
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
File: C3f3vSPLQoWNC7_29-OscxNVMdU.mft (raw, json)
Hash identifier: MI1n//XZ29yuMqUpVzjereDwv4aTV+e6ZxmE8NBaoUY=
Subject key identifier: 2C:2C:91:49:EC:FF:E2:6B:C1:C3:D8:C4:00:92:92:1C:3B:4C:DF:5C
Authority key identifier: 0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5
Certificate issuer: /CN=A91EBC61/serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5
Certificate serial: 014E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
Manifest number: 014E
Signing time: Mon 21 Sep 2026 05:17:28 +0000
Manifest this update: Mon 21 Sep 2026 05:17:28 +0000
Manifest next update: Mon 28 Sep 2026 05:17:28 +0000
Files and hashes: 1: C3f3vSPLQoWNC7_29-OscxNVMdU.crl (hash: FHSBCRwfo1RT7WOgQq8mNKUKWhnOw/f6XL8qpPFFRTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl
rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:17:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBC61, serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5
Validity
Not Before: Sep 21 05:17:28 2026 GMT
Not After : Sep 28 05:17:28 2026 GMT
Subject: CN=6ab0bde8-93af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:8b:f4:46:e3:2c:4d:7b:40:72:30:62:1d:
5a:2e:a7:9d:a9:5f:da:58:b9:1e:60:08:f1:01:f7:
25:91:b5:62:20:2f:b7:33:6b:3b:03:05:69:aa:f8:
c1:9e:b2:85:3b:8f:dc:2d:e7:20:93:60:0a:9e:3c:
85:f3:bf:45:61:dc:ef:23:8c:b2:45:1f:e7:bf:a2:
c6:93:17:4d:12:60:24:c0:b4:66:f9:a3:5b:84:57:
90:45:e8:6b:78:6f:0a:6a:9e:bd:b2:7f:06:04:4a:
e9:1c:98:9a:3e:35:f5:b4:62:6a:2c:7d:71:fc:7b:
ae:96:c1:71:3b:ed:2a:eb:b2:12:db:6c:a7:e7:86:
81:f7:76:29:6a:91:fa:3d:1e:82:b3:2f:aa:c4:ed:
cb:20:ba:1e:55:88:06:92:b8:b0:92:74:31:9a:7a:
2f:14:09:ca:b5:33:20:53:cf:bf:62:b0:c7:53:81:
81:8b:ae:d8:ca:6e:7d:fc:f1:6b:93:d0:8b:a5:1e:
08:69:1d:ae:07:69:88:8e:a0:df:d8:0a:03:69:97:
e1:c7:f5:89:65:87:93:af:be:4e:cc:83:c6:19:97:
f9:ab:72:55:4e:50:fd:d9:9d:8e:d0:54:db:eb:12:
89:aa:eb:51:84:ae:2d:89:4f:57:6c:9c:c4:58:d9:
99:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2C:91:49:EC:FF:E2:6B:C1:C3:D8:C4:00:92:92:1C:3B:4C:DF:5C
X509v3 Authority Key Identifier:
keyid:0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:47:17:96:f9:27:8c:f8:fc:91:06:57:3b:cd:7a:1f:af:e9:
d1:08:9d:2b:a9:54:a1:14:e8:aa:7a:1f:72:70:e0:fb:50:27:
75:65:63:eb:4e:7e:d7:17:ff:24:35:37:bd:ed:95:84:54:78:
69:98:2c:98:47:82:e5:f2:c8:ae:d4:86:ba:c5:00:0f:b7:ae:
e4:48:1c:3b:78:d4:47:84:b8:64:dc:35:59:d9:19:30:3d:f4:
3f:55:27:a7:fe:df:5a:d2:d5:74:34:95:cf:fc:40:6b:61:ee:
93:13:e6:27:22:40:19:8e:6c:85:82:c4:62:42:03:e9:e9:2e:
6d:20:50:51:94:27:e4:53:79:1d:99:ed:47:05:ce:4f:e8:a7:
00:9c:55:6e:01:d9:33:64:af:c8:3f:ef:34:5d:72:ab:d0:19:
34:ad:27:ff:9c:86:37:66:d7:e4:b7:3d:f3:f0:f9:2e:61:b3:
69:62:9a:73:1b:5d:15:82:ec:15:06:2a:9c:c2:da:c1:91:1b:
32:a1:31:4d:25:06:3b:9f:6f:8b:05:a1:ff:ed:42:39:5a:ef:
ed:20:7c:e0:cb:2b:71:31:71:80:52:39:25:cb:76:4a:e6:2b:
70:6d:ae:da:96:f1:7c:53:44:83:31:59:69:29:0a:b9:2e:46:
ea:c3:21:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:30:54 2026 by rpki-client