
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft
File: 3n3GT5n2JAYkuhPSFUlETEJLVG8.mft (raw, json)
Hash identifier: l6RcpjAqPgLI9HmeICknXuI56aPrg1weYN8KtOVlGFk=
Subject key identifier: DC:80:CB:B7:E1:1C:A0:AE:2E:37:12:97:EC:21:77:D6:49:09:57:2F
Authority key identifier: DE:7D:C6:4F:99:F6:24:06:24:BA:13:D2:15:49:44:4C:42:4B:54:6F
Certificate issuer: /CN=A91567EF/serialNumber=DE7DC64F99F6240624BA13D21549444C424B546F
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft
Manifest number: 81
Signing time: Fri 09 Oct 2026 08:34:29 +0000
Manifest this update: Fri 09 Oct 2026 08:34:29 +0000
Manifest next update: Fri 16 Oct 2026 08:34:29 +0000
Files and hashes: 1: 3n3GT5n2JAYkuhPSFUlETEJLVG8.crl (hash: pl15m+I16CGZ6gDqPbma1FQB/6Qyp7sPhNVqDBlpteI=)
2: 616D1BAC6B9C11F1A5AE9DAA6D47A888.roa (hash: Q8pRs/zL4LH+ArnuogEwPHVYr3czyBo1S7DW7cvjosM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.crl
rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91567EF, serialNumber=DE7DC64F99F6240624BA13D21549444C424B546F
Validity
Not Before: Oct 9 08:34:29 2026 GMT
Not After : Oct 16 08:34:29 2026 GMT
Subject: CN=6ac8a715-7171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:bb:11:bb:aa:e5:c1:93:24:7a:bc:c6:29:
fc:27:21:21:f0:49:7a:c1:10:41:27:21:98:ba:ca:
5c:49:ad:0c:39:bc:e8:a6:7c:62:ed:f5:f1:e6:79:
13:23:df:6f:ec:e1:21:3a:0c:e9:5a:ce:67:cf:39:
04:31:25:5e:6e:e7:93:00:16:b1:6c:8b:ee:8a:b2:
bc:d6:c7:f4:60:cf:4b:de:8f:d1:36:1d:b7:5e:0c:
46:f3:14:f0:12:06:41:9e:75:c3:36:4e:75:a4:68:
e1:28:76:1a:6b:9f:3f:b9:34:eb:56:87:7b:0d:e4:
b0:9c:6b:4f:92:db:69:f4:7e:a1:a5:30:3d:0b:73:
e0:f2:9f:4c:f6:b5:3a:8d:a2:1c:4a:fb:d0:a3:e2:
8d:76:d0:21:0f:07:6b:b7:8d:26:97:f5:45:b1:8f:
f1:ba:93:3e:bb:0c:c4:3b:e5:82:fc:2e:4c:2c:84:
a1:59:4b:29:cb:26:7e:4e:9b:bb:39:2f:6b:46:17:
1f:a7:23:b4:31:4f:8c:94:73:b8:e6:98:c3:e7:d5:
57:e8:f8:d0:8f:30:d3:59:54:ca:75:5a:81:83:ff:
5a:98:42:bc:4b:e8:e6:08:de:24:e5:0f:e1:b9:4f:
10:dc:29:5c:bd:dd:7d:9d:e7:22:c8:b5:53:b1:48:
5b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:80:CB:B7:E1:1C:A0:AE:2E:37:12:97:EC:21:77:D6:49:09:57:2F
X509v3 Authority Key Identifier:
keyid:DE:7D:C6:4F:99:F6:24:06:24:BA:13:D2:15:49:44:4C:42:4B:54:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:f5:3e:b0:e9:63:12:ef:22:d6:03:db:b1:c6:c3:5e:50:71:
