
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91159BC/2764B74AB70411F1BC5832756511F970/3mlcBgx6Qx7w8YXW02N0KO67j8Y.mft
File: 3mlcBgx6Qx7w8YXW02N0KO67j8Y.mft (raw, json)
Hash identifier: VXwijiwsWGHfWdwl7PeqycumOWX9YtjRe5k8JjqO/T4=
Subject key identifier: EC:E1:BE:23:E8:99:E9:45:D1:CE:71:18:B9:18:8A:14:33:C6:B4:13
Authority key identifier: DE:69:5C:06:0C:7A:43:1E:F0:F1:85:D6:D3:63:74:28:EE:BB:8F:C6
Certificate issuer: /CN=A91159BC/serialNumber=DE695C060C7A431EF0F185D6D3637428EEBB8FC6
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mlcBgx6Qx7w8YXW02N0KO67j8Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91159BC/2764B74AB70411F1BC5832756511F970/3mlcBgx6Qx7w8YXW02N0KO67j8Y.mft
Manifest number: 0B
Signing time: Fri 09 Oct 2026 10:00:40 +0000
Manifest this update: Fri 09 Oct 2026 10:00:40 +0000
Manifest next update: Fri 16 Oct 2026 10:00:40 +0000
Files and hashes: 1: 3mlcBgx6Qx7w8YXW02N0KO67j8Y.crl (hash: W7Rv+1iPiGL3w3t3bNvqwHO551uEyu059LUy4Roos/I=)
2: 74270326BD6711F1AAAB1ED76211F970.roa (hash: xfGzyyR1x6YPcenGWGdXPRZrK1U5HEYRqBM/YxhKmas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91159BC/2764B74AB70411F1BC5832756511F970/3mlcBgx6Qx7w8YXW02N0KO67j8Y.crl
rsync://rpki.apnic.net/member_repository/A91159BC/2764B74AB70411F1BC5832756511F970/3mlcBgx6Qx7w8YXW02N0KO67j8Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mlcBgx6Qx7w8YXW02N0KO67j8Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91159BC, serialNumber=DE695C060C7A431EF0F185D6D3637428EEBB8FC6
Validity
Not Before: Oct 9 10:00:40 2026 GMT
Not After : Oct 16 10:00:40 2026 GMT
Subject: CN=6ac8bb48-ea04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:f9:c3:3e:ce:bd:91:b7:7b:24:d9:9d:98:
1a:f4:7c:a5:f6:42:d7:ec:d1:6a:a5:41:22:ff:20:
dd:88:bc:cb:a4:69:14:ce:56:ee:f8:15:41:9d:16:
72:80:33:43:7a:b2:44:64:d7:19:55:ba:c2:68:ed:
97:a8:95:f4:97:4c:80:ed:8a:90:73:cc:a8:12:66:
8d:a1:46:72:f0:17:e7:a0:a9:62:64:81:aa:97:01:
f0:a8:ec:20:2f:da:35:90:31:c9:4b:55:ea:80:c3:
89:d4:5d:e9:fd:6e:19:10:d2:7f:cf:0e:78:dc:12:
d3:ae:a0:32:44:b9:81:bc:5f:93:7e:5b:4d:44:6e:
da:7d:72:83:7b:41:43:81:44:62:3c:e3:50:9e:b4:
5d:9c:d8:0a:56:e5:aa:58:78:0b:00:6a:d6:92:24:
ef:bb:33:ba:ff:7b:81:54:56:49:7b:2e:23:b0:a5:
6c:6f:0a:66:15:1f:c5:2f:35:ec:62:09:0e:81:d1:
67:f5:a6:aa:a5:f9:f8:2b:94:dc:db:10:dc:d1:01:
31:4f:37:19:c3:10:ca:e5:ce:95:f1:c2:04:82:87:
83:27:7f:ed:8c:bd:5b:4d:db:d2:54:e1:be:e7:77:
96:26:86:e4:40:f1:ac:01:50:e9:bf:c6:2c:2a:b9:
59:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E1:BE:23:E8:99:E9:45:D1:CE:71:18:B9:18:8A:14:33:C6:B4:13
X509v3 Authority Key Identifier:
keyid:DE:69:5C:06:0C:7A:43:1E:F0:F1:85:D6:D3:63:74:28:EE:BB:8F:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91159BC/2764B74AB70411F1BC5832756511F970/3mlcBgx6Qx7w8YXW02N0KO67j8Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mlcBgx6Qx7w8YXW02N0KO67j8Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159BC/2764B74AB70411F1BC5832756511F970/3mlcBgx6Qx7w8YXW02N0KO67j8Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bf:5c:ec:ca:b9:a9:41:8a:78:33:af:9a:d0:c4:fb:b3:d8:
b1:40:6a:30:d5:2a:f5:be:c9:13:12:16:ac:5f:9f:ca:7f:b6:
46:6b:6d:7a:1c:c6:4c:41:2e:63:3a:7a:5e:d6:3b:57:31:f1:
83:7f:c2:0e:36:86:2a:9f:8a:b3:bd:8b:d5:99:01:6f:95:e0:
fc:e5:97:00:9e:50:56:7b:6e:a0:ba:a1:58:85:0b:fb:cb:88:
da:05:56:68:d5:90:f9:51:2b:67:c7:a6:e5:a7:3b:cf:10:00:
de:2c:ba:6b:2e:8a:1d:80:3c:a1:4e:1f:5d:a3:78:fd:9d:fe:
44:cc:f6:2c:3c:7f:62:32:b3:f4:66:53:b6:6d:8a:f0:b7:63:
c2:57:88:c9:89:9e:2c:d6:68:bf:46:01:80:8f:8e:89:96:a1:
c1:15:af:4c:d7:db:01:71:aa:de:25:f3:2a:23:58:cc:3f:7b:
4b:a6:bd:3c:91:73:01:b7:bc:c0:ab:89:f7:36:cd:55:25:36:
f9:af:ea:59:f1:4c:70:5d:78:de:7e:9a:71:b5:48:b6:96:9b:
f4:08:ae:d4:12:1e:10:56:fb:fe:5e:1d:83:d3:b8:20:05:f2:
e5:3b:f9:53:d0:5a:bc:4f:9a:5f:cb:9d:76:b1:f0:8d:fa:09:
80:f0:5c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:21:34 2026 by rpki-client