
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft
File: d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft (raw, json)
Hash identifier: gWwahoguMllReenFaKf5s3XMoWEN46fXSO8FBMtYTkI=
Subject key identifier: 56:EC:71:45:05:94:73:4A:E0:A9:06:A2:BC:BE:37:3A:62:DC:B5:23
Authority key identifier: 77:70:06:A4:1E:01:8E:33:F6:7C:29:FD:69:7E:64:48:C7:8E:5B:1B
Certificate issuer: /CN=A91F8A7D/serialNumber=777006A41E018E33F67C29FD697E6448C78E5B1B
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d3AGpB4BjjP2fCn9aX5kSMeOWxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft
Manifest number: 55
Signing time: Sun 01 Nov 2026 09:20:26 +0000
Manifest this update: Sun 01 Nov 2026 09:20:26 +0000
Manifest next update: Sun 08 Nov 2026 09:20:26 +0000
Files and hashes: 1: d3AGpB4BjjP2fCn9aX5kSMeOWxs.crl (hash: mOVGtURTiym9YrgCEJGjwZcdZgZv1uKjxZU9a/q7UXQ=)
2: 91FB34E2559511F1BB2B33C094833773.roa (hash: /gb08kbBAX/TgmBzdK2NO6dLCZws+/ifOStMBIrUaVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.crl
rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d3AGpB4BjjP2fCn9aX5kSMeOWxs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Nov 2026 09:20:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8A7D, serialNumber=777006A41E018E33F67C29FD697E6448C78E5B1B
Validity
Not Before: Nov 1 09:20:26 2026 GMT
Not After : Nov 8 09:20:26 2026 GMT
Subject: CN=6ae7045a-db92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:07:cf:02:5d:9a:d5:5c:75:dc:1d:b9:b9:
23:e2:b0:39:b8:91:7c:26:e8:a5:4f:54:bf:f4:8a:
4b:48:e7:5c:cf:de:bf:7c:7f:d5:ac:40:47:3a:bf:
33:32:51:b9:03:00:cb:b8:0d:5b:df:f1:df:94:92:
24:5b:9a:f2:78:76:e3:e1:f7:fa:a4:30:cf:9f:44:
e7:28:b3:d6:1e:da:fb:47:cc:b0:54:ab:41:81:d0:
50:b4:c6:67:b6:2e:63:10:ac:ee:a9:f4:e5:f7:8d:
ec:13:87:cd:41:98:d9:1d:63:87:95:3e:14:70:83:
c6:25:ba:3a:d5:45:ae:ce:47:be:9f:0a:95:77:6b:
e6:e4:12:b5:28:29:01:3e:78:05:21:d1:63:73:3b:
02:1c:aa:a7:d3:b8:49:00:20:e9:90:66:97:a4:d5:
8f:17:a5:50:9e:09:bb:4f:5d:98:96:8c:69:6c:90:
ea:f4:cf:fc:4a:8f:e7:5a:ab:a4:4d:a0:53:05:62:
f6:af:79:08:2f:9a:e3:e3:7b:ac:49:69:d2:93:5d:
fd:fe:f9:ce:b7:86:73:c3:d7:09:cd:37:3e:67:da:
03:19:9f:09:47:3a:bb:94:1d:23:27:e6:5f:c4:b2:
2d:88:bd:d4:ce:58:cf:6a:e9:ae:d7:b3:aa:0f:69:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EC:71:45:05:94:73:4A:E0:A9:06:A2:BC:BE:37:3A:62:DC:B5:23
X509v3 Authority Key Identifier:
