
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.mft
File: 3RLtc6ywUU4D8meITUNc-8iJXkw.mft (raw, json)
Hash identifier: O7uYvRvyP71Clb70gfDce2dikEK6iVDBHrZeuQydwck=
Subject key identifier: F4:6D:C5:28:4B:71:98:34:92:71:58:32:A9:D5:29:84:7E:19:37:63
Authority key identifier: DD:12:ED:73:AC:B0:51:4E:03:F2:67:88:4D:43:5C:FB:C8:89:5E:4C
Certificate issuer: /CN=A9121335/serialNumber=DD12ED73ACB0514E03F267884D435CFBC8895E4C
Certificate serial: 6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RLtc6ywUU4D8meITUNc-8iJXkw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.mft
Manifest number: 6F
Signing time: Wed 07 Oct 2026 08:28:10 +0000
Manifest this update: Wed 07 Oct 2026 08:28:09 +0000
Manifest next update: Wed 14 Oct 2026 08:28:09 +0000
Files and hashes: 1: 3RLtc6ywUU4D8meITUNc-