
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
File: I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft (raw, json)
Hash identifier: 4pxeD+5X8Q2817B9o1GNeWTOAyi0GgjSg+AyyvmYPoM=
Subject key identifier: BE:3C:86:A5:CE:B5:6C:99:D7:31:25:F9:A0:61:54:5E:D0:BA:F5:50
Authority key identifier: 23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15
Certificate issuer: /CN=A91E22E5/serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
Certificate serial: 02BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
Manifest number: 02B6
Signing time: Sun 05 Apr 2026 01:10:52 +0000
Manifest this update: Sun 05 Apr 2026 01:10:52 +0000
Manifest next update: Sun 12 Apr 2026 01:10:52 +0000
Files and hashes: 1: I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl (hash: 7GvlbyHA+pmnMWb32qLgcyohD//5NOPc4UBPfsC2rrM=)
2: 623705DA339111ED9249064BC4F9AE02.roa (hash: dJkQChNuxBTFdv5H2Ke/hDe3+P5lfeBF0mKLDRfy7Ic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl
rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:10:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699 (0x2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E22E5, serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
Validity
Not Before: Apr 5 01:10:52 2026 GMT
Not After : Apr 12 01:10:52 2026 GMT
Subject: CN=69d1b69c-0f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:af:90:20:58:71:db:51:0a:05:bb:07:c0:
91:e8:c5:2a:d7:01:d0:17:34:d8:85:ef:5a:55:f1:
2c:de:8f:5d:77:03:23:4b:d0:b8:b1:be:a5:12:6c:
f5:7a:53:fa:1b:fe:a5:4b:61:5e:45:ee:9a:01:3b:
bb:7f:0c:75:01:b5:40:24:59:5d:c7:b4:89:b7:b5:
21:d8:61:af:03:19:46:55:f1:4b:26:a6:ae:f7:01:
08:3c:a8:94:b1:17:65:7d:cc:48:8f:ef:71:55:46:
0b:47:8a:9d:b5:4b:0a:ea:82:98:61:d4:55:cb:0f:
e5:23:7c:9a:48:cc:00:5d:60:b4:fd:78:a5:de:1f:
e8:a6:6f:72:4a:3b:19:14:8a:cc:ab:19:12:89:15:
17:f1:a4:df:c4:ac:05:9a:70:3e:8f:97:cc:7d:3e:
fe:15:29:09:25:75:68:b3:08:68:96:2b:9e:83:9d:
c8:f1:fb:84:d1:7a:a8:c5:07:25:33:9e:0f:c7:d7:
61:16:78:b9:7d:d4:cc:41:44:e0:f0:78:44:d9:13:
71:fa:76:0b:3b:55:a5:2b:49:d0:3f:9b:4c:bd:eb:
70:c4:8d:c8:b2:38:fa:ad:1d:ba:a4:61:d9:94:65:
89:be:52:fe:56:93:ce:63:04:7a:c8:18:41:15:d6:
de:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3C:86:A5:CE:B5:6C:99:D7:31:25:F9:A0:61:54:5E:D0:BA:F5:50
X509v3 Authority Key Identifier:
keyid:23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:14:1c:c0:06:81:66:08:22:28:cb:fc:75:06:0a:55:58:e7:
46:ce:f2:b4:18:ea:05:13:49:00:d5:7d:53:5f:36:9b:e0:4e:
75:52:c4:94:1d:05:af:11:04:f9:d7:64:d8:ed:1c:6c:63:90:
d4:57:43:6c:00:12:d2:ae:51:55:a1:09:f2:76:a2:e8:ba:3a:
81:63:96:01:79:cc:12:95:3c:db:06:24:50:bc:1a:7d:14:ca:
a4:14:fe:ac:7f:c6:9e:54:b8:ab:3d:88:8a:b7:7b:05:d9:76:
0c:26:48:f8:23:b4:1a:3d:61:67:b1:1f:ad:cd:60:4b:b1:39:
8b:9d:05:28:92:16:6c:4b:f0:30:17:7c:2a:b7:e8:8f:f0:00:
c3:f4:6d:65:35:50:e2:fb:26:2d:cd:4c:9f:19:d4:85:84:dd:
29:4e:82:ee:2a:d8:1d:21:ac:59:08:30:2b:38:f0:b0:50:49:
2d:13:cf:31:bd:62:37:99:df:c4:2c:be:e2:f7:0b:bd:9e:e0:
7a:88:53:ff:1c:f1:b5:ea:d3:fe:4f:f9:bb:b8:7f:98:cd:af:
41:5e:fe:45:5f:e3:f3:5c:aa:9d:f4:c2:29:73:b7:85:34:9a:
01:54:9e:99:9e:77:cb:d2:7a:dc:54:92:a5:f7:f9:d8:d0:13:
1d:3c:61:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:55:03 2026 by rpki-client