keyid:77:70:06:A4:1E:01:8E:33:F6:7C:29:FD:69:7E:64:48:C7:8E:5B:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d3AGpB4BjjP2fCn9aX5kSMeOWxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:0d:93:54:2c:aa:74:07:55:35:8a:81:79:74:f8:7b:2c:d3:
0e:50:01:7e:b1:a2:ec:66:8a:73:99:0b:7a:6c:eb:44:4d:97:
4e:47:1e:93:83:c3:af:da:22:66:3c:5c:8c:c2:3b:59:ba:66:
27:84:68:ef:00:f5:da:98:14:71:f6:51:12:54:93:11:ec:d6:
56:7b:f8:cb:8d:d2:a8:aa:52:09:9a:1d:b2:da:dd:d5:56:18:
5f:7d:e5:bc:58:59:0a:8d:be:48:b3:da:b9:f8:34:a3:83:3f:
19:ed:4f:28:ac:86:36:d6:ac:1c:b6:9c:a4:18:3e:94:76:f4:
88:51:b2:e3:46:f9:94:eb:a5:c4:72:ac:57:68:e7:a6:44:87:
96:e4:e5:10:73:17:13:9a:fe:c8:e5:13:ab:da:70:28:45:a9:
9a:50:68:0b:44:3d:93:a1:d6:42:f2:c9:e6:9e:7c:1d:2d:e5:
4c:46:ea:fc:59:06:ba:d6:73:74:70:0a:83:0e:dc:9a:92:8b:
58:f9:dc:73:7c:1d:7a:aa:63:36:72:85:3f:e7:fa:b0:52:2b:
c9:1d:f7:84:92:00:72:ce:10:7e:e6:f8:c9:08:25:e8:4a:c1:
1d:b9:d7:85:ca:4e:45:54:95:82:2b:e8:f1:7d:7c:52:a9:5c:
2c:63:7c:28
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
OEE3RDExMC8GA1UEBRMoNzc3MDA2QTQxRTAxOEUzM0Y2N0MyOUZENjk3RTY0NDhD
NzhFNUIxQjAeFw0yNjExMDEwOTIwMjZaFw0yNjExMDgwOTIwMjZaMBgxFjAUBgNV
BAMTDTZhZTcwNDVhLWRiOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3KgfPAl2a1Vx13B25uSPisDm4kXwm6KVPVL/0iktI51zP3r98f9WsQEc6vzMy
UbkDAMu4DVvf8d+UkiRbmvJ4duPh9/qkMM+fROcos9Ye2vtHzLBUq0GB0FC0xme2
LmMQrO6p9OX3jewTh81BmNkdY4eVPhRwg8YlujrVRa7OR76fCpV3a+bkErUoKQE+
eAUh0WNzOwIcqqfTuEkAIOmQZpek1Y8XpVCeCbtPXZiWjGlskOr0z/xKj+daq6RN
oFMFYvaveQgvmuPje6xJadKTXf3++c63hnPD1wnNNz5n2gMZnwlHOruUHSMn5l/E
si2IvdTOWM9q6a7Xs6oPaWhBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVuxxRQWU
c0rgqQaivL43OmLctSMwHwYDVR0jBBgwFoAUd3AGpB4BjjP2fCn9aX5kSMeOWxsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4QTdELzY5NjVERkNBNTU5
MzExRjE5NTI5NjhCOTkyODMzNzczL2QzQUdwQjRCampQMmZDbjlhWDVrU01lT1d4
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZDNBR3BCNEJqalAyZkNuOWFYNWtTTWVPV3hzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4
QTdELzY5NjVERkNBNTU5MzExRjE5NTI5NjhCOTkyODMzNzczL2QzQUdwQjRCampQ
MmZDbjlhWDVrU01lT1d4cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCRDZNULKp0B1U1ioF5dPh7LNMOUAF+saLsZopzmQt6bOtETZdORx6Tg8Ov2iJm
PFyMwjtZumYnhGjvAPXamBRx9lESVJMR7NZWe/jLjdKoqlIJmh2y2t3VVhhffeW8
WFkKjb5Is9q5+DSjgz8Z7U8orIY21qwctpykGD6UdvSIUbLjRvmU66XEcqxXaOem
RIeW5OUQcxcTmv7I5ROr2nAoRamaUGgLRD2TodZC8snmnnwdLeVMRur8WQa61nN0
cAqDDtyakotY+dxzfB16qmM2coU/5/qwUivJHfeEkgByzhB+5vjJCCXoSsEdudeF
yk5FVJWCK+jxfXxSqVwsY3wo
-----END CERTIFICATE-----
Generated at Sun Nov 1 14:26:15 2026 by rpki-client