
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft
File: 3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft (raw, json)
Hash identifier: zL5vYw7pEPYegBKrfq7G/MGB37hpnEtY8598vtcnUEI=
Subject key identifier: 1D:F0:CB:7B:13:40:B5:F9:68:B7:B3:29:5B:AA:66:CC:40:96:C8:2E
Authority key identifier: DE:6C:DA:69:AB:1A:C8:9A:E7:5F:76:5C:E7:72:73:E1:1B:7F:D6:7E
Certificate issuer: /CN=A91C5727/serialNumber=DE6CDA69AB1AC89AE75F765CE77273E11B7FD67E
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft
Manifest number: CD
Signing time: Sun 11 Oct 2026 07:22:57 +0000
Manifest this update: Sun 11 Oct 2026 07:22:57 +0000
Manifest next update: Sun 18 Oct 2026 07:22:57 +0000
Files and hashes: 1: 3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl (hash: orFoVR9BUWP8cdk6xFRz2nZ5ac/xjeY6N/keGHVJK5Q=)
2: gTEXaLrkM8u8-j7k9ypipFwK9ag.asa (hash: AtdgLwSNkUzJpoe1YiDLsyVDlC0solEVh32yr+n22z8=)
3: 54338F04B19111F0A5C55920C4F9AE02.roa (hash: VAbU71B2XEsYfqVheCzITEvVgtvLRWd8as3ki+anaVY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl
rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 07:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5727, serialNumber=DE6CDA69AB1AC89AE75F765CE77273E11B7FD67E
Validity
Not Before: Oct 11 07:22:57 2026 GMT
Not After : Oct 18 07:22:57 2026 GMT
Subject: CN=6acb3951-c43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a2:89:dc:f5:29:ca:df:8d:89:83:99:18:25:
d7:ac:ab:d2:a0:28:65:6b:6f:47:6d:d0:3b:75:65:
d6:26:44:5e:cf:fd:39:9a:75:ab:f8:75:13:92:ab:
0b:5b:51:fe:2e:c2:b6:ee:33:c5:e1:41:b0:65:c5:
d7:0b:c2:87:68:e2:f8:8f:76:2e:a5:32:b3:5c:d3:
e3:59:28:92:c5:04:d2:fd:b2:cb:6f:6a:53:d9:58:
2b:33:66:b5:5f:5f:ad:81:43:10:eb:2e:29:bf:36:
4d:58:ef:9a:54:10:31:8f:94:84:e1:74:9c:c4:b0:
ed:20:30:bb:13:95:7c:5e:66:56:69:81:1f:38:9f:
79:12:4e:21:ff:14:56:0c:1c:d0:80:56:71:76:81:
10:56:d5:65:e8:92:26:6b:84:79:ea:12:83:90:90:
c8:2a:56:96:c5:ae:7c:0b:f5:b3:f9:c1:de:94:1b:
17:dd:dd:48:00:10:f7:42:0e:bd:48:03:15:37:5f:
e7:00:47:00:68:b1:1d:7a:20:bf:ac:02:b2:29:9c:
f1:84:bf:8f:08:32:a2:45:77:29:07:4c:21:0a:8c:
42:69:57:3e:51:be:14:1f:74:77:dd:70:ac:55:e3:
e1:3b:24:6d:8e:4a:97:1e:65:7b:a9:01:b0:ad:32:
63:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F0:CB:7B:13:40:B5:F9:68:B7:B3:29:5B:AA:66:CC:40:96:C8:2E
X509v3 Authority Key Identifier:
keyid:DE:6C:DA:69:AB:1A:C8:9A:E7:5F:76:5C:E7:72:73:E1:1B:7F:D6:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:32:93:ad:90:7f:e7:f1:1e:78:23:59:49:37:66:5f:69:47:
