
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft
File: 3panNCLI2QZghYm5zxT4SUcGqMM.mft (raw, json)
Hash identifier: Ttl2Qd5taYory7LrWTcXzV37uAr74SKfM8KekxJzhWA=
Subject key identifier: 1E:E8:09:6B:B1:BE:1E:9A:3E:2F:85:83:42:5C:8F:51:19:B4:B1:FE
Authority key identifier: DE:96:A7:34:22:C8:D9:06:60:85:89:B9:CF:14:F8:49:47:06:A8:C3
Certificate issuer: /CN=A91BE8A9/serialNumber=DE96A73422C8D906608589B9CF14F8494706A8C3
Certificate serial: 5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft
Manifest number: 5F
Signing time: Mon 27 Jul 2026 10:23:21 +0000
Manifest this update: Mon 27 Jul 2026 10:23:21 +0000
Manifest next update: Mon 03 Aug 2026 10:23:21 +0000
Files and hashes: 1: 3panNCLI2QZghYm5zxT4SUcGqMM.crl (hash: m3ycbEmCmj7UtG5oZwFaIYpKsxtDorDbdkEuTJneBxk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.crl
rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE8A9, serialNumber=DE96A73422C8D906608589B9CF14F8494706A8C3
Validity
Not Before: Jul 27 10:23:21 2026 GMT
Not After : Aug 3 10:23:21 2026 GMT
Subject: CN=6a673199-ad63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:9c:45:52:d3:4d:fd:9e:aa:20:51:26:82:
06:79:f0:86:fc:e6:c9:cd:f5:3a:e1:0a:fd:d2:af:
af:b9:d8:6d:88:17:1f:f3:37:e7:48:8f:96:7f:f8:
a5:a3:5e:24:1d:a8:fa:92:e3:25:dd:5c:59:e7:05:
6e:49:f6:6a:93:d0:34:1e:a7:7b:61:d9:7a:80:56:
4b:8c:fb:3c:c6:b9:f7:82:15:19:3b:82:9f:3d:9d:
65:a6:f1:53:fb:99:e7:a7:8a:78:ba:da:b5:88:ac:
a1:7e:79:17:fc:a0:ad:86:69:2f:93:05:e8:b9:03:
03:40:84:7d:93:ec:1c:a0:16:23:85:22:f4:c3:75:
56:7d:52:44:76:b2:18:cc:35:5e:37:9d:bd:d1:66:
6e:be:9f:52:e2:c6:96:56:42:47:c3:31:27:c8:3a:
4e:a3:e8:7c:5b:71:8b:79:f7:d6:91:9b:81:f2:0f:
99:e3:bb:1a:bb:c4:5e:99:53:c9:34:5e:8f:2e:d7:
26:bf:ef:ec:c6:a6:3c:2b:23:f6:97:82:43:99:f6:
43:3b:5d:39:d6:d3:90:d7:80:12:a4:34:f0:20:f0:
57:8a:b4:d3:99:c4:86:8e:0c:cf:fd:77:64:9f:25:
de:00:24:c4:9e:92:77:a8:96:72:9f:52:75:7c:42:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E8:09:6B:B1:BE:1E:9A:3E:2F:85:83:42:5C:8F:51:19:B4:B1:FE
X509v3 Authority Key Identifier:
keyid:DE:96:A7:34:22:C8:D9:06:60:85:89:B9:CF:14:F8:49:47:06:A8:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7e:63:9f:0a:89:68:bb:fb:1d:16:0d:84:35:95:f8:53:ab:
67:72:b2:e5:76:d2:8f:bc:48:4d:1a:4b:ab:16:28:ca:7e:23:
