
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft
File: _3cE5KczP2k3LZ8zQfjQAstKwM8.mft (raw, json)
Hash identifier: Hl7atYhWa+2rGVOK7VdfqO8bZhCBZNtAsbQsu4su+Uw=
Subject key identifier: 83:B3:BC:B9:8C:15:86:47:90:1A:BD:D5:CF:F5:51:29:82:E7:C4:AB
Authority key identifier: FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF
Certificate issuer: /CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF
Certificate serial: 1E21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft
Manifest number: 1E08
Signing time: Sun 20 Sep 2026 16:03:27 +0000
Manifest this update: Sun 20 Sep 2026 16:03:26 +0000
Manifest next update: Sun 27 Sep 2026 16:03:26 +0000
Files and hashes: 1: _3cE5KczP2k3LZ8zQfjQAstKwM8.crl (hash: 0N90XPM9Y5mW4VYqUehu5Mp46nXGf3vxR9lJEdTpuH4=)
2: DB5DF87886EF11F19E006003A7EE528E.roa (hash: S1i8KORbMjRrG15OVZfqhE8QgQAFH9j0NIxnDNRY3Gw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl
rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 16:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7713 (0x1e21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919992D, serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF
Validity
Not Before: Sep 20 16:03:26 2026 GMT
Not After : Sep 27 16:03:26 2026 GMT
Subject: CN=6ab003ce-79ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f7:72:3c:ee:4c:80:13:fb:4a:53:de:b1:d0:
56:13:51:c2:1d:c7:82:95:dc:71:6a:d2:70:fd:c7:
a8:0a:ea:84:b9:32:48:4d:51:0e:c6:bc:c3:3e:49:
6d:4c:81:71:08:48:9b:8d:ec:b0:92:a7:49:27:fd:
9f:97:c8:4e:95:b3:e7:c6:16:3b:d9:54:b0:47:d0:
e9:6d:6e:ea:30:09:84:68:71:08:e8:73:4a:2a:23:
ba:df:ab:9c:80:b5:a2:16:a1:1b:70:0c:38:17:d1:
bc:7b:20:da:60:7d:ee:63:28:9f:0f:5f:f1:c0:b8:
04:73:9d:01:78:fa:2f:a6:0d:fd:bc:41:d9:a1:ec:
cf:a0:a2:70:ba:a8:a0:6b:9e:e5:d2:2b:9a:48:ca:
a8:8b:7e:11:e5:5e:46:a0:0b:0e:f9:2e:22:10:5e:
b0:b7:30:8a:cc:b8:1f:79:ed:52:56:ea:da:01:9e:
7b:b2:a5:f8:a0:70:80:73:4d:58:dc:c0:f7:a7:ef:
87:5a:61:72:d1:40:81:2c:e3:6e:a1:0d:01:c7:ba:
a5:ba:f3:fd:f3:7e:3e:19:b6:71:2c:52:b3:ac:fe:
88:a5:9e:46:d5:93:88:b2:67:bf:88:b9:bf:c9:a3:
84:9e:ac:8f:03:42:da:8a:1e:b4:09:13:ae:f7:6f:
69:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B3:BC:B9:8C:15:86:47:90:1A:BD:D5:CF:F5:51:29:82:E7:C4:AB
X509v3 Authority Key Identifier:
keyid:FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d9:5c:5a:d6:51:65:c8:d3:ba:7e:9f:9f:d5:ca:4b:ac:d2:
bd:f8:43:76:31:c4:9c:99:e9:22:93:b7:d9:7f:da:6b:86:40:
ba:84:05:a9:c0:59:9c:68:4b:5d:2e:94:42:d2:c6:bb:21:71:
b3:35:54:4e:a2:ec:8e:23:49:1e:74:c2:76:f3:bd:1e:43:df:
f2:54:78:36:5c:c3:9a:e1:a7:98:8e:08:28:d5:cb:0d:02:17:
77:9c:54:d8:f6:17:d0:18:7a:69:58:6a:82:28:9d:ab:18:be:
7b:1f:27:46:29:89:3a:a3:f8:69:9f:6c:38:eb:9e:32:c8:de:
92:bd:6f:e8:0b:00:7e:da:41:24:e5:0d:a3:5b:2b:5e:7f:c3:
26:8a:3c:7d:d9:8a:d8:4b:aa:33:4e:3c:13:50:93:f5:07:3d:
3a:76:95:bb:79:b8:48:46:dc:fa:20:32:dd:3e:2d:2c:8a:a3:
ef:e0:47:e6:ae:bd:d3:80:69:aa:81:e3:b8:96:81:99:f3:ae:
89:15:60:bc:f2:c7:db:ca:1e:a9:ba:6d:bc:e6:f6:5e:3b:02:
1b:90:7d:a3:1b:34:d1:df:d9:d5:ee:17:b9:0b:12:a9:2e:1c:
f0:b9:7f:b4:36:0b:56:7b:4c:33:54:6f:c0:23:de:b6:65:8a:
a0:7f:d8:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk5MkQxMTAvBgNVBAUTKEZGNzcwNEU0QTczMzNGNjkzNzJEOUYzMzQxRjhEMDAy
Q0I0QUMwQ0YwHhcNMjYwOTIwMTYwMzI2WhcNMjYwOTI3MTYwMzI2WjAYMRYwFAYD
VQQDEw02YWIwMDNjZS03OWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5vdyPO5MgBP7SlPesdBWE1HCHceCldxxatJw/ceoCuqEuTJITVEOxrzDPklt
TIFxCEibjeywkqdJJ/2fl8hOlbPnxhY72VSwR9DpbW7qMAmEaHEI6HNKKiO636uc
gLWiFqEbcAw4F9G8eyDaYH3uYyifD1/xwLgEc50BePovpg39vEHZoezPoKJwuqig
a57l0iuaSMqoi34R5V5GoAsO+S4iEF6wtzCKzLgfee1SVuraAZ57sqX4oHCAc01Y
3MD3p++HWmFy0UCBLONuoQ0Bx7qluvP9834+GbZxLFKzrP6IpZ5G1ZOIsme/iLm/
yaOEnqyPA0Laih60CROu929pgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIOzvLmM
FYZHkBq91c/1USmC58SrMB8GA1UdIwQYMBaAFP93BOSnMz9pNy2fM0H40ALLSsDP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTkyRC85MTMzMjlGNEJC
QTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAyazNMWjh6UWZqUUFzdEt3
TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL18zY0U1S2N6UDJrM0xaOHpRZmpRQXN0S3dNOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTkyRC85MTMzMjlGNEJCQTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAy
azNMWjh6UWZqUUFzdEt3TTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAftlcWtZRZcjTun6fn9XKS6zSvfhDdjHEnJnpIpO32X/aa4ZAuoQFqcBZnGhL
XS6UQtLGuyFxszVUTqLsjiNJHnTCdvO9HkPf8lR4NlzDmuGnmI4IKNXLDQIXd5xU
2PYX0Bh6aVhqgiidqxi+ex8nRimJOqP4aZ9sOOueMsjekr1v6AsAftpBJOUNo1sr
Xn/DJoo8fdmK2EuqM048E1CT9Qc9OnaVu3m4SEbc+iAy3T4tLIqj7+BH5q6904Bp
qoHjuJaBmfOuiRVgvPLH28oeqbptvOb2XjsCG5B9oxs00d/Z1e4XuQsSqS4c8Ll/
tDYLVntMM1RvwCPetmWKoH/Ypw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:08:05 2026 by rpki-client