
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft
File: 3COmnqHvwaN5SSwT6awUfEn1rQQ.mft (raw, json)
Hash identifier: 3TLYcGL3bMzTtaPGUQFsgUGhvAOhKjqwl7kw+8s/5Ow=
Subject key identifier: 80:95:86:7C:01:74:1F:34:B0:DF:E3:12:4A:60:73:0C:3C:03:59:D1
Authority key identifier: DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04
Certificate issuer: /CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04
Certificate serial: 02DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft
Manifest number: 02AC
Signing time: Tue 13 Oct 2026 02:27:33 +0000
Manifest this update: Tue 13 Oct 2026 02:27:32 +0000
Manifest next update: Tue 20 Oct 2026 02:27:32 +0000
Files and hashes: 1: 3COmnqHvwaN5SSwT6awUfEn1rQQ.crl (hash: MVNEfAp5OMMkCaixQgByfZy9OwzmEfFVihu4zKdY4+U=)
2: CBF7E2CE2D3611EEA81A490BC4F9AE02.roa (hash: 5qvqzmsbRW5LBUnnBo5pzofLXlPjmeRE2wzoeLfm3gk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl
rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 02:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 735 (0x2df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB4C2, serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04
Validity
Not Before: Oct 13 02:27:32 2026 GMT
Not After : Oct 20 02:27:32 2026 GMT
Subject: CN=6acd9715-d092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:bc:46:ee:eb:ac:43:51:62:5b:4d:ec:59:
bd:21:db:d1:ab:20:97:df:92:83:a9:19:15:58:c0:
3e:92:11:0a:96:2f:c3:f1:da:24:75:e7:15:0c:9d:
bc:49:3c:9f:b2:81:6b:d2:8c:2c:5d:6f:8a:9b:fe:
d4:49:84:47:94:0e:c9:7a:25:a5:d5:13:fb:f0:b6:
d5:85:a4:a4:db:c8:7a:ca:f9:32:3b:cb:1e:4d:df:
a7:38:30:a7:76:41:23:20:fb:6d:b1:d9:c4:cd:d5:
ab:a4:63:2a:cb:2a:3c:90:66:dd:be:27:a0:3c:c0:
7b:1c:b2:2c:eb:ca:ea:0a:de:3c:1d:c9:b2:e0:7a:
09:1d:c4:a6:4e:db:97:4e:f1:98:1a:c8:e7:2b:32:
14:be:5e:1f:04:7c:31:c7:8e:33:47:04:1c:f0:bb:
da:3c:35:b1:c3:5a:d0:e5:19:ee:e5:bb:45:4a:63:
36:f6:bc:e0:f3:e8:72:7f:34:ff:cd:38:af:a6:ea:
b9:5b:05:84:8a:ec:33:c4:96:aa:e5:54:06:6a:b2:
dd:be:5c:ab:c7:70:6b:60:92:3b:8a:8a:e8:e1:2a:
fa:4f:b6:f5:da:97:46:16:33:10:8c:c5:fb:27:26:
0f:69:7b:09:0c:ea:26:1c:9c:a4:35:39:92:b0:53:
60:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:95:86:7C:01:74:1F:34:B0:DF:E3:12:4A:60:73:0C:3C:03:59:D1
X509v3 Authority Key Identifier:
keyid:DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:e7:ef:f6:03:c5:58:0b:49:df:c5:e7:fb:a3:01:5b:73:66:
cb:7a:b9:65:2e:4a:24:76:20:20:8c:ac:20:74:ca:b7:ae:6c:
eb:af:07:d3:a3:d2:dd:dd:3c:ad:bc:cf:68:50:d8:c1:94:ba:
68:1b:9c:0d:50:ce:9f:08:c5:78:ca:17:da:90:82:36:d9:a2:
52:32:9d:82:f1:3f:77:cc:f1:3a:17:9e:d7:81:e9:b3:79:bb:
8f:1e:f8:0c:51:5d:f0:4c:f1:26:8e:8b:bb:33:3f:01:4c:25:
58:8b:78:d4:dd:d8:7b:c6:31:0c:28:f3:29:8d:68:16:2d:52:
27:7e:e4:d0:d4:6e:50:50:32:ab:00:5c:6c:05:89:e8:37:6d:
f5:76:a6:45:13:2a:ca:2b:d9:05:0d:9e:30:22:af:01:84:71:
97:27:e3:75:34:90:49:fd:6d:0b:6a:0f:3b:77:e7:cf:61:60:
cb:39:7d:f9:bf:02:de:d5:19:46:b9:f7:20:50:d5:d8:5b:d0:
90:13:93:9a:df:cc:5c:4c:4b:00:2e:fa:a9:89:17:f5:12:f9:
7b:08:13:b5:9f:f7:c7:aa:d4:db:dd:60:40:0e:3a:24:f0:8d:
8b:03:15:e4:f8:ad:66:c9:10:6a:8e:cd:d1:47:87:d3:ac:19:
8e:86:60:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:08:26 2026 by rpki-client