28:22:8f:e7:df:5e:d7:a8:32:d5:53:79:eb:be:1e:d5:05:61:
83:15:8c:44:36:dd:90:ad:a6:bc:f2:11:76:cf:be:96:1e:1c:
bd:d9:f6:eb:73:6d:ed:8b:3c:6b:82:34:c7:9b:64:27:7b:8f:
47:99:ae:7a:c7:04:43:13:cc:69:65:16:8c:ea:aa:54:c2:63:
0a:da:63:1e:e5:73:3a:ed:94:9c:83:e2:3e:1c:99:52:52:56:
2e:b0:bd:45:0f:56:6b:8f:91:3d:ab:82:3d:68:91:c9:17:d6:
03:27:2f:e9:77:69:09:13:61:bd:47:e9:a6:b5:38:52:e5:b1:
a5:98:b5:e4:96:67:1f:0c:c6:74:55:f2:b4:0a:12:c1:a6:b5:
6c:99:1b:76:c0:44:4f:bc:21:b1:0a:e7:9e:03:b5:8c:52:73:
e4:52:68:3e:72:7f:32:e8:9e:17:01:9e:23:61:6c:57:af:f6:
2d:1b:78:4d:03:bb:f2:45:b4:1c:50:c0:d2:d8:71:e9:46:8d:
fa:8c:f3:c5:0e:ab:50:da:66:76:be:e4:29:d3:ac:c4:29:eb:
a9:3c:7e:05
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
RThBOTExMC8GA1UEBRMoREU5NkE3MzQyMkM4RDkwNjYwODU4OUI5Q0YxNEY4NDk0
NzA2QThDMzAeFw0yNjA3MjcxMDIzMjFaFw0yNjA4MDMxMDIzMjFaMBgxFjAUBgNV
BAMTDTZhNjczMTk5LWFkNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQ6JxFUtNN/Z6qIFEmggZ58Ib85snN9TrhCv3Sr6+52G2IFx/zN+dIj5Z/+KWj
XiQdqPqS4yXdXFnnBW5J9mqT0DQep3th2XqAVkuM+zzGufeCFRk7gp89nWWm8VP7
meenini62rWIrKF+eRf8oK2GaS+TBei5AwNAhH2T7BygFiOFIvTDdVZ9UkR2shjM
NV43nb3RZm6+n1LixpZWQkfDMSfIOk6j6HxbcYt599aRm4HyD5njuxq7xF6ZU8k0
Xo8u1ya/7+zGpjwrI/aXgkOZ9kM7XTnW05DXgBKkNPAg8FeKtNOZxIaODM/9d2Sf
Jd4AJMSekneolnKfUnV8Ql81AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHugJa7G+
Hpo+L4WDQlyPURm0sf4wHwYDVR0jBBgwFoAU3panNCLI2QZghYm5zxT4SUcGqMMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFOEE5L0I1N0FGQzJFRkJG
NzExRjA4REMxRDgxODcxNkY1NkJDLzNwYW5OQ0xJMlFaZ2hZbTV6eFQ0U1VjR3FN
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM3Bhbk5DTEkyUVpnaFltNXp4VDRTVWNHcU1NLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF
OEE5L0I1N0FGQzJFRkJGNzExRjA4REMxRDgxODcxNkY1NkJDLzNwYW5OQ0xJMlFa
Z2hZbTV6eFQ0U1VjR3FNTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCufmOfColou/sdFg2ENZX4U6tncrLldtKPvEhNGkurFijKfiMoIo/n317XqDLV
U3nrvh7VBWGDFYxENt2Qraa88hF2z76WHhy92fbrc23tizxrgjTHm2Qne49Hma56
xwRDE8xpZRaM6qpUwmMK2mMe5XM67ZScg+I+HJlSUlYusL1FD1Zrj5E9q4I9aJHJ
F9YDJy/pd2kJE2G9R+mmtThS5bGlmLXklmcfDMZ0VfK0ChLBprVsmRt2wERPvCGx
CueeA7WMUnPkUmg+cn8y6J4XAZ4jYWxXr/YtG3hNA7vyRbQcUMDS2HHpRo36jPPF
DqtQ2mZ2vuQp06zEKeupPH4F
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:53 2026 by rpki-client