01:c1:87:be:21:b2:1b:05:45:16:b7:14:64:07:b5:0f:16:e1:
95:b7:1e:56:60:c9:71:a5:f1:90:10:d5:bd:7b:53:f2:31:e0:
70:de:e8:e8:67:8f:82:9d:1c:de:46:e5:43:4b:7b:9e:af:f0:
57:7a:aa:22:fe:31:63:0e:82:9a:a1:d8:5b:9c:44:4f:c9:12:
da:0c:77:ee:38:8a:49:4a:ba:ea:c3:9a:bc:4d:68:12:ba:92:
97:16:b5:20:16:6e:f2:b6:03:45:24:30:ea:46:ca:c8:e0:cf:
ee:ef:ab:dc:4f:76:a9:fb:e8:5e:71:c6:97:e3:8b:b0:94:59:
61:d8:16:b0:1e:1b:bf:d6:73:fb:5f:84:98:f6:1d:8a:80:98:
f5:c3:33:7f:63:88:f5:59:1b:81:c7:db:48:98:12:04:59:ef:
ba:d1:e6:cf:6c:7e:e6:72:85:af:c0:03:ef:c3:af:14:ef:bd:
8b:ad:61:57:54:6e:76:79:48:92:d7:6d:b0:d0:41:19:35:2b:
38:7f:b9:a3:32:25:25:6c:23:d5:11:71:0a:f8:0d:97:a5:50:
6b:54:f1:9e:da:df:f9:2e:8a:35:5f:6d:51:4c:7b:57:9c:09:
a1:5c:2a:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY3RUYxMTAvBgNVBAUTKERFN0RDNjRGOTlGNjI0MDYyNEJBMTNEMjE1NDk0NDRD
NDI0QjU0NkYwHhcNMjYxMDA5MDgzNDI5WhcNMjYxMDE2MDgzNDI5WjAYMRYwFAYD
VQQDEw02YWM4YTcxNS03MTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAycS7Ebuq5cGTJHq8xin8JyEh8El6wRBBJyGYuspcSa0MObzopnxi7fXx5nkT
I99v7OEhOgzpWs5nzzkEMSVebueTABaxbIvuirK81sf0YM9L3o/RNh23XgxG8xTw
EgZBnnXDNk51pGjhKHYaa58/uTTrVod7DeSwnGtPkttp9H6hpTA9C3Pg8p9M9rU6
jaIcSvvQo+KNdtAhDwdrt40ml/VFsY/xupM+uwzEO+WC/C5MLIShWUspyyZ+Tpu7
OS9rRhcfpyO0MU+MlHO45pjD59VX6PjQjzDTWVTKdVqBg/9amEK8S+jmCN4k5Q/h
uU8Q3Clcvd19neciyLVTsUhbbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNyAy7fh
HKCuLjcSl+whd9ZJCVcvMB8GA1UdIwQYMBaAFN59xk+Z9iQGJLoT0hVJRExCS1Rv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdFRi81QzlDOEFDMDEx
M0YxMUYxODIxRTQ4RjAyMDNEOEM2Ny8zbjNHVDVuMkpBWWt1aFBTRlVsRVRFSkxW
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNuM0dUNW4ySkFZa3VoUFNGVWxFVEVKTFZHOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjdFRi81QzlDOEFDMDExM0YxMUYxODIxRTQ4RjAyMDNEOEM2Ny8zbjNHVDVuMkpB
WWt1aFBTRlVsRVRFSkxWRzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIPU+sOljEu8i1gPbscbDXlBxAcGHviGyGwVFFrcUZAe1DxbhlbceVmDJcaXx
kBDVvXtT8jHgcN7o6GePgp0c3kblQ0t7nq/wV3qqIv4xYw6CmqHYW5xET8kS2gx3
7jiKSUq66sOavE1oErqSlxa1IBZu8rYDRSQw6kbKyODP7u+r3E92qfvoXnHGl+OL
sJRZYdgWsB4bv9Zz+1+EmPYdioCY9cMzf2OI9VkbgcfbSJgSBFnvutHmz2x+5nKF
r8AD78OvFO+9i61hV1RudnlIktdtsNBBGTUrOH+5ozIlJWwj1RFxCvgNl6VQa1Tx
ntrf+S6KNV9tUUx7V5wJoVwq/g==
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:58:16 2026 by rpki-client