
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
File: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft (raw, json)
Hash identifier: GRBOHAOLDz5BlOb7aN3c7MbYGaCDsZbLFythQZRpE14=
Subject key identifier: 86:F6:9E:D3:6B:01:AB:81:33:0D:D6:2E:0E:92:44:39:22:65:D5:69
Authority key identifier: DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20
Certificate issuer: /CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720
Certificate serial: 094B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
Manifest number: 298E
Signing time: Thu 08 Oct 2026 16:18:23 +0000
Manifest this update: Thu 08 Oct 2026 16:18:23 +0000
Manifest next update: Thu 15 Oct 2026 16:18:23 +0000
Files and hashes: 1: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl (hash: DAdGSc8D9EcFjxcB/wT36le2T7pyfHeTjL73mNYb+Ak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl
rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2379 (0x94b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113C02, serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720
Validity
Not Before: Oct 8 16:18:23 2026 GMT
Not After : Oct 15 16:18:23 2026 GMT
Subject: CN=6ac7c24f-0a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:9f:96:3c:1e:66:b8:a3:1d:a9:ba:b6:d1:
51:89:ae:ea:b2:17:cc:34:45:b3:79:a3:df:fd:7a:
f0:51:7b:76:e5:a7:b8:61:fd:f0:30:a0:d8:af:4d:
15:0c:a9:80:35:96:02:49:a0:81:7c:f1:36:77:27:
ea:9d:a1:73:5a:90:c1:b2:04:b5:78:6c:99:58:7d:
b0:41:84:b8:a3:0a:ab:0f:a2:82:64:30:67:70:63:
92:df:c7:d3:58:6f:5c:04:fe:01:f3:54:b8:23:f8:
0a:2e:3f:73:79:6b:53:7b:15:d4:e1:5d:e6:d7:b5:
4a:04:be:ff:d0:2e:4f:9f:5a:4c:67:e4:82:64:8b:
02:ca:da:b8:42:a0:47:e6:5e:fb:cc:25:9f:c7:aa:
92:f0:d7:a8:ad:f9:c4:37:f7:70:62:39:cb:34:d0:
72:1b:b9:2a:1e:5e:94:2c:d6:1a:7d:50:f5:24:4e:
16:90:66:9b:da:2d:60:8a:aa:03:c0:d8:55:47:b0:
36:8d:69:72:c4:34:fb:24:e4:37:22:83:98:ee:7d:
5a:18:91:bc:d9:44:18:e4:fa:75:34:19:6a:20:f3:
8c:02:16:10:04:bb:54:82:af:a0:2c:a2:05:66:7e:
7b:0a:0e:ee:a6:c7:52:48:e6:3c:71:8c:f7:da:6c:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F6:9E:D3:6B:01:AB:81:33:0D:D6:2E:0E:92:44:39:22:65:D5:69
X509v3 Authority Key Identifier:
keyid:DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d3:2f:b4:a1:b5:74:bf:e1:5e:5b:84:69:91:ab:a3:e9:ac:
1a:8d:5d:4e:72:6d:19:9e:ea:2d:6e:bb:1c:4a:08:71:af:97:
c7:13:a2:5f:87:75:e7:c6:50:29:4b:fc:98:fc:6d:ed:a1:90:
e5:93:e8:77:98:44:fa:91:4b:1d:85:19:9c:f8:c2:63:03:da:
6c:f2:56:69:6b:2c:68:cb:6b:a9:39:93:fd:44:3e:0e:ba:95:
45:b3:70:62:7f:8f:05:d4:8d:26:29:32:f3:8f:30:c4:31:ff:
10:c6:60:45:08:5c:bd:31:4f:08:5c:f9:76:a1:3c:37:d8:e0:
05:bc:9a:20:77:02:e1:db:b2:2c:15:6d:53:7e:ce:e9:32:fb:
6e:1c:e7:a3:01:57:8f:c7:b9:55:40:a8:e5:a6:00:f6:c7:7a:
74:47:b8:21:1a:2f:35:76:4c:49:cc:18:6a:48:d0:f6:22:72:
de:a5:ec:7a:a4:dc:60:99:8a:5a:39:d8:ef:9c:6c:f4:cd:5f:
a4:ba:ac:d8:3e:4a:da:5a:4c:ac:41:1f:52:83:78:ac:14:62:
63:35:02:ab:a1:d5:0a:5b:0f:a6:12:62:6b:19:fe:c4:f1:e6:
2c:22:f0:ed:9f:5f:51:d4:9d:b4:cb:26:84:2e:96:e8:dc:8f:
b8:2f:dc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:10:19 2026 by rpki-client