
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
File: 3dU_UiXtL42o0J56rZgsgLbOrag.mft (raw, json)
Hash identifier: 8NGLqkeRzGoi15KHMPMb2ro1YUQz4cosKHhcY9R1coc=
Subject key identifier: 53:15:4C:88:6B:18:31:29:B5:B8:47:73:63:57:34:A9:E8:0A:A9:84
Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
Certificate issuer: /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
Certificate serial: 08AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
Manifest number: 2EA2
Signing time: Wed 14 Oct 2026 16:46:02 +0000
Manifest this update: Wed 14 Oct 2026 16:46:02 +0000
Manifest next update: Wed 21 Oct 2026 16:46:02 +0000
Files and hashes: 1: 3dU_UiXtL42o0J56rZgsgLbOrag.crl (hash: CEr5y8hcZRjdVnvijVgRf1u7XQtLPcDvAGS/ULEg8A4=)
2: 10C418C4D40011F083CDC127C4F9AE02.roa (hash: trEW3l3BfddlaJ5NOXeTcUWfTHS4ZdqJFRp+g2C/O5Y=)
3: CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa (hash: yofMdWFa6G+5IWdYK6Mk2y69/fwGAZwVAxMNAxb1xeg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl
rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 16:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2220 (0x8ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
Validity
Not Before: Oct 14 16:46:02 2026 GMT
Not After : Oct 21 16:46:02 2026 GMT
Subject: CN=6acfb1ca-916c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6e:81:80:8b:9e:43:7c:61:2b:42:eb:89:d1:
b0:f1:07:b5:06:21:a6:0d:dc:4b:3b:3d:a9:61:67:
ea:92:25:3a:a7:45:ea:98:67:3b:ce:1a:23:a0:3c:
ef:96:74:5b:ee:4d:db:0f:3b:7b:ad:a5:20:55:1d:
5e:e8:89:b7:7b:4b:0a:1b:98:9a:cc:bb:01:83:ae:
dd:c0:62:d1:56:9d:1e:31:a0:cb:47:44:02:5c:a9:
27:24:81:ae:57:ac:6c:5d:5b:83:ed:c0:ce:eb:c5:
44:38:5b:dc:bc:fb:f0:84:4e:f3:35:cd:1b:0d:d4:
b1:62:cc:2a:a4:04:ca:a5:38:19:c7:c1:05:1a:9f:
b9:e6:09:56:f4:1a:c6:13:e1:9d:05:41:c2:e3:4e:
58:ae:c2:0b:8f:fb:5b:a6:d3:86:50:78:3d:14:a5:
3b:db:07:b2:3e:4f:c5:95:72:69:19:b2:25:4d:dc:
a1:19:5e:f5:5c:3f:6c:21:5c:53:18:d8:ef:1b:a4:
0f:e1:17:c1:09:16:7a:8d:48:1d:19:bb:44:af:2b:
32:c0:52:75:27:8e:e3:15:fd:1a:6e:6c:05:37:ec:
ce:86:08:fd:9b:d5:6c:88:de:82:f5:2e:5b:40:27:
0c:6e:c7:d4:a1:c7:ce:c3:56:60:f8:13:31:14:46:
65:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:15:4C:88:6B:18:31:29:B5:B8:47:73:63:57:34:A9:E8:0A:A9:84
X509v3 Authority Key Identifier:
keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:68:26:a1:f5:40:6e:0c:df:a9:3b:1e:1e:c0:96:38:4b:39:
78:cd:95:52:8c:56:1c:f9:ce:a4:e8:7f:f4:2a:68:9d:23:7a:
0a:80:20:2e:5d:17:6a:10:b6:2e:3c:10:08:93:ee:07:55:8a:
2e:93:3d:23:b7:36:09:58:0c:d1:32:7f:8c:8d:41:65:1f:93:
8a:06:b8:aa:83:9d:0e:bf:c4:4d:b5:4e:78:70:90:ee:7a:64:
d5:7b:65:c5:a0:db:33:22:b3:47:7c:03:2f:ff:96:e0:07:f9:
28:cf:81:4c:a2:50:2e:75:83:e1:90:f0:95:0b:6a:a5:87:63:
22:a4:f3:a5:56:d9:3f:68:75:1e:c6:7a:da:fa:8c:39:c6:f8:
a5:a9:f1:02:63:7e:c6:b7:5f:10:22:2f:31:51:dd:92:34:e1:
5b:fb:f5:b5:67:f8:da:19:60:3d:07:3a:a2:2a:0b:1d:59:4f:
a7:66:6c:61:92:73:c1:2b:4c:28:81:18:a9:0d:30:fe:a0:db:
80:b9:54:e5:41:00:4d:ca:29:40:8a:d6:1a:9a:b9:8a:c8:df:
79:c8:38:94:83:8a:0d:cb:b8:3c:62:3d:66:48:ca:e2:17:20:
88:da:3f:7f:4f:43:09:3e:4f:f3:d8:cd:e6:1c:ee:50:7f:14:
69:17:5f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:58:54 2026 by rpki-client