
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft
File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json)
Hash identifier: +8vAyuT+b5h87zSo67bpG+IjgjgJIFVS47ANTeqkCHc=
Subject key identifier: 59:E1:B4:AC:BE:1B:18:11:9C:A1:9C:4B:FF:49:C5:4B:58:F4:04:3F
Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A
Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A
Certificate serial: 0D4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft
Manifest number: 0D44
Signing time: Sat 26 Sep 2026 18:09:56 +0000
Manifest this update: Sat 26 Sep 2026 18:09:56 +0000
Manifest next update: Sat 03 Oct 2026 18:09:56 +0000
Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: yl+C3TJpBYhlL0zD8z4i3P1I0UWZ5UY+fihGqsQAb2w=)
2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: 3yJDGrz0XRdPzy2//5nR0N/T7ckhtUUCQuGTGQX3Puk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl
rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:09:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3406 (0xd4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A
Validity
Not Before: Sep 26 18:09:56 2026 GMT
Not After : Oct 3 18:09:56 2026 GMT
Subject: CN=6ab80a74-3a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:89:41:a1:1f:67:a0:b6:4e:ab:e1:7b:2b:
1b:a6:51:c7:33:d9:5b:f4:31:72:4f:df:69:57:79:
8f:1b:2a:49:b3:aa:dd:5a:8b:3c:49:50:9c:ff:ad:
2a:f8:27:27:f0:12:43:48:fb:6e:67:c6:78:a9:ca:
22:7f:34:41:2f:46:43:94:9f:bd:bc:63:ea:56:b3:
a7:b0:5d:3e:33:9a:fc:b9:d7:6e:f9:e9:3e:ab:7e:
12:82:fe:ad:c9:23:1d:aa:e1:4b:bc:e7:61:a7:00:
2a:ca:0e:dd:3b:1c:d5:4c:f4:98:ec:18:45:c6:98:
93:df:a5:28:3f:16:5d:84:3d:79:f3:34:22:b2:27:
e4:25:67:be:7b:bc:0e:ee:89:de:78:6b:41:ca:51:
a4:8e:57:69:e8:15:08:0b:8d:8f:dc:14:f9:42:f5:
98:30:4c:95:5d:5e:db:6a:bf:5e:28:1c:bf:a9:1d:
c1:3a:46:2e:5f:89:83:89:17:db:7e:a6:f7:57:8c:
e3:55:c8:2c:cd:98:f3:0c:e6:0d:f1:70:36:e2:f9:
d5:a3:8f:38:de:0f:19:6f:3b:0c:30:36:1d:06:9b:
ed:44:70:ff:d1:71:f7:a3:0e:f4:70:bf:60:39:e8:
76:e6:d2:ce:11:06:da:06:e6:3e:3a:ee:b3:eb:20:
04:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E1:B4:AC:BE:1B:18:11:9C:A1:9C:4B:FF:49:C5:4B:58:F4:04:3F
X509v3 Authority Key Identifier:
keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a2:6b:f1:2d:3b:8c:ff:81:2b:89:27:73:89:ac:4d:fc:61:
e1:d5:7c:58:f1:ab:94:bf:d0:f0:e8:f7:82:b9:3f:72:2d:c7:
97:5b:10:36:c4:33:67:b0:c7:0b:fd:3e:cd:33:61:17:63:8d:
a3:e3:97:ee:42:3d:56:1e:29:85:68:62:b6:e0:aa:f0:2c:20:
4b:01:d0:0f:90:71:60:2a:47:14:5a:d7:df:be:28:b1:35:02:
89:28:e4:8c:69:42:43:44:cf:d8:4f:73:34:83:72:67:9b:ab:
9c:51:7a:5c:9f:0c:89:e1:1f:c3:b7:fd:c1:e5:1f:bd:4b:2f:
7e:bf:67:09:e0:fd:39:66:7b:8a:19:97:21:b6:b7:20:43:02:
c9:a2:4b:91:d3:b9:e9:9f:ea:22:76:d4:b0:91:bf:db:a5:0b:
4d:54:fb:49:99:4a:d1:30:1c:ba:59:61:89:e3:67:8e:ab:40:
7f:1e:d7:e3:71:60:83:34:5a:f9:db:6d:25:14:11:13:5b:bd:
19:1b:f2:7b:25:de:1a:57:26:d8:6c:d2:2a:5c:22:76:4d:27:
06:3b:67:39:21:04:c3:6f:37:29:56:da:af:e9:94:d2:a4:ec:
66:2c:dc:3d:cd:95:8f:fa:d0:b3:7b:51:68:b2:d7:4d:5d:2d:
21:41:d8:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF
NzY0N0NCNkEwHhcNMjYwOTI2MTgwOTU2WhcNMjYxMDAzMTgwOTU2WjAYMRYwFAYD
VQQDEw02YWI4MGE3NC0zYTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv8uJQaEfZ6C2TqvheysbplHHM9lb9DFyT99pV3mPGypJs6rdWos8SVCc/60q
+Ccn8BJDSPtuZ8Z4qcoifzRBL0ZDlJ+9vGPqVrOnsF0+M5r8uddu+ek+q34Sgv6t
ySMdquFLvOdhpwAqyg7dOxzVTPSY7BhFxpiT36UoPxZdhD158zQisifkJWe+e7wO
7oneeGtBylGkjldp6BUIC42P3BT5QvWYMEyVXV7bar9eKBy/qR3BOkYuX4mDiRfb
fqb3V4zjVcgszZjzDOYN8XA24vnVo4843g8ZbzsMMDYdBpvtRHD/0XH3ow70cL9g
Oeh25tLOEQbaBuY+Ou6z6yAEbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFnhtKy+
GxgRnKGcS/9JxUtY9AQ/MB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0
NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5
Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTZCOS81MjZFMTZBNDA0NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENW
Rm40ZU84MWxtSl9uWkh5Mm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALKJr8S07jP+BK4knc4msTfxh4dV8WPGrlL/Q8Oj3grk/ci3Hl1sQNsQzZ7DH
C/0+zTNhF2ONo+OX7kI9Vh4phWhituCq8CwgSwHQD5BxYCpHFFrX374osTUCiSjk
jGlCQ0TP2E9zNINyZ5urnFF6XJ8MieEfw7f9weUfvUsvfr9nCeD9OWZ7ihmXIba3
IEMCyaJLkdO56Z/qInbUsJG/26ULTVT7SZlK0TAcullhieNnjqtAfx7X43FggzRa
+dttJRQRE1u9GRvyeyXeGlcm2GzSKlwidk0nBjtnOSEEw283KVbar+mU0qTsZizc
Pc2Vj/rQs3tRaLLXTV0tIUHYwA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:24:10 2026 by rpki-client