
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.mft
File: cg3tscVvVSBB9EiED3YVdts3rfI.mft (raw, json)
Hash identifier: aeLnpB8GuT60Y5gChzZ+zktwDp6S7WBb+vqhQHQ4mZs=
Subject key identifier: E6:12:7C:BE:2A:9E:EF:8B:39:A9:FA:D2:DB:F8:85:8B:99:95:AB:A4
Authority key identifier: 72:0D:ED:B1:C5:6F:55:20:41:F4:48:84:0F:76:15:76:DB:37:AD:F2
Certificate issuer: /CN=A9135597/serialNumber=720DEDB1C56F552041F448840F761576DB37ADF2
Certificate serial: 3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cg3tscVvVSBB9EiED3YVdts3rfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.mft
Manifest number: 0302
Signing time: Sun 11 Oct 2026 01:48:06 +0000
Manifest this update: Sun 11 Oct 2026 01:48:05 +0000
Manifest next update: Sun 18 Oct 2026 01:48:05 +0000
Files and hashes: 1: cg3tscVvVSBB9EiED3YVdts3rfI.crl (hash: 6rig7UuM0W7wxIePbhKKCA2sN5VyHMPt0hMyA9/Nxl0=)
2: 1A47E4986DE811F1A234B57A5CA30FBC.roa (hash: 1gx+6aoEh7HCS4ZBkElgy0tGymufvKOntntuWXEXFU4=)
3: 19C7B1C46DE811F1A234B57A5CA30FBC.roa (hash: GKp1QODQO8zjgMFMSHC7XIbNh/54vtscAesJ+Vx1oaY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.crl
rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cg3tscVvVSBB9EiED3YVdts3rfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 01:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135597, serialNumber=720DEDB1C56F552041F448840F761576DB37ADF2
Validity
Not Before: Oct 11 01:48:05 2026 GMT
Not After : Oct 18 01:48:05 2026 GMT
Subject: CN=6acaead6-3c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:75:8d:0f:b4:91:05:e5:59:29:b7:61:c1:
58:e9:02:44:13:5b:10:20:77:cc:c9:00:cd:bf:ca:
d7:d8:1d:18:6c:55:a7:dd:73:7e:b8:de:b3:1c:71:
80:07:85:4e:95:f5:de:0d:8f:1d:4b:fa:df:5e:26:
01:f5:0d:63:53:e9:2e:cd:57:13:9e:eb:7d:19:d1:
d5:c7:f0:74:d5:c5:4e:49:9a:2b:9f:38:3d:ea:67:
40:cb:78:a1:ab:02:05:3a:a9:69:b1:51:22:75:ab:
f0:93:4c:df:b2:9e:bc:e3:79:b3:0a:53:36:a4:e0:
bf:63:3a:71:d8:58:6b:69:98:00:7a:34:b3:8a:13:
9b:6c:ab:f1:65:5d:eb:a4:b7:47:1d:e0:a6:2c:4a:
2e:f8:ec:db:db:a1:c7:f0:07:1a:e5:e3:fa:d1:42:
0f:bc:6e:9d:3a:a2:ce:c3:f3:8c:41:73:e8:c6:55:
0c:e0:46:15:70:bf:f0:e7:2f:8e:94:43:38:d9:44:
53:51:66:e1:2d:ff:e3:84:3a:05:45:4e:bd:c5:dc:
38:0c:bb:ce:62:6e:60:1f:31:de:48:14:2d:5a:f0:
34:69:65:42:ec:56:ed:53:cd:7e:47:4d:72:e6:1d:
0b:ee:21:f8:7d:7a:bc:90:cd:f0:c1:d6:7f:dc:55:
65:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:12:7C:BE:2A:9E:EF:8B:39:A9:FA:D2:DB:F8:85:8B:99:95:AB:A4
X509v3 Authority Key Identifier:
