
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
File: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft (raw, json)
Hash identifier: PMcZil6NxRQhs7e7tVDsoN2d53ZaLJoUM55I2b06C+c=
Subject key identifier: 32:D4:E0:F8:25:3C:C3:02:17:88:D5:12:F5:ED:0A:A9:8E:2F:48:3D
Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
Certificate issuer: /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Certificate serial: 0CD3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
Manifest number: 0CC9
Signing time: Sun 20 Sep 2026 18:27:18 +0000
Manifest this update: Sun 20 Sep 2026 18:27:17 +0000
Manifest next update: Sun 27 Sep 2026 18:27:17 +0000
Files and hashes: 1: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl (hash: Fhs5bAV1Cqw9MEJ1+dFPrZFH14vBx5js+aBO+RkBYEE=)
2: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (hash: veYCT0YVn2lsSh/a1SemHmCMUXzXqFx3N+q0M958UTg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:27:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3283 (0xcd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91822BF, serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Validity
Not Before: Sep 20 18:27:17 2026 GMT
Not After : Sep 27 18:27:17 2026 GMT
Subject: CN=6ab02586-e3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:33:b7:87:93:d7:a1:9f:72:7a:df:f2:72:05:
a9:5e:8a:fc:ab:78:26:2c:c3:4d:d8:3f:a3:2f:41:
f4:97:9f:e8:db:29:66:fa:df:75:65:eb:ff:b1:55:
8b:2d:fa:1e:37:21:13:95:dd:96:6f:9b:61:33:54:
fa:82:f8:81:10:2e:46:b4:d1:e7:59:3e:69:c0:c5:
c9:55:83:55:07:5c:48:3a:f9:0d:b6:74:f7:a6:a0:
ed:00:67:28:17:aa:29:72:3f:60:ad:d2:6c:5b:46:
7d:47:dc:d3:fb:ce:1d:b2:89:ce:ae:91:bb:7c:ce:
4c:dd:14:9b:12:d1:48:ce:77:86:c6:3d:af:53:42:
0b:2f:30:76:0e:17:21:b0:8c:d1:87:ca:a7:90:82:
fe:cc:d0:4e:0b:3d:17:5d:16:de:a5:a5:cb:3c:4f:
9b:f2:e9:32:19:24:5d:35:52:32:fb:c5:5d:ef:a5:
46:2b:ea:0c:2b:5c:ae:b3:73:a1:9f:91:04:b4:a7:
2e:bc:bb:01:46:81:a9:87:b6:e3:f7:c7:9a:06:b7:
f1:09:02:0d:cd:41:fe:08:88:9c:f5:8d:32:a8:9c:
e1:2e:4a:9b:f3:37:86:78:cb:2f:ae:e2:b4:f7:4b:
81:57:e0:2b:b0:da:09:98:75:b4:2e:09:a4:9d:25:
98:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D4:E0:F8:25:3C:C3:02:17:88:D5:12:F5:ED:0A:A9:8E:2F:48:3D
X509v3 Authority Key Identifier:
keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:21:3d:12:a9:8a:cc:0e:e3:5a:12:ca:54:fe:4c:bd:f9:0e:
ff:02:67:ed:5f:a9:63:10:10:d5:dd:33:b4:ac:e8:d5:66:a9:
69:bf:3a:7c:a1:33:b0:4f:b0:3e:86:34:eb:38:f1:8c:5c:6b:
08:f8:d5:b4:3a:b0:5e:de:65:9d:26:46:4d:1e:c9:64:b4:00:
31:66:0c:a8:73:09:f4:fc:06:3f:32:c1:21:92:eb:60:13:76:
2e:cf:6e:3c:31:aa:5b:34:6b:6f:07:7f:e0:b0:a4:99:28:34:
68:87:4f:40:6a:d6:b4:81:c8:9c:50:b9:3e:cf:89:e4:62:99:
17:ab:66:8a:a8:66:dd:87:60:fd:ad:94:9e:2b:94:3d:3d:23:
c8:64:8b:ee:d1:00:23:2a:59:80:cb:e0:23:de:63:68:fd:a1:
e0:4a:02:08:e6:36:cc:75:b0:f2:f7:53:83:37:b3:84:b7:f4:
5a:97:64:3f:57:3c:f5:e3:7c:24:f3:e0:67:6b:ef:45:3f:85:
f2:8a:70:9d:71:55:a7:8e:13:23:e5:c4:6b:bc:7b:7d:f7:f1:
6e:d0:84:a8:2d:b2:6f:8b:ed:5d:9c:73:e9:c6:2e:f1:26:4b:
70:aa:b1:b5:e0:cd:6f:cb:15:0a:b3:03:31:cd:c0:ca:3e:ea:
ce:f6:99:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:45:30 2026 by rpki-client