8f:29:97:f7:ed:70:06:d0:a2:2e:7d:9a:fc:24:ae:b5:db:29:
34:bd:ba:65:4c:c1:f8:91:98:1f:46:da:44:c0:41:5d:6f:c8:
1b:84:e0:7e:45:8c:92:d1:ca:a3:bf:51:12:61:5c:aa:19:e3:
b6:4e:7d:a5:35:f0:8d:84:b1:be:4d:8e:d0:8b:75:55:f5:76:
e5:8c:d9:70:8e:22:4f:53:23:37:18:94:b9:53:f7:f7:43:92:
27:f7:bd:f9:55:a5:44:47:6b:3b:ec:e5:54:f7:61:16:05:87:
1b:73:2d:b3:b2:85:72:90:1f:fe:c5:2e:64:9f:74:11:c2:16:
88:bc:18:52:c3:5c:5e:f8:91:35:3f:45:57:e9:ef:1c:c6:9e:
11:43:a3:d9:c8:c8:b6:12:db:d2:13:89:6f:6d:2b:f6:61:c6:
c7:19:cc:ca:cc:66:0f:e5:ce:68:58:70:ec:f7:6b:50:1c:7d:
78:99:17:ac:c5:62:2d:4b:f0:ef:ec:53:54:46:df:68:0d:07:
d1:f1:cb:86:ba:4c:94:ac:e7:8f:e1:f7:c6:45:f7:f5:4e:74:
6c:29:06:93:60:14:59:64:ca:ee:22:45:3f:81:08:a7:0c:9c:
d6:62:c7:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzU3MjcxMTAvBgNVBAUTKERFNkNEQTY5QUIxQUM4OUFFNzVGNzY1Q0U3NzI3M0Ux
MUI3RkQ2N0UwHhcNMjYxMDExMDcyMjU3WhcNMjYxMDE4MDcyMjU3WjAYMRYwFAYD
VQQDEw02YWNiMzk1MS1jNDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4qKJ3PUpyt+NiYOZGCXXrKvSoChla29HbdA7dWXWJkRez/05mnWr+HUTkqsL
W1H+LsK27jPF4UGwZcXXC8KHaOL4j3YupTKzXNPjWSiSxQTS/bLLb2pT2VgrM2a1
X1+tgUMQ6y4pvzZNWO+aVBAxj5SE4XScxLDtIDC7E5V8XmZWaYEfOJ95Ek4h/xRW
DBzQgFZxdoEQVtVl6JIma4R56hKDkJDIKlaWxa58C/Wz+cHelBsX3d1IABD3Qg69
SAMVN1/nAEcAaLEdeiC/rAKyKZzxhL+PCDKiRXcpB0whCoxCaVc+Ub4UH3R33XCs
VePhOyRtjkqXHmV7qQGwrTJjNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3wy3sT
QLX5aLezKVuqZsxAlsguMB8GA1UdIwQYMBaAFN5s2mmrGsia5192XOdyc+Ebf9Z+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyNy8yNTQzMjQ0Qzky
MDcxMUYwQTgzNzQxNENDNEY5QUUwMi8zbXphYWFzYXlKcm5YM1pjNTNKejRSdF8x
bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNtemFhYXNheUpyblgzWmM1M0p6NFJ0XzFuNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTcyNy8yNTQzMjQ0QzkyMDcxMUYwQTgzNzQxNENDNEY5QUUwMi8zbXphYWFzYXlK
cm5YM1pjNTNKejRSdF8xbjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYzKTrZB/5/EeeCNZSTdmX2lHjymX9+1wBtCiLn2a/CSutdspNL26ZUzB+JGY
H0baRMBBXW/IG4TgfkWMktHKo79REmFcqhnjtk59pTXwjYSxvk2O0It1VfV25YzZ
cI4iT1MjNxiUuVP390OSJ/e9+VWlREdrO+zlVPdhFgWHG3Mts7KFcpAf/sUuZJ90
EcIWiLwYUsNcXviRNT9FV+nvHMaeEUOj2cjIthLb0hOJb20r9mHGxxnMysxmD+XO
aFhw7PdrUBx9eJkXrMViLUvw7+xTVEbfaA0H0fHLhrpMlKznj+H3xkX39U50bCkG
k2AUWWTK7iJFP4EIpwyc1mLHAQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 05:42:32 2026 by rpki-client