
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft
File: 3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft (raw, json)
Hash identifier: YYyYCp5Nc7nYX7ghZlDX4dWpFQiBXA1mvFuy82sWNRQ=
Subject key identifier: A1:58:3D:C1:02:93:B8:45:5A:A9:3A:B8:61:69:66:27:73:7B:6B:F2
Authority key identifier: DC:B8:39:31:9F:D5:2E:AD:9F:CB:97:78:29:84:FD:1F:D4:49:2C:17
Certificate issuer: /CN=A91B569E/serialNumber=DCB839319FD52EAD9FCB97782984FD1FD4492C17
Certificate serial: 02FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft
Manifest number: 02F4
Signing time: Wed 07 Oct 2026 01:20:43 +0000
Manifest this update: Wed 07 Oct 2026 01:20:42 +0000
Manifest next update: Wed 14 Oct 2026 01:20:42 +0000
Files and hashes: 1: 3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl (hash: XFolPsdzMiw6JqkwTUqNSDmu6KtvvaUTpVWt9rU/rBM=)
2: 0CDAA8EEE86611EFA5152A24C4F9AE02.roa (hash: Z52mVJSz988Jd9hitOllyu60oqioAYARpSvRGcwNtnE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl
rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 767 (0x2ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B569E, serialNumber=DCB839319FD52EAD9FCB97782984FD1FD4492C17
Validity
Not Before: Oct 7 01:20:42 2026 GMT
Not After : Oct 14 01:20:42 2026 GMT
Subject: CN=6ac59e6b-8536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:cf:cb:f3:0d:4b:2b:e4:37:a9:b0:fa:64:
99:22:ad:01:2e:3c:07:6f:e9:7d:03:f7:4d:db:59:
88:7c:05:20:94:1f:6e:cf:7a:92:1b:00:78:5f:f3:
22:49:47:d3:27:aa:f4:ec:b7:4f:bc:8d:49:49:7c:
bd:80:0d:5a:a5:1c:f9:4e:f9:18:b7:40:43:50:e2:
fd:4e:2e:26:83:bd:e0:1d:2e:5f:0c:8c:f7:f3:14:
7a:26:24:6d:f3:ee:1b:03:d3:d7:d8:a4:76:7c:b1:
6f:be:76:09:07:a0:67:53:f3:54:a8:46:2b:fb:3f:
a2:bc:b4:4a:00:8e:ba:eb:32:bb:f0:d2:16:2a:b9:
d5:3d:01:b2:49:f9:bd:32:57:3a:c0:dc:c3:db:ae:
46:6c:32:78:03:25:88:5b:91:c3:93:63:5d:13:c2:
fd:1d:29:40:2b:52:55:46:3b:d8:7d:33:5b:27:f9:
22:71:6d:f2:7d:11:91:aa:50:90:d9:42:d7:8b:dd:
6b:9a:1e:71:52:0e:b3:f0:6f:18:bf:a7:ea:f4:a6:
94:2b:2e:c5:ec:34:eb:c6:3e:f6:2f:8e:44:f5:04:
4e:c1:f2:96:55:f0:6b:b7:04:08:07:8c:c5:db:f8:
31:52:52:e5:89:5f:87:b4:ca:c4:d5:2a:ea:fa:95:
47:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:58:3D:C1:02:93:B8:45:5A:A9:3A:B8:61:69:66:27:73:7B:6B:F2
X509v3 Authority Key Identifier:
keyid:DC:B8:39:31:9F:D5:2E:AD:9F:CB:97:78:29:84:FD:1F:D4:49:2C:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:05:79:59:6f:e4:a2:a2:a0:b3:95:4a:f6:4b:9d:0e:e7:d4:
58:be:5a:5b:71:cb:6c:50:b9:58:76:75:63:4f:de:87:12:a7:
13:7d:43:04:f2:61:0c:de:3b:53:c5:9f:c3:72:41:39:e7:7e:
b2:15:9e:7b:0a:06:06:cb:55:50:3b:23:ca:86:d0:fb:51:d5:
7d:3d:26:9f:21:d1:81:97:04:3e:da:3c:37:29:70:77:1c:6e:
fb:ab:c7:1d:b8:e2:3b:7e:14:ad:86:7c:f6:2f:bc:f0:39:af:
d9:ae:c9:26:a0:07:ae:f1:69:e6:7e:16:3c:2f:f7:5e:b9:07:
bb:18:2f:ce:d6:cf:56:f0:97:a3:28:4a:c5:57:68:25:09:38:
81:44:6a:2b:ab:1d:64:70:78:e4:a9:1f:65:ad:56:94:84:7c:
23:5a:f6:0b:84:84:dc:0f:4c:cb:bf:2f:cd:f5:57:c2:b3:c2:
3b:73:74:e5:d2:75:ed:9e:45:b1:36:d9:6f:ce:84:7e:72:47:
55:06:2d:74:2a:cb:64:6d:4d:2d:79:b4:b0:93:e7:8c:4b:0c:
99:da:3a:ba:72:70:96:6b:b5:1e:8b:fa:17:53:56:98:67:3f:
1b:21:c2:2f:11:12:90:75:79:87:34:f0:3a:0e:02:df:84:7d:
97:02:ea:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:15:57 2026 by rpki-client