
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
File: 3oPHbNtE9PeURxkgK-OvqIPTSU0.mft (raw, json)
Hash identifier: UgCh9wHqgA7/9ainPhLhNanWHmRFSDvbVJGqi9F6w0Y=
Subject key identifier: B9:FA:6D:48:1F:74:29:7F:48:5F:CF:2C:36:29:16:6D:1F:61:D6:28
Authority key identifier: DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D
Certificate issuer: /CN=A91EAE28/serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
Manifest number: 96
Signing time: Mon 21 Sep 2026 07:31:11 +0000
Manifest this update: Mon 21 Sep 2026 07:31:11 +0000
Manifest next update: Mon 28 Sep 2026 07:31:11 +0000
Files and hashes: 1: 3oPHbNtE9PeURxkgK-OvqIPTSU0.crl (hash: ZcTkdly9DiroNhFNllPCHpIL8E2tygrWG6fyByR+vqQ=)
2: E9CC4952DBB711F09A595FAD4E641951.roa (hash: wYT2EQO9tWff1SLhMXGfdomgltEhqCKkHfWiewZBsdE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.crl
rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE28, serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D
Validity
Not Before: Sep 21 07:31:11 2026 GMT
Not After : Sep 28 07:31:11 2026 GMT
Subject: CN=6ab0dd3f-c490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:b1:89:a4:d5:22:cf:0c:3c:9b:91:c7:61:
cf:5a:96:b1:57:d9:60:ab:93:fc:03:09:01:11:0d:
04:4d:e8:9a:de:32:3f:98:f2:0d:4b:38:02:55:13:
ab:33:44:25:7a:91:07:01:a0:d7:6e:1f:a4:67:07:
55:09:84:40:c7:05:20:cf:83:4f:ca:52:40:4f:1b:
be:f5:c1:a5:87:49:47:3e:1e:5b:69:d7:ba:7b:6f:
35:ac:8a:fe:34:69:fb:30:be:23:8a:df:97:1a:ac:
26:dd:4b:a9:75:10:b5:56:ee:f1:ce:b6:32:d0:a5:
f6:85:18:25:37:9d:02:03:87:77:7c:f2:0a:bd:c5:
70:25:f8:e5:bb:3a:83:74:b9:45:82:4d:9b:5e:80:
0b:93:0d:cf:29:73:32:bf:9d:00:e3:64:a6:46:87:
13:61:ee:7b:e5:83:0e:4c:e9:cb:77:fc:b9:e0:5e:
9d:7e:76:e5:59:51:cb:32:a7:c8:3a:04:69:5a:43:
04:03:c6:fe:b6:41:9d:ae:12:ee:55:2d:2a:d8:1c:
5d:06:da:47:86:a7:ff:35:03:74:68:ed:a4:c1:aa:
15:e3:97:63:45:1d:db:34:df:ef:6f:26:bd:8b:aa:
aa:18:b9:c9:78:77:e8:46:4d:51:51:53:b8:23:65:
64:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FA:6D:48:1F:74:29:7F:48:5F:CF:2C:36:29:16:6D:1F:61:D6:28
X509v3 Authority Key Identifier:
keyid:DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:f1:d4:53:74:d9:ab:b5:92:d9:65:e4:0f:f3:16:5a:79:15:
0d:43:af:76:f0:91:87:44:10:99:49:46:fc:29:a9:80:92:21:
00:2d:d7:88:be:9b:a1:3f:53:c2:c9:47:16:84:4b:89:10:f6:
fa:f9:e4:61:a4:c2:3f:31:71:6b:a1:78:77:b3:4f:7a:ad:ac:
48:a4:8a:b9:55:ee:ed:90:c7:60:3f:30:43:85:3b:a5:94:19:
97:41:49:46:a5:e2:b5:b3:61:82:5e:78:23:20:cb:d0:d7:35:
ef:7b:58:1b:ca:84:cb:5e:23:93:4e:5d:21:ab:63:d5:34:8a:
d3:32:6e:ef:1c:a1:92:c9:40:cd:77:69:76:5e:3d:eb:03:98:
52:ce:f5:dc:3e:08:d4:36:44:26:4c:3b:ef:5d:49:51:72:86:
14:1f:4b:18:c4:26:22:3e:0c:d8:d1:0d:df:e8:75:a3:36:92:
cb:4f:ea:1b:9b:92:1e:28:9f:66:4b:5d:21:47:ad:32:9e:d4:
5a:f3:d1:2a:38:7d:78:54:fe:71:3f:31:e9:4f:ee:10:02:ed:
59:6b:51:19:9c:87:65:3b:d6:b8:54:82:c2:d6:d4:75:51:a0:
f5:68:f3:c5:01:8e:67:06:fb:d9:50:26:7f:38:74:a7:f9:c5:
1e:f8:aa:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:57:11 2026 by rpki-client