
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
File: 3K6HG3xct5vH7PZ5s7LTyVan2eM.mft (raw, json)
Hash identifier: IIvLWQnpMYxEnPPfzzbobf/Z9FOumi6kYDiQRzeGe6c=
Subject key identifier: 6E:31:E8:CE:E1:D8:D9:68:00:3F:11:29:D0:F8:7E:6C:71:13:AD:E7
Authority key identifier: DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
Certificate issuer: /CN=A91604AC/serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
Certificate serial: 077B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
Manifest number: 076D
Signing time: Thu 24 Sep 2026 21:39:32 +0000
Manifest this update: Thu 24 Sep 2026 21:39:32 +0000
Manifest next update: Thu 01 Oct 2026 21:39:32 +0000
Files and hashes: 1: 3K6HG3xct5vH7PZ5s7LTyVan2eM.crl (hash: yVZIXB00oVG5VIeaPB9nZjElj/a2fA6yzHu6dt7wf6o=)
2: 0081F3D6F22111EE8EEC070EC4F9AE02.roa (hash: gt5MzzOyMRjHAQJ1OB2Ov2agdEJbjl0iI4HuG5lS+Fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl
rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:39:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1915 (0x77b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91604AC, serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
Validity
Not Before: Sep 24 21:39:32 2026 GMT
Not After : Oct 1 21:39:32 2026 GMT
Subject: CN=6ab59894-7b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:33:ce:ed:fd:91:5a:cb:19:c4:47:4d:ce:
77:26:a6:a4:81:28:96:68:f8:73:14:df:5a:13:4b:
70:86:da:68:97:00:63:5d:4d:fe:ee:59:1d:09:30:
a1:2e:ab:44:d5:10:e5:d4:70:91:85:85:78:94:47:
64:83:95:2c:d4:c6:a2:8c:9f:a3:6e:0d:bf:f4:1c:
54:1d:aa:73:28:f4:a0:ae:2f:04:07:b4:aa:40:79:
47:6a:52:6a:11:c2:eb:41:cf:fc:ce:8a:69:d8:ea:
95:11:1b:e9:31:88:d7:a9:94:8f:34:dd:5b:0b:bb:
75:d8:c8:f1:a2:8d:4c:e1:97:a3:46:28:23:f1:d7:
5e:93:61:3b:6d:78:58:47:9d:b5:67:1d:ba:72:eb:
7a:99:a9:d4:f1:1f:60:d9:1a:ca:52:11:d2:d2:1b:
9d:d6:33:8d:89:ca:23:d4:2c:ce:dc:e3:25:bf:90:
a2:61:da:8b:ea:b8:75:29:83:20:27:36:ee:87:9e:
a2:75:b2:e2:66:cc:a2:4b:c3:40:4a:c0:16:67:fa:
72:83:a2:ce:e1:cc:ae:1c:42:21:9d:35:86:da:7d:
44:14:65:78:df:d5:0b:72:ad:29:59:f3:b9:94:18:
5f:06:f6:0b:43:c1:dc:45:86:25:74:6c:98:47:3e:
95:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:31:E8:CE:E1:D8:D9:68:00:3F:11:29:D0:F8:7E:6C:71:13:AD:E7
X509v3 Authority Key Identifier:
keyid:DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:59:11:d0:bc:4d:3d:df:f8:4b:eb:b5:ee:3b:9d:1e:69:82:
5e:11:82:7d:41:33:b4:07:9f:ab:c6:7d:9e:47:04:d2:3a:90:
79:9c:45:1d:6c:4b:5d:b9:e7:95:35:0e:9e:f7:5a:ce:9b:f7:
66:31:5e:d8:88:44:0b:b3:43:48:92:9f:e5:61:0a:5b:d4:08:
24:6c:f0:07:01:80:de:35:75:ab:7d:eb:1d:15:49:70:30:4d:
fa:4c:34:e5:c4:33:cc:82:48:4f:de:fc:c2:3a:81:bb:39:76:
89:a6:88:df:32:a9:59:d4:f6:4b:08:2c:a9:80:19:21:e9:66:
05:38:2f:88:a3:fa:9d:0a:7d:32:ee:f2:00:c3:f9:98:a4:84:
e2:a1:f4:34:7c:9e:b1:db:ca:22:cb:a7:e8:7c:d1:10:17:60:
78:6b:44:f6:bf:1b:d5:80:9e:9d:4a:15:70:e7:5b:f0:42:6d:
65:a6:b9:b4:af:e4:43:40:d6:23:a5:e5:4a:a4:e4:a4:fd:5e:
51:99:49:d4:7c:38:14:3c:4a:74:3f:31:1b:b6:6a:da:e2:8a:
34:41:63:e9:c0:fb:a5:d9:4e:85:e4:20:b0:96:19:c0:d1:4e:
c2:f9:1e:74:ef:d5:a1:61:3f:f4:00:fc:9e:d6:e0:8d:06:9b:
1f:c8:a5:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA0QUMxMTAvBgNVBAUTKERDQUU4NzFCN0M1Q0I3OUJDN0VDRjY3OUIzQjJEM0M5
NTZBN0Q5RTMwHhcNMjYwOTI0MjEzOTMyWhcNMjYxMDAxMjEzOTMyWjAYMRYwFAYD
VQQDEw02YWI1OTg5NC03YjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtyUzzu39kVrLGcRHTc53JqakgSiWaPhzFN9aE0twhtpolwBjXU3+7lkdCTCh
LqtE1RDl1HCRhYV4lEdkg5Us1MaijJ+jbg2/9BxUHapzKPSgri8EB7SqQHlHalJq
EcLrQc/8zopp2OqVERvpMYjXqZSPNN1bC7t12Mjxoo1M4ZejRigj8ddek2E7bXhY
R521Zx26cut6manU8R9g2RrKUhHS0hud1jONicoj1CzO3OMlv5CiYdqL6rh1KYMg
Jzbuh56idbLiZsyiS8NASsAWZ/pyg6LO4cyuHEIhnTWG2n1EFGV439ULcq0pWfO5
lBhfBvYLQ8HcRYYldGyYRz6V7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG4x6M7h
2NloAD8RKdD4fmxxE63nMB8GA1UdIwQYMBaAFNyuhxt8XLebx+z2ebOy08lWp9nj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy80OTcyMDk5Njgx
NDUxMUVCQjJERDVENEJDNEY5QUUwMi8zSzZIRzN4Y3Q1dkg3UFo1czdMVHlWYW4y
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNLNkhHM3hjdDV2SDdQWjVzN0xUeVZhbjJlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDRBQy80OTcyMDk5NjgxNDUxMUVCQjJERDVENEJDNEY5QUUwMi8zSzZIRzN4Y3Q1
dkg3UFo1czdMVHlWYW4yZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZlkR0LxNPd/4S+u17judHmmCXhGCfUEztAefq8Z9nkcE0jqQeZxFHWxLXbnn
lTUOnvdazpv3ZjFe2IhEC7NDSJKf5WEKW9QIJGzwBwGA3jV1q33rHRVJcDBN+kw0
5cQzzIJIT978wjqBuzl2iaaI3zKpWdT2SwgsqYAZIelmBTgviKP6nQp9Mu7yAMP5
mKSE4qH0NHyesdvKIsun6HzREBdgeGtE9r8b1YCenUoVcOdb8EJtZaa5tK/kQ0DW
I6XlSqTkpP1eUZlJ1Hw4FDxKdD8xG7Zq2uKKNEFj6cD7pdlOheQgsJYZwNFOwvke
dO/VoWE/9AD8ntbgjQabH8il4Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 17:39:50 2026 by rpki-client