: Aug 18 16:20:31 2026 GMT
Not After : Aug 25 16:20:31 2026 GMT
Subject: CN=6a848650-6578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:3f:95:ef:ea:31:9b:35:59:8e:1f:2e:c7:
c0:6e:23:22:c2:a7:59:86:c9:4a:45:48:68:01:74:
8f:97:f9:bc:04:47:03:56:56:f6:f4:0c:81:cc:4a:
70:b5:6b:9e:7c:77:31:7d:cb:5d:58:bd:7e:ef:d0:
7a:81:7d:12:47:b7:02:1a:c3:48:37:d8:79:56:ef:
94:07:4e:8a:8e:00:54:6a:30:3d:a2:66:33:52:58:
1e:eb:70:a3:54:2d:fb:26:03:b9:7b:d1:a1:65:4f:
8d:83:8a:07:3d:df:85:d9:41:d6:6a:4a:73:a7:03:
e3:dc:10:ca:88:6e:45:81:d5:7a:9c:8c:74:97:46:
98:fc:30:8c:f1:bf:ca:ee:90:f7:35:e6:6f:aa:ce:
90:74:97:b7:85:bc:35:92:2f:84:46:9f:28:d5:21:
5a:15:62:1f:a1:8d:fb:ca:55:bf:93:2b:f9:b6:bc:
ad:78:ee:ab:a8:14:c6:b0:a0:9a:9d:3b:e9:67:b6:
84:30:3e:e8:97:72:41:92:56:d0:c0:d5:19:d4:29:
7d:4f:4d:0c:ee:7d:5d:28:9c:bf:b7:be:c1:4f:99:
04:9c:94:7e:37:9c:7c:27:3b:55:bb:4e:49:c3:62:
b4:e9:92:4c:74:c1:31:af:1a:83:82:26:01:63:c1:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CC:58:A4:B8:E7:B0:AB:55:61:ED:3C:15:F5:E2:13:9F:45:B0:7E
X509v3 Authority Key Identifier:
keyid:DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:37:30:40:7a:63:f0:03:a8:a2:19:97:9e:26:19:02:c0:d5:
8a:69:70:b2:79:9a:98:05:80:16:ca:b7:02:52:1d:1a:b9:d8:
6d:87:f8:ac:5b:3a:f5:62:14:00:7b:45:4d:fc:a2:f3:50:35:
86:fb:72:fc:26:32:1d:cf:ce:44:69:5c:97:1d:a8:b3:14:ce:
2c:85:51:2a:c4:88:2d:c9:c0:a5:bc:83:47:24:a4:27:0b:e8:
26:99:24:d5:e9:25:81:6c:c5:ca:08:c0:0e:74:76:1f:0d:ed:
98:ff:f3:cb:ea:d7:ae:fc:26:ae:10:da:4d:52:eb:cf:1a:0a:
9d:52:93:d6:d2:cd:05:a7:fb:80:5f:ad:0f:fb:c4:ee:37:af:
6d:d5:ee:2c:6a:ed:dd:f5:70:72:f3:36:5f:af:9f:cb:be:e7:
9b:be:f0:b3:9d:9f:38:0f:59:53:b5:b8:3e:6f:4d:31:98:48:
8e:6d:48:e9:f9:3b:d9:82:a4:0f:54:fc:3b:15:69:68:72:41:
c0:8d:38:f9:ef:ea:d4:2d:cf:8c:a5:29:da:36:53:76:f8:3c:
f6:b8:e3:3b:10:f0:2b:4e:ef:f4:5a:e9:a3:bc:26:e8:a1:e3:
3e:b9:cd:7f:36:66:d7:2e:46:4f:a2:f4:49:53:f4:73:95:37:
e4:c4:04:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:54 2026 by rpki-client