
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A31C0/34613210B25511F197AE15A16911F970/3HWjHpKK2ZV8tMv1JfObkGZ39SU.mft
File: 3HWjHpKK2ZV8tMv1JfObkGZ39SU.mft (raw, json)
Hash identifier: ezHdSx6cFkFWLOyzJNBTwI/C2PDUrgABrr0p3bxTH5k=
Subject key identifier: B9:87:8E:58:15:F8:76:67:28:B3:E3:4A:DC:89:67:F5:25:44:5E:ED
Authority key identifier: DC:75:A3:1E:92:8A:D9:95:7C:B4:CB:F5:25:F3:9B:90:66:77:F5:25
Certificate issuer: /CN=A91A31C0/serialNumber=DC75A31E928AD9957CB4CBF525F39B906677F525
Certificate serial: 1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HWjHpKK2ZV8tMv1JfObkGZ39SU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A31C0/34613210B25511F197AE15A16911F970/3HWjHpKK2ZV8tMv1JfObkGZ39SU.mft
Manifest number: 13
Signing time: Fri 09 Oct 2026 09:58:52 +0000
Manifest this update: Fri 09 Oct 2026 09:58:52 +0000
Manifest next update: Fri 16 Oct 2026 09:58:52 +0000
Files and hashes: 1: 3HWjHpKK2ZV8tMv1JfObkGZ39SU.crl (hash: A9OKYRdpn5TmGV44a3JPUowYpCoe6Ghc3k7mxQ7spHo=)
2: A7A66002B28111F1B7FF07293811F970.roa (hash: GfCaXzmg8uNxBhmD5fltb9njQ/nHLq5Kv9p6y+3kPDc=)
3: W-mwtkhRqUa5cmJ0GwAGEtGc2qU.asa (hash: pnSPT5PSELeKVD+d5TJLQZDzGxVOkebFfsIrV6jJZWo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A31C0/34613210B25511F197AE15A16911F970/3HWjHpKK2ZV8tMv1JfObkGZ39SU.crl
rsync://rpki.apnic.net/member_repository/A91A31C0/34613210B25511F197AE15A16911F970/3HWjHpKK2ZV8tMv1JfObkGZ39SU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HWjHpKK2ZV8tMv1JfObkGZ39SU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 09:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A31C0, serialNumber=DC75A31E928AD9957CB4CBF525F39B906677F525
Validity
Not Before: Oct 9 09:58:52 2026 GMT
Not After : Oct 16 09:58:52 2026 GMT
Subject: CN=6ac8badc-eca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:42:50:c8:36:8f:6c:29:0b:42:4b:f3:7d:
e6:3c:62:a1:25:27:12:e3:ff:cc:79:75:c6:db:92:
5a:5f:32:93:b0:9d:f8:da:59:91:ef:24:56:fb:77:
cc:6e:cf:67:e9:b9:4e:f0:c3:4a:3b:c3:7d:29:d8:
2a:98:63:a6:ae:be:17:a9:91:1b:da:6a:b6:36:9c:
05:0f:af:bd:d0:8d:7d:fd:0c:84:d8:c4:b5:22:a5:
db:a5:d7:c0:d5:62:0b:95:b6:bb:1b:2b:0a:32:e8:
dd:b7:6f:62:c8:78:64:42:d1:c4:de:02:c1:1a:e4:
a1:20:a6:bd:5d:a4:ac:ed:50:64:ca:5a:1a:41:ac:
45:b8:95:b5:08:c7:96:a2:a2:72:92:91:bb:7c:55:
bc:a1:a0:ca:42:c2:39:c2:8f:c9:48:5e:7a:d2:c1:
68:65:3b:91:b9:ed:fc:4b:a2:86:d5:cf:93:5e:5b:
6e:a9:6b:86:18:d8:a1:18:1b:23:b1:1e:02:91:bf:
da:13:16:37:67:c1:64:a4:d1:d3:3e:f9:51:af:f0:
93:bb:4c:f8:c8:df:1c:a7:5b:84:d4:56:c3:e5:28:
d5:07:3d:3d:7d:f1:19:a8:2d:f3:e6:69:bb:13:b4:
e0:5d:53:26:3a:13:97:7d:24:eb:fa:6f:a6:56:ba:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:87:8E:58:15:F8:76:67:28:B3:E3:4A:DC:89:67:F5:25:44:5E:ED
X509v3 Authority Key Identifier:
keyid:DC:75:A3:1E:92:8A:D9:95:7C:B4:CB:F5:25:F3:9B:90:66:77:F5:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A31C0/34613210B25511F197AE15A16911F970/3HWjHpKK2ZV8tMv1JfObkGZ39SU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HWjHpKK2ZV8tMv1JfObkGZ39SU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31C0/34613210B25511F197AE15A16911F970/3HWjHpKK2ZV8tMv1JfObkGZ39SU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:72:d5:23:25:e0:a3:51:b7:9d:33:3a:33:3c:e5:61:4a:a6:
9d:a6:51:76:56:19:6a:57:70:fb:9c:f0:3d:43:c3:0f:9c:cf:
31:b0:1f:d0:60:5b:94:57:46:bf:e0:f8:76:af:1e:de:ee:51:
e4:c3:9a:a6:d7:22:73:ca:43:ec:4c:b7:0b:e9:4a:7a:23:30:
58:20:22:20:c3:71:cd:e8:22:7f:72:49:53:a3:45:45:c9:bb:
06:5e:9b:52:98:bd:68:36:55:8f:fb:87:ae:a6:41:d8:f3:14:
44:4e:29:b6:f6:73:72:21:46:0e:5a:6d:a9:c4:91:4d:90:35:
9c:65:d6:10:ff:6a:b3:ee:85:0e:c3:5e:24:a0:47:99:47:f5:
8c:3a:e0:e4:85:f4:94:92:c5:a9:1a:5f:5f:c2:a4:3d:e8:ac:
e3:5a:1c:03:00:e0:30:af:3f:5b:68:cc:da:ca:e4:c3:3b:e0:
80:2e:fd:95:14:a9:a7:a5:7f:ed:50:33:b5:f3:5f:e4:0c:e3:
ce:0f:b6:ed:4f:98:33:76:1f:02:d4:44:10:b8:a1:84:ca:59:
c6:52:13:13:c3:7d:e5:a3:76:f5:c8:ab:bf:28:dd:28:00:19:
2c:2a:3f:a0:d7:85:73:7e:8f:1b:01:38:9e:44:00:45:92:1e:
56:b1:0e:e5
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MzFDMDExMC8GA1UEBRMoREM3NUEzMUU5MjhBRDk5NTdDQjRDQkY1MjVGMzlCOTA2
Njc3RjUyNTAeFw0yNjEwMDkwOTU4NTJaFw0yNjEwMTYwOTU4NTJaMBgxFjAUBgNV
BAMTDTZhYzhiYWRjLWVjYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOPkJQyDaPbCkLQkvzfeY8YqElJxLj/8x5dcbbklpfMpOwnfjaWZHvJFb7d8xu
z2fpuU7ww0o7w30p2CqYY6auvhepkRvaarY2nAUPr73QjX39DITYxLUipdul18DV
YguVtrsbKwoy6N23b2LIeGRC0cTeAsEa5KEgpr1dpKztUGTKWhpBrEW4lbUIx5ai
onKSkbt8VbyhoMpCwjnCj8lIXnrSwWhlO5G57fxLoobVz5NeW26pa4YY2KEYGyOx
HgKRv9oTFjdnwWSk0dM++VGv8JO7TPjI3xynW4TUVsPlKNUHPT198RmoLfPmabsT
tOBdUyY6E5d9JOv6b6ZWusEjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUuYeOWBX4
dmcos+NK3Iln9SVEXu0wHwYDVR0jBBgwFoAU3HWjHpKK2ZV8tMv1JfObkGZ39SUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzMUMwLzM0NjEzMjEwQjI1
NTExRjE5N0FFMTVBMTY5MTFGOTcwLzNIV2pIcEtLMlpWOHRNdjFKZk9ia0daMzlT
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM0hXakhwS0syWlY4dE12MUpmT2JrR1ozOVNVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz
MUMwLzM0NjEzMjEwQjI1NTExRjE5N0FFMTVBMTY5MTFGOTcwLzNIV2pIcEtLMlpW
OHRNdjFKZk9ia0daMzlTVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBNctUjJeCjUbedMzozPOVhSqadplF2VhlqV3D7nPA9Q8MPnM8xsB/QYFuUV0a/
4Ph2rx7e7lHkw5qm1yJzykPsTLcL6Up6IzBYICIgw3HN6CJ/cklTo0VFybsGXptS
mL1oNlWP+4eupkHY8xRETim29nNyIUYOWm2pxJFNkDWcZdYQ/2qz7oUOw14koEeZ
R/WMOuDkhfSUksWpGl9fwqQ96KzjWhwDAOAwrz9baMzayuTDO+CALv2VFKmnpX/t
UDO181/kDOPOD7btT5gzdh8C1EQQuKGEylnGUhMTw33lo3b1yKu/KN0oABksKj+g
14Vzfo8bATieRABFkh5WsQ7l
-----END CERTIFICATE-----
Generated at Sat Oct 10 16:07:20 2026 by rpki-client