
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
File: 3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft (raw, json)
Hash identifier: 8NH64zFAQXV8bIZxHXLYYJBCNpP43pbDTdjQjPAcgJY=
Subject key identifier: 3F:3E:EF:AA:AE:93:51:C4:93:C2:1B:A6:67:DC:13:1A:41:3B:DF:83
Authority key identifier: DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0
Certificate issuer: /CN=A91A5201/serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
Manifest number: 011A
Signing time: Sun 11 Oct 2026 06:31:14 +0000
Manifest this update: Sun 11 Oct 2026 06:31:14 +0000
Manifest next update: Sun 18 Oct 2026 06:31:14 +0000
Files and hashes: 1: 3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl (hash: Gd1ghaX8ohjX8bBqW5PLIJO7M6hP2NRTizZns51QM+4=)
2: D0CA23541BC611F09FDAC047C4F9AE02.roa (hash: T6VpKK0GSgbr7FyO43J42BuxmDs3Uod/nZfdKOm/b7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl
rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 06:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5201, serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
Validity
Not Before: Oct 11 06:31:14 2026 GMT
Not After : Oct 18 06:31:14 2026 GMT
Subject: CN=6acb2d32-119e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1e:6a:e7:93:d9:a8:5a:0b:82:a5:79:80:88:
3d:9a:9f:3d:4d:24:7b:13:8f:52:85:91:77:94:75:
4a:08:50:b6:65:9d:47:61:d2:95:75:31:b9:a5:29:
42:4d:38:5e:3f:1c:dd:1f:a5:6d:5c:e9:a9:7f:7c:
8d:90:1f:6c:d8:92:79:fc:89:9f:f3:16:0d:6e:c8:
64:fa:bd:d5:8e:f5:c2:00:d7:81:fe:35:87:17:e9:
7a:0a:37:0c:34:0f:3f:92:5d:68:e0:dd:e5:35:9b:
4c:24:d5:08:52:15:82:7b:3c:e3:9f:55:3b:42:58:
6e:fc:16:01:1b:9c:cc:d5:d8:7c:53:3c:46:6a:a1:
ca:c6:38:33:9b:b8:d8:67:ca:d5:2c:2e:02:9c:12:
e7:9e:ac:34:79:0e:f4:3f:b2:5f:22:52:05:c8:cc:
08:8d:73:82:57:a8:0f:0f:78:b6:2f:73:ca:e8:e7:
39:ba:3d:5e:4e:e8:f3:dc:77:93:03:e2:01:d9:ae:
d8:f7:93:2c:fd:b7:97:f0:d9:d1:56:f6:c6:96:21:
8d:18:60:d7:90:a5:cf:d7:ed:08:11:8f:6d:f2:c9:
7f:73:98:ee:87:e4:fa:15:24:fc:b6:3f:b2:2e:cb:
60:45:51:62:28:a6:31:ed:ca:e1:69:b7:95:de:4e:
9d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3E:EF:AA:AE:93:51:C4:93:C2:1B:A6:67:DC:13:1A:41:3B:DF:83
X509v3 Authority Key Identifier:
keyid:DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:74:66:46:0f:0d:9f:7d:72:87:55:f8:05:48:65:48:7d:80:
81:78:3d:85:7a:8b:a7:3b:c0:50:e5:6e:10:d2:a4:fb:e7:20:
6d:bc:83:4f:16:a3:4d:9b:97:e2:dd:f4:94:77:0f:c3:85:d2:
ff:ca:73:2c:83:37:72:09:ed:3f:ff:c0:d4:fd:64:76:64:26:
97:a5:d8:a5:b8:52:c4:f2:83:3d:04:ee:16:f9:60:f0:16:91:
24:d4:c5:ae:0c:a6:a0:4c:c1:38:0b:a5:b6:f6:08:5a:b5:7a:
9b:dc:3c:e9:fd:8c:4c:78:a6:e3:cf:f1:e1:91:b8:ef:d8:2f:
ff:5a:66:94:12:45:ff:7c:f2:a2:18:a2:df:06:fa:6b:87:fe:
37:b7:ff:14:80:db:83:fb:e4:04:29:d7:8c:74:18:6a:4d:f4:
3b:8a:47:4e:69:70:1c:7d:bb:40:f4:6a:13:de:74:63:09:f9:
9a:ef:60:3d:2e:8a:38:1d:40:6a:2f:9e:8c:5b:7d:38:72:77:
ed:d5:ae:a9:4b:5f:43:e6:3d:9f:44:c7:69:37:d5:92:71:ed:
58:a5:15:09:7a:e5:bc:9a:81:53:61:7f:cb:e2:e4:f2:71:40:
6b:13:ff:51:84:31:5d:31:f9:4b:8e:ba:c3:5d:60:09:03:02:
e4:8d:76:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:08:33 2026 by rpki-client