
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft
File: 3iZtavC5PenIaScyCi6du8nPnMI.mft (raw, json)
Hash identifier: GKwwK0U69VN/22nAJ4QySZZWhgcwTcJzXm2uWQQUa60=
Subject key identifier: 6E:DF:13:1F:59:01:63:50:38:28:6E:C0:F4:3F:F8:F9:7F:3B:2F:41
Authority key identifier: DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2
Certificate issuer: /CN=A91CD314/serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft
Manifest number: 7C
Signing time: Sun 27 Sep 2026 08:24:23 +0000
Manifest this update: Sun 27 Sep 2026 08:24:22 +0000
Manifest next update: Sun 04 Oct 2026 08:24:22 +0000
Files and hashes: 1: 3iZtavC5PenIaScyCi6du8nPnMI.crl (hash: mfLK1t0iQviJrgXZkoeYyXxPnZDRGSAHp8Jkgylz5vQ=)
2: C4D99CDE097B11F1B8223907113D8C67.roa (hash: KEWr/3hG6gAXbw8XNIv0hau0dk9zYvinvGd5h59v7Jw=)
3: 24E2E6B8B80311F1980856933211F970.roa (hash: s2IG2HROrlnBpy6KVlCaHxXPWt4gxfRcFO0V6qc98D0=)
4: 431B027EB7F311F1AEB843C36D11F970.roa (hash: 0hTMdW5wS3Vz6x9QNUuQtirwjm/NcLyUU1762lAE4ac=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl
rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 08:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD314, serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2
Validity
Not Before: Sep 27 08:24:22 2026 GMT
Not After : Oct 4 08:24:22 2026 GMT
Subject: CN=6ab8d2b7-5df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5b:7c:57:32:1e:14:39:24:b2:39:bd:8e:af:
7b:8b:5d:8e:2f:37:ff:c4:00:41:05:cc:3a:87:78:
f4:c6:f3:7c:82:9a:38:cb:98:18:46:2e:33:dd:d8:
5b:a1:ac:de:81:5a:23:a7:67:d2:26:f7:19:e6:14:
fe:34:2f:e2:50:d8:c4:fe:dd:ec:2b:41:76:81:bc:
68:6d:06:6e:77:93:de:13:66:f2:bc:94:ad:5b:bd:
9a:c5:c3:35:20:cc:39:c8:8e:05:a0:0f:de:52:9e:
8f:78:ce:43:64:67:9e:52:ad:fc:89:a4:d8:50:eb:
f2:95:ae:82:7e:dd:54:7f:99:26:86:3b:4f:7f:1c:
6d:3d:27:eb:e9:96:4b:c4:02:4b:86:e8:44:c5:17:
99:b7:84:f3:e8:ef:3f:ff:92:fc:14:71:a6:69:b4:
e3:cd:48:3d:73:2f:2f:ad:08:eb:81:cb:c8:2c:89:
32:53:d7:20:68:84:20:10:bd:ff:4a:15:6a:3e:f4:
eb:fc:0c:13:b9:55:d3:b0:9b:6b:48:8a:10:20:0e:
0a:68:9a:fa:c7:e5:5e:53:c4:f3:e5:ed:d7:38:cb:
9f:c3:3d:91:9d:02:88:44:6e:67:a0:00:1b:d3:ba:
9c:2f:06:1f:9e:bf:85:16:cc:26:14:b8:4d:eb:ca:
b3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DF:13:1F:59:01:63:50:38:28:6E:C0:F4:3F:F8:F9:7F:3B:2F:41
X509v3 Authority Key Identifier:
keyid:DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ca:77:c1:43:8b:be:98:6a:7f:b1:09:08:4a:93:8b:0f:9d:
c5:b3:48:da:a2:7e:ba:06:40:72:1a:5b:e6:51:34:41:9d:5b:
8a:69:59:03:cd:71:5b:89:77:f3:6d:d8:f0:b5:f2:0d:1f:66:
c1:10:07:df:d7:4a:81:fa:f5:30:cd:3b:d4:d6:e1:74:d4:75:
40:68:ab:84:ad:94:35:87:7b:4f:ed:a0:25:2e:8d:be:be:c4:
36:2c:b8:95:4b:29:41:33:7a:3a:60:59:c3:15:e5:ae:c0:62:
2d:20:a8:29:00:34:f0:97:3f:45:8a:aa:ef:74:e5:05:d9:fb:
0a:66:64:93:ac:c7:60:b3:5a:cd:da:89:3b:d0:79:62:a3:19:
44:ea:0b:da:c3:53:9d:30:2d:d0:fa:5f:ac:e2:1f:49:07:b5:
71:65:1a:b1:48:b2:5a:3b:5b:b4:60:52:84:63:c5:d6:6a:d9:
6d:6f:d9:ba:87:04:ee:44:ce:7b:d7:1c:fa:f8:74:cb:7c:ae:
0a:0e:42:b5:3d:59:ce:a7:8b:7f:fa:da:c6:d9:bb:e4:bb:4e:
ea:4c:5a:16:b2:5d:dc:4c:55:4d:10:3b:38:93:34:d3:1f:17:
42:18:b5:da:00:bc:18:d9:a1:6e:5f:b1:3f:a0:09:ba:2c:c0:
45:2c:9b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:01:40 2026 by rpki-client