
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
File: 3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft (raw, json)
Hash identifier: dlT8rqeRGiWMGgllQ8tBLLA+6U4QajL6AKFAcWL6f5A=
Subject key identifier: 0D:21:25:C3:EC:99:D0:37:77:FF:57:9A:BB:EC:96:D9:CD:C1:B2:E2
Authority key identifier: DC:99:3F:AE:88:10:E9:31:4F:5A:7D:F0:8D:6F:0C:D5:7E:A5:91:6E
Certificate issuer: /CN=A9120656/serialNumber=DC993FAE8810E9314F5A7DF08D6F0CD57EA5916E
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
Manifest number: D4
Signing time: Thu 29 Oct 2026 08:13:42 +0000
Manifest this update: Thu 29 Oct 2026 08:13:42 +0000
Manifest next update: Thu 05 Nov 2026 08:13:42 +0000
Files and hashes: 1: 3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl (hash: /zZ3yp4rseDMJq5/+xfM5tYFVXiF06Y8HFDVdgOQuyY=)
2: 8B8DAF20D1F211F19A6BFE7C0366CEF9.roa (hash: 0l0mjepki9NTq83sPsILcgoQC45Xtsgk1CrYAeBTJz4=)
3: AfKjYeTXsuOYBNJ2FmnhsQhhbls.asa (hash: nNkFgzLyWOS5Bu6hd9QYry8wXvTudW1sOB2TjeXl6Qw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl
rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 08:13:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120656, serialNumber=DC993FAE8810E9314F5A7DF08D6F0CD57EA5916E
Validity
Not Before: Oct 29 08:13:42 2026 GMT
Not After : Nov 5 08:13:42 2026 GMT
Subject: CN=6ae30036-61c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e3:94:fc:0c:27:67:d6:33:66:ee:5b:59:28:
e6:b4:0e:15:79:56:27:f3:4b:37:8f:9f:f6:dd:e0:
21:36:08:d1:3c:9a:e2:d7:b7:75:fe:58:38:42:16:
20:1c:dd:6f:70:e4:dc:e9:74:3e:35:ad:22:be:b8:
f0:53:40:af:91:1f:ba:55:03:9f:f5:e4:d2:5a:1f:
2d:9d:90:6f:68:b6:ad:c7:f3:fe:18:16:93:d7:3f:
de:f1:f7:4f:98:c8:61:88:be:14:83:ba:b4:00:34:
5d:86:3d:7a:58:8c:10:9e:4f:4a:11:a7:e3:06:d3:
c3:3e:ef:3c:ce:6c:4b:7d:0c:0c:9c:3b:0f:eb:07:
bb:fc:79:6c:0b:1b:b2:c0:f4:e5:fc:be:bb:8c:8a:
ee:68:3b:9c:3a:5d:10:08:73:ee:23:46:41:ae:2c:
d7:59:3a:f7:de:c2:55:20:ef:05:db:b2:21:1c:40:
f1:0f:f5:5f:d0:5c:5e:81:2a:2e:ba:d9:da:da:16:
cc:69:c2:c8:ba:bf:d4:d2:27:84:df:78:5d:cb:40:
98:dc:d8:43:5c:0c:ee:85:2b:ab:da:54:91:f0:8d:
27:e2:e6:62:19:92:de:29:30:03:f5:9a:c2:e4:6a:
30:13:39:c0:43:c8:00:b8:d9:a2:1b:30:6e:a5:31:
95:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:21:25:C3:EC:99:D0:37:77:FF:57:9A:BB:EC:96:D9:CD:C1:B2:E2
X509v3 Authority Key Identifier:
keyid:DC:99:3F:AE:88:10:E9:31:4F:5A:7D:F0:8D:6F:0C:D5:7E:A5:91:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:5b:50:75:fa:7e:52:87:8d:be:cd:e0:ae:40:74:68:2c:4f:
e6:96:03:4a:17:c1:2f:43:cb:a4:47:0c:e6:26:4d:76:a6:0e:
85:89:c9:4f:17:ce:98:91:3d:d8:ff:98:33:ca:e8:97:bd:ea:
e5:de:8b:fc:77:42:ee:00:fd:4b:ef:d8:31:3b:51:f6:ec:4b:
4c:85:c3:7e:e7:c4:94:35:24:c3:1c:78:29:81:20:3a:b0:ea:
41:32:c0:73:ee:04:de:92:4c:d8:f1:2d:70:a2:9f:ac:ab:a4:
a5:ac:85:35:f5:77:01:86:66:f8:0f:07:9f:ef:4b:2f:b7:c3:
69:c3:2c:5a:28:f8:54:1b:8a:ba:dc:48:7f:ca:c0:84:32:25:
7e:84:b2:b0:4d:00:82:5c:2f:e7:d1:62:e8:9d:1c:ab:b5:22:
20:60:7f:36:7a:70:fe:7b:a1:75:87:fa:f2:27:a6:64:c0:d8:
23:d9:97:e8:c2:df:a5:c3:30:29:24:7c:67:8e:72:45:a9:88:
86:ec:0e:a3:81:84:6b:86:af:2a:02:ce:a5:47:60:c3:09:17:
3c:d4:e3:b7:ab:5f:e7:ef:e4:57:69:36:cd:a2:88:63:38:bf:
52:76:b0:e8:e2:69:95:5d:5b:5f:6b:5e:73:61:23:11:18:5d:
68:9c:92:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:34:28 2026 by rpki-client