
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft
File: 3vCat-atSADQZ9cCq_MCJincVuA.mft (raw, json)
Hash identifier: h8vVpFRYDBDvmdybJ64T9MBBMrL8vIjCepNFMG//LaA=
Subject key identifier: 7A:22:C7:03:A0:92:E7:53:9F:ED:9E:AD:E6:AF:1B:3C:05:72:14:DD
Authority key identifier: DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0
Certificate issuer: /CN=A91B7B32/serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0
Certificate serial: 023A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft
Manifest number: 0235
Signing time: Mon 21 Sep 2026 02:35:46 +0000
Manifest this update: Mon 21 Sep 2026 02:35:46 +0000
Manifest next update: Mon 28 Sep 2026 02:35:46 +0000
Files and hashes: 1: 3vCat-atSADQZ9cCq_MCJincVuA.crl (hash: 9/8YhW5k0mb1DifFxiIvz7iLYJ6xcqYzz/Gbr+VK0fc=)
2: 2B7210D251F211EEA079D567C4F9AE02.roa (hash: 3OfQkZDecj37kpIJDpaiVFI+t0R7obLrmLE1YM1JJH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl
rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7B32, serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0
Validity
Not Before: Sep 21 02:35:46 2026 GMT
Not After : Sep 28 02:35:46 2026 GMT
Subject: CN=6ab09802-753c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:1c:94:fd:26:76:44:2b:8a:eb:72:d3:a0:
14:6a:9b:70:f3:3d:8b:d1:01:e3:d1:d0:a1:20:ae:
e7:88:ca:1c:ba:d7:85:4f:24:21:19:4c:41:12:9f:
5d:ca:39:dc:2a:1c:16:65:98:fc:96:b6:1e:fb:82:
07:88:bc:4a:b7:e3:71:4c:76:75:a4:29:c2:e9:3e:
f3:4d:2a:d8:ff:4c:f2:76:ed:db:55:83:cb:0f:55:
18:78:4f:e3:45:cc:2c:0f:6c:31:5f:07:02:7d:5c:
dd:09:6d:e8:5c:d0:c8:08:8c:b1:ea:c7:5e:9b:de:
87:33:12:83:22:f9:83:d3:e7:46:d3:80:c5:16:ef:
17:6a:06:47:7e:8f:dc:62:f2:69:46:d1:ca:4b:a9:
de:a6:6d:f5:dc:e6:2c:33:23:1f:e2:53:36:54:d7:
d4:47:e2:83:16:32:c0:f2:83:13:be:61:77:24:10:
85:f4:fe:95:77:22:9b:54:ed:3d:81:2b:95:89:b3:
bb:af:63:38:74:0a:86:e8:bf:b8:e6:00:e6:7b:8f:
04:7d:4d:e4:99:13:46:51:cd:cd:f5:29:0a:1f:a5:
ee:eb:b1:03:84:67:48:31:0c:1f:a2:7d:db:c2:22:
f9:f7:fd:c6:6b:78:d1:fa:96:dc:6c:94:ce:79:cf:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:22:C7:03:A0:92:E7:53:9F:ED:9E:AD:E6:AF:1B:3C:05:72:14:DD
X509v3 Authority Key Identifier:
keyid:DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:6c:c6:65:85:c5:a6:67:86:d5:c1:a0:6d:87:d8:6b:d3:08:
e9:7a:6e:f2:ac:2d:27:28:23:71:76:33:11:86:37:67:ac:5c:
65:e2:c9:96:87:12:95:70:7d:15:78:21:e8:72:cb:92:78:20:
a3:56:41:d1:7d:41:cc:24:2d:d8:86:fd:38:18:10:bb:b2:35:
38:ee:64:c7:53:c4:38:3f:e6:61:a1:5b:89:10:24:2d:2a:d6:
5c:90:05:8a:e1:22:b8:ca:4b:37:41:ec:e0:35:77:17:8f:34:
d2:28:ed:74:2e:8a:0c:79:a0:93:97:0f:3d:5c:4f:20:72:d2:
66:51:ad:64:1d:86:cf:0c:99:68:1f:77:b0:b5:eb:af:6a:ba:
f1:c6:b0:27:a0:fe:84:e3:6f:ac:76:8f:42:5c:f2:8b:f9:30:
03:61:2b:35:fb:03:60:5e:00:e2:ad:d0:e7:ab:a2:7d:5c:5b:
23:4d:34:4f:60:1c:3d:17:5d:cf:aa:11:bc:a4:e4:fc:87:a2:
6f:f2:93:d4:49:57:63:0e:78:6d:77:b1:b6:e8:a2:a7:17:24:
a7:df:26:a5:23:ac:5d:f7:f6:dc:28:2a:ad:56:03:0b:3e:c3:
c5:64:ae:6b:81:16:e6:e5:5f:77:ed:ff:5f:c1:b1:96:d1:3c:
28:e3:c6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:19:25 2026 by rpki-client