
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
File: _3wGiSUYZz7M4Ea2pxfzU85TxQk.mft (raw, json)
Hash identifier: E8qCLL1+GEvDyJXUGsacmPsq3iMJJyDvA9MlGVpjB9I=
Subject key identifier: 9B:9D:93:E5:BC:16:EB:0B:E2:40:39:87:ED:61:8C:26:39:AD:C6:EE
Authority key identifier: FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09
Certificate issuer: /CN=A91476FE/serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
Manifest number: 011D
Signing time: Mon 21 Sep 2026 05:54:26 +0000
Manifest this update: Mon 21 Sep 2026 05:54:26 +0000
Manifest next update: Mon 28 Sep 2026 05:54:26 +0000
Files and hashes: 1: _3wGiSUYZz7M4Ea2pxfzU85TxQk.crl (hash: 76GXw8bCZOevTE6XsZ7nRyQcpnK0WoLp+U1QhMpJCDc=)
2: CC704C6639B711F09D08292CC4F9AE02.roa (hash: 0J+mjRLeZ9f4gHq+bgky2vWfLxgWauEf1jkqEX1oIGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl
rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91476FE, serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509
Validity
Not Before: Sep 21 05:54:26 2026 GMT
Not After : Sep 28 05:54:26 2026 GMT
Subject: CN=6ab0c692-562f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:1a:61:69:ab:da:bf:f3:5c:d2:ff:74:28:
81:81:78:b7:52:76:13:c0:a4:68:80:d7:9a:84:94:
91:14:00:5f:31:9a:e9:6f:fa:36:45:c8:8b:65:a1:
4d:23:e2:56:9c:5d:1b:21:6b:a9:1f:a9:d5:3c:37:
a0:d7:bb:3c:a4:3d:df:8b:aa:4e:53:cc:fc:9f:d0:
09:fc:a7:1e:66:67:2d:b5:e3:41:23:bf:24:79:b5:
d6:ff:92:38:12:22:66:70:5e:06:bf:6f:12:49:e5:
f6:7c:ba:8d:f7:a3:2e:c8:79:a3:a8:ba:c0:80:67:
fa:ea:d4:0c:54:37:1a:05:2e:c9:32:94:c6:a1:71:
b3:73:3d:dd:9c:58:86:d5:07:73:d3:05:c1:f8:d9:
d1:a2:3a:97:e6:65:cd:21:bd:15:bd:9f:2d:11:77:
1a:bc:6c:dc:8e:e9:90:a2:73:c2:bc:29:92:bb:93:
4a:8e:bb:b8:b4:66:17:1e:09:85:1f:78:bc:13:32:
d9:0b:0e:a8:da:ad:b2:4a:41:b6:13:fa:0a:75:ab:
b4:b4:3e:cd:ab:ef:e7:e2:79:df:36:cb:ac:58:e1:
d0:22:ce:ba:1e:a4:57:42:91:78:74:88:8a:54:92:
1c:3b:15:3c:94:56:cd:d9:9c:29:99:b6:da:58:10:
06:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9D:93:E5:BC:16:EB:0B:E2:40:39:87:ED:61:8C:26:39:AD:C6:EE
X509v3 Authority Key Identifier:
keyid:FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c3:55:ef:23:a3:cb:d1:76:b7:33:26:b6:43:5d:a6:14:98:
70:0c:ab:bd:73:fa:e3:ee:7b:2f:5e:8c:2e:f7:ac:84:30:77:
92:f5:a9:d0:f9:9d:ec:2f:9a:3d:72:ba:b7:4e:20:09:8f:f1:
2c:03:0f:52:3b:e4:99:b1:8c:b4:f0:07:60:77:98:71:0d:84:
91:75:c3:11:4a:a4:ff:56:d5:e9:a6:14:1c:f4:a4:dc:b4:df:
80:7f:a3:d9:2b:38:35:6d:e1:39:1f:03:08:f1:e8:b1:41:fa:
06:ed:4c:dd:06:2a:d3:cb:60:35:bc:92:cd:d4:1f:30:b8:b8:
a7:57:eb:30:97:aa:c4:7b:21:bf:b3:78:62:2c:d9:0f:a8:0b:
ea:ef:95:b4:fe:78:6c:02:e5:ce:d3:f8:f5:cb:ee:68:d4:31:
7a:4c:93:d3:77:e4:ec:a1:11:57:c5:b9:63:d6:a5:b0:09:78:
4f:9b:92:a4:e7:78:5b:b9:25:e9:0f:9a:49:ed:12:cf:b6:70:
db:72:6c:22:74:47:f2:02:0b:23:76:2e:3b:e1:16:45:f7:ce:
e2:dd:b0:7f:91:fd:54:bb:a9:1f:7f:56:8b:d6:e4:52:f7:82:
79:19:09:46:a4:4c:a9:ac:97:fc:9b:50:5c:24:8b:4b:80:48:
42:29:94:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:41:23 2026 by rpki-client