
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft
File: 3W8BT4rUXahdDhbys3aHZ5REhbM.mft (raw, json)
Hash identifier: BInXVBQGJP/OMMGy61lFG6Vnpvj03ggnbh25FfJEMmM=
Subject key identifier: 08:78:E0:1B:8A:2F:25:AA:C8:4F:39:79:F3:D5:0C:7D:1D:5D:55:92
Authority key identifier: DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3
Certificate issuer: /CN=A91E8458/serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3
Certificate serial: 08C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft
Manifest number: 08BF
Signing time: Sun 20 Sep 2026 20:25:20 +0000
Manifest this update: Sun 20 Sep 2026 20:25:19 +0000
Manifest next update: Sun 27 Sep 2026 20:25:19 +0000
Files and hashes: 1: 3W8BT4rUXahdDhbys3aHZ5REhbM.crl (hash: m0S3JgTzoZ/iJdJRt+6c6cOFrgkwV7E1mnSNMRfxx9Y=)
2: FAE7339CF7B911EA91318653C4F9AE02.roa (hash: gjXk5FJ28SiJiqatM16BZg/99HgL3HEPLn3XZb4vIWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl
rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2248 (0x8c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8458, serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3
Validity
Not Before: Sep 20 20:25:19 2026 GMT
Not After : Sep 27 20:25:19 2026 GMT
Subject: CN=6ab04130-c354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0c:d8:5e:72:82:32:e1:e9:a1:a8:a8:e1:c3:
94:58:b1:e2:57:6a:31:f5:08:e2:30:79:12:10:a1:
70:86:cf:db:4d:a1:92:9f:44:75:57:39:9f:e0:68:
c1:72:af:5a:8b:1e:7c:91:b9:05:a9:54:92:30:04:
5c:59:c8:ea:3e:88:72:57:4f:bb:76:b2:ae:81:ad:
61:07:c6:e9:a6:8a:d8:8e:f2:3c:92:7f:ff:2a:73:
ee:bb:69:1e:0e:b0:b3:e2:8e:b1:aa:0e:cd:69:03:
b6:79:45:f8:cd:a7:b5:80:2d:a2:01:3b:d4:cc:08:
d9:aa:b1:d9:9a:78:e7:20:95:76:51:bc:a5:76:59:
95:3b:bc:98:19:e3:ad:13:ee:78:df:28:3b:cc:e0:
50:c4:27:26:58:99:85:fe:2d:63:c3:ec:5d:35:30:
01:80:9f:ac:13:90:20:bc:1a:5d:78:23:43:13:69:
e5:33:9f:a1:4a:3e:9a:4f:a4:59:89:ff:16:b0:34:
12:f9:ad:29:9f:a6:02:e1:80:85:95:2f:84:fa:9c:
79:99:28:4f:f0:e5:ce:87:0b:9b:5f:29:28:8e:0c:
9f:4d:17:d1:3c:dd:96:87:df:c9:10:ad:7a:2e:95:
18:1b:b5:6a:6f:68:eb:c7:b1:16:8c:80:5a:9c:f0:
80:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:78:E0:1B:8A:2F:25:AA:C8:4F:39:79:F3:D5:0C:7D:1D:5D:55:92
X509v3 Authority Key Identifier:
keyid:DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fa:75:7d:44:12:5b:59:43:e8:0f:c9:6c:42:76:d8:10:a4:
15:e1:8f:a8:ea:f8:6e:94:3e:72:ee:67:05:7f:1d:14:88:62:
74:72:26:d4:34:14:6a:95:98:d3:17:14:6e:35:3f:e5:a4:f8:
a8:c3:2a:60:59:30:82:48:13:e0:bf:a8:1c:51:c8:06:ce:d8:
1c:dd:ce:5a:cb:aa:a9:5a:06:1e:ee:48:f9:2e:c8:57:85:ad:
7a:a1:e6:36:5f:bd:d1:95:30:82:77:3c:5d:03:04:a1:70:ac:
bc:3c:7a:d9:b2:2a:92:52:01:c3:32:d6:3b:64:2c:7d:66:0d:
51:7b:49:f0:3e:48:62:94:1d:d9:c4:f5:8d:5d:50:7b:6d:f7:
9b:5f:43:7b:45:b9:d1:94:08:a2:64:da:d8:8d:a1:06:8d:28:
b4:bb:ef:6e:da:e0:60:e5:c0:a2:88:6d:49:aa:55:b1:d8:5c:
65:1b:a0:a4:1d:24:9c:3d:91:9f:37:32:68:03:04:2c:cc:32:
c4:b5:1b:cd:83:d2:b2:1b:31:22:94:52:3e:1f:e9:20:fd:2c:
3f:2f:be:60:4f:7e:cd:78:a5:3f:6c:ff:28:8b:55:1e:87:a0:
42:cc:35:f2:70:06:f2:7b:70:eb:35:b4:8b:83:b5:db:3c:25:
dc:62:34:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:46:07 2026 by rpki-client