
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft
File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json)
Hash identifier: lYq4Ug48rIXkVxshaN07v/7JgMjx7Pz1taGnyE3oNVU=
Subject key identifier: C5:FB:6D:17:CD:5D:4B:67:A8:FC:39:9F:82:33:5D:9C:38:16:AB:11
Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A
Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A
Certificate serial: 0CE3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft
Manifest number: 0CD9
Signing time: Mon 02 Mar 2026 00:03:43 +0000
Manifest this update: Mon 02 Mar 2026 00:03:42 +0000
Manifest next update: Mon 09 Mar 2026 00:03:42 +0000
Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: 7FLvpZDeULXrynlSDdQmygYGrWrhbxU6SFQf/XYZuRI=)
2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: 3yJDGrz0XRdPzy2//5nR0N/T7ckhtUUCQuGTGQX3Puk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl
rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3299 (0xce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A
Validity
Not Before: Mar 2 00:03:42 2026 GMT
Not After : Mar 9 00:03:42 2026 GMT
Subject: CN=69a4d3df-0ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:5a:14:03:00:99:64:f3:a8:ec:c4:34:8f:
21:b8:f8:80:36:92:6b:56:bd:a3:b8:f5:60:a3:74:
e3:95:2e:f4:b8:dd:2a:b1:1a:8e:bf:94:61:38:6b:
b6:ea:5c:2b:db:13:e9:1c:62:47:25:9a:34:64:d2:
7c:85:5a:87:b2:e5:ba:39:3f:f2:ae:f2:1b:66:53:
c3:a6:14:35:1a:12:4d:73:e4:b1:63:37:aa:bc:0f:
56:97:73:8c:0d:58:c1:68:1c:83:02:fd:47:65:0c:
f0:c6:a8:aa:11:95:42:c5:f0:72:15:f6:91:ba:e8:
38:84:79:5d:39:0d:87:a1:90:8f:7d:d4:7a:96:a2:
95:f2:49:24:65:f0:f0:a9:19:5d:c2:e7:45:7f:5c:
e4:5e:5a:4f:b3:f9:f3:48:69:4f:00:8a:f0:d3:a7:
7a:65:41:17:23:59:eb:6a:11:3c:3a:b4:5a:56:82:
89:fa:c8:d6:06:c2:76:9a:70:67:8a:e8:8c:e6:31:
35:c8:9c:5d:48:df:a0:34:6f:e7:4f:bf:39:20:12:
29:cf:da:4d:09:ab:91:9f:aa:68:f7:26:6a:a3:d9:
3d:7d:7a:c6:45:0f:b9:62:31:d5:dc:6f:75:1a:c4:
b4:ab:25:5e:b4:73:9c:3d:72:d0:1d:7f:7a:6c:03:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FB:6D:17:CD:5D:4B:67:A8:FC:39:9F:82:33:5D:9C:38:16:AB:11
X509v3 Authority Key Identifier:
keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:bd:cc:54:6e:af:8a:ef:5f:97:ff:03:b5:86:f0:fb:ef:9d:
9b:99:b7:63:4e:78:09:00:c2:e5:d9:99:27:fb:f5:06:43:c2:
ed:35:a6:90:1e:8a:24:a2:cf:9d:cc:16:6a:30:f7:b5:d0:09:
9a:8b:11:e2:9d:32:13:32:dd:71:5b:40:ec:66:eb:74:4c:2e:
9b:a9:63:01:2d:d1:bf:09:79:b8:8a:88:5b:a2:a9:46:b1:f0:
a6:bf:db:3a:bd:9e:cf:8d:1a:8b:0a:ea:ef:fa:eb:ad:4c:2a:
6e:e3:3f:48:3d:44:b3:4e:11:a6:ad:87:ec:5f:2b:2f:dd:61:
a5:59:20:5b:1d:60:ad:65:e8:7c:a6:bb:ed:47:7c:db:78:78:
a1:c1:90:7d:b3:3b:3a:99:c1:fd:57:05:34:2a:04:ff:8b:a6:
63:38:70:13:c3:6e:dc:e0:40:8c:54:04:47:62:e9:cf:e6:a2:
59:c0:70:95:53:48:cf:ae:84:63:ad:6b:d5:c9:83:32:c3:26:
ed:0a:8e:f9:b7:91:fc:31:4e:9f:9e:0e:b7:b3:ea:17:59:94:
1f:3c:39:86:cd:e4:04:0c:be:96:ec:fb:de:5a:db:8e:c5:3e:
49:09:c2:f8:25:bb:87:e0:1f:2a:11:3d:1b:e4:25:9e:5a:e7:
e6:a0:f4:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF
NzY0N0NCNkEwHhcNMjYwMzAyMDAwMzQyWhcNMjYwMzA5MDAwMzQyWjAYMRYwFAYD
VQQDEw02OWE0ZDNkZi0wZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAndpaFAMAmWTzqOzENI8huPiANpJrVr2juPVgo3TjlS70uN0qsRqOv5RhOGu2
6lwr2xPpHGJHJZo0ZNJ8hVqHsuW6OT/yrvIbZlPDphQ1GhJNc+SxYzeqvA9Wl3OM
DVjBaByDAv1HZQzwxqiqEZVCxfByFfaRuug4hHldOQ2HoZCPfdR6lqKV8kkkZfDw
qRldwudFf1zkXlpPs/nzSGlPAIrw06d6ZUEXI1nrahE8OrRaVoKJ+sjWBsJ2mnBn
iuiM5jE1yJxdSN+gNG/nT785IBIpz9pNCauRn6po9yZqo9k9fXrGRQ+5YjHV3G91
GsS0qyVetHOcPXLQHX96bANFwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMX7bRfN
XUtnqPw5n4IzXZw4FqsRMB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0
NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5
Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTZCOS81MjZFMTZBNDA0NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENW
Rm40ZU84MWxtSl9uWkh5Mm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHL3MVG6viu9fl/8DtYbw+++dm5m3Y054CQDC5dmZJ/v1BkPC7TWmkB6KJKLP
ncwWajD3tdAJmosR4p0yEzLdcVtA7GbrdEwum6ljAS3Rvwl5uIqIW6KpRrHwpr/b
Or2ez40aiwrq7/rrrUwqbuM/SD1Es04Rpq2H7F8rL91hpVkgWx1grWXofKa77Ud8
23h4ocGQfbM7OpnB/VcFNCoE/4umYzhwE8Nu3OBAjFQER2Lpz+aiWcBwlVNIz66E
Y61r1cmDMsMm7QqO+beR/DFOn54Ot7PqF1mUHzw5hs3kBAy+luz73lrbjsU+SQnC
+CW7h+AfKhE9G+Qlnlrn5qD0XQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:43:09 2026 by rpki-client