keyid:72:0D:ED:B1:C5:6F:55:20:41:F4:48:84:0F:76:15:76:DB:37:AD:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cg3tscVvVSBB9EiED3YVdts3rfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:48:79:ca:8d:f0:76:e8:3b:00:e9:6c:a0:8b:ee:7c:70:62:
ab:7a:0a:c5:98:a0:81:78:ca:c5:e4:df:dc:e2:6e:3b:c7:da:
f3:dc:a7:dc:a5:59:91:d8:9e:38:24:51:e2:ae:21:42:7d:f5:
92:b7:54:cc:ff:2a:81:b2:64:78:98:d8:22:0e:73:13:53:ad:
3b:df:7b:16:d6:be:08:1b:9b:96:39:46:91:d8:16:6b:ab:ee:
ab:7b:95:db:cc:7a:38:33:b3:3a:78:5d:f4:84:00:23:9a:f8:
cf:f9:a6:83:1b:ab:e3:ac:6a:4d:37:11:49:f4:92:cb:ec:dc:
8f:e8:97:5b:18:53:c1:6b:61:74:fb:29:67:d2:da:32:3c:e8:
a1:47:89:bd:81:88:f1:a5:f8:fd:06:4f:ab:db:11:d5:5d:ce:
cd:d3:84:35:b6:66:d9:ee:69:f7:cf:dc:4b:48:08:d1:69:dc:
91:41:65:40:6e:f1:69:a4:bb:09:f1:70:fe:1b:e6:97:0f:96:
68:91:fa:da:98:60:33:08:50:c5:4a:5d:d7:b8:74:63:fb:28:
f7:5d:3e:85:41:15:4e:05:56:b9:c9:30:71:2e:98:1c:e5:db:
d9:da:ad:7a:24:94:27:05:11:4b:46:64:97:4f:08:fe:b6:a4:
48:9b:87:a4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NTU5NzExMC8GA1UEBRMoNzIwREVEQjFDNTZGNTUyMDQxRjQ0ODg0MEY3NjE1NzZE
QjM3QURGMjAeFw0yNjEwMTEwMTQ4MDVaFw0yNjEwMTgwMTQ4MDVaMBgxFjAUBgNV
BAMTDTZhY2FlYWQ2LTNjNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGEXWND7SRBeVZKbdhwVjpAkQTWxAgd8zJAM2/ytfYHRhsVafdc3643rMccYAH
hU6V9d4Njx1L+t9eJgH1DWNT6S7NVxOe630Z0dXH8HTVxU5JmiufOD3qZ0DLeKGr
AgU6qWmxUSJ1q/CTTN+ynrzjebMKUzak4L9jOnHYWGtpmAB6NLOKE5tsq/FlXeuk
t0cd4KYsSi747NvbocfwBxrl4/rRQg+8bp06os7D84xBc+jGVQzgRhVwv/DnL46U
QzjZRFNRZuEt/+OEOgVFTr3F3DgMu85ibmAfMd5IFC1a8DRpZULsVu1TzX5HTXLm
HQvuIfh9eryQzfDB1n/cVWX/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5hJ8viqe
74s5qfrS2/iFi5mVq6QwHwYDVR0jBBgwFoAUcg3tscVvVSBB9EiED3YVdts3rfIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1NTk3L0U5NzA3RDFFOUEz
QTExRUQ4MUIxMjcxREM0RjlBRTAyL2NnM3RzY1Z2VlNCQjlFaUVEM1lWZHRzM3Jm
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvY2czdHNjVnZWU0JCOUVpRUQzWVZkdHMzcmZJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1
NTk3L0U5NzA3RDFFOUEzQTExRUQ4MUIxMjcxREM0RjlBRTAyL2NnM3RzY1Z2VlNC
QjlFaUVEM1lWZHRzM3JmSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBfSHnKjfB26DsA6Wygi+58cGKregrFmKCBeMrF5N/c4m47x9rz3KfcpVmR2J44
JFHiriFCffWSt1TM/yqBsmR4mNgiDnMTU60733sW1r4IG5uWOUaR2BZrq+6re5Xb
zHo4M7M6eF30hAAjmvjP+aaDG6vjrGpNNxFJ9JLL7NyP6JdbGFPBa2F0+yln0toy
POihR4m9gYjxpfj9Bk+r2xHVXc7N04Q1tmbZ7mn3z9xLSAjRadyRQWVAbvFppLsJ
8XD+G+aXD5ZokframGAzCFDFSl3XuHRj+yj3XT6FQRVOBVa5yTBxLpgc5dvZ2q16
JJQnBRFLRmSXTwj+tqRIm4ek
-----END CERTIFICATE-----
Generated at Mon Oct 12 11:07:39 2026 by rpki-client