
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
File: 3VdGDwwSvgVGE6L0KWewfaVoe_A.mft (raw, json)
Hash identifier: slDmXtXofEWIJBL3CSTkK6WPJqsvT1DqCHAVoOkw4nc=
Subject key identifier: 7F:60:8A:56:E8:B0:1F:D5:39:92:62:07:C5:17:8D:45:5E:9B:00:F9
Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0
Certificate issuer: /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
Certificate serial: 0178
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
Manifest number: 0170
Signing time: Mon 21 Sep 2026 04:48:59 +0000
Manifest this update: Mon 21 Sep 2026 04:48:58 +0000
Manifest next update: Mon 28 Sep 2026 04:48:58 +0000
Files and hashes: 1: 3VdGDwwSvgVGE6L0KWewfaVoe_A.crl (hash: t3KbyNIz0XupXjlJmrXHp8M9iSFDTNtP+f5bWdMW+FY=)
2: ABF1FAF2860211EF8D8AD011C4F9AE02.roa (hash: QzecNRiadvNS3uXz4puDDg8aeFgkZFgzMCT4KbxjYQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl
rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91566DC, serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
Validity
Not Before: Sep 21 04:48:58 2026 GMT
Not After : Sep 28 04:48:58 2026 GMT
Subject: CN=6ab0b73a-b516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:8d:6f:2e:a7:1b:5d:74:2f:72:ec:aa:2c:
65:3e:81:81:86:b9:30:25:2c:6d:c1:60:54:af:07:
9a:df:1e:f2:24:c1:2d:65:f7:ea:9a:cb:c3:5d:62:
be:eb:51:87:39:1c:2c:13:c8:82:f4:db:2f:bd:e9:
48:a4:d3:f7:7c:1c:6e:c5:a3:a2:24:07:68:a5:f1:
58:a0:da:b9:08:e8:d3:42:0a:78:15:88:ab:47:af:
97:5f:3b:d3:c1:f7:98:48:88:b7:46:07:3c:32:d0:
1a:62:f2:78:d3:83:86:d3:04:44:63:fe:5d:a4:a5:
41:6c:84:ad:8b:56:e3:37:53:60:8d:90:57:26:1b:
55:c1:f3:ae:59:e1:8b:b5:82:25:61:4c:30:39:48:
fe:e3:ed:a4:fd:22:72:34:63:b9:b1:4d:29:46:8d:
36:b4:2e:8e:f6:9a:a4:20:0f:aa:ac:07:cb:ec:73:
f6:24:72:37:c9:b7:32:60:c6:bd:cd:31:5e:fe:b9:
eb:45:a2:05:71:3d:c8:5d:02:9a:03:64:f1:3e:15:
bf:9b:a5:8c:80:d8:32:77:e7:7b:e4:03:b1:3e:72:
5c:5e:76:5f:ce:32:91:23:02:8e:23:27:33:13:2d:
30:7e:07:01:0f:b6:32:15:8d:54:01:c0:0c:61:32:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:60:8A:56:E8:B0:1F:D5:39:92:62:07:C5:17:8D:45:5E:9B:00:F9
X509v3 Authority Key Identifier:
keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:38:26:3c:e6:6a:5e:3e:88:bf:44:a3:37:03:fc:a7:e1:28:
90:ad:8c:69:79:cb:49:ee:23:aa:bc:da:5b:cd:e4:49:bc:12:
a4:0b:86:a1:27:e8:2b:aa:be:8c:7e:8f:1a:e6:22:b9:15:a8:
59:63:7c:79:4e:d2:c2:64:da:98:5d:90:40:28:d6:65:b4:e8:
51:bd:02:f9:84:bf:83:89:c4:f3:7a:0b:18:b6:08:19:cd:e2:
04:9f:da:bb:2d:4a:82:b7:6e:f3:66:fe:67:9a:8f:12:31:f3:
e3:4f:a9:a8:33:e6:35:af:05:db:2c:4b:45:6e:94:fc:c6:14:
44:d8:fd:be:33:bb:77:13:01:b1:f0:db:6b:00:93:85:24:01:
55:5a:e8:0f:0c:22:cb:7e:1d:a9:c1:b7:cd:37:a1:95:66:14:
01:e4:bc:89:ab:53:bc:9a:68:a5:9c:d9:f1:ed:33:66:de:97:
3b:1b:8a:dd:2d:2a:07:b2:d2:fb:7f:7d:fd:d4:1b:f4:d0:82:
fd:b4:f3:9d:40:6f:13:a6:4b:28:82:5a:f7:8a:d7:02:11:45:
d8:e7:1b:3d:19:d2:53:05:fa:67:1b:41:70:63:75:1f:7c:27:
cc:fc:0a:8d:90:2f:a5:cd:8d:c7:8f:36:76:d2:f2:1f:9e:69:
2d:0a:25:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:13:49 2026 by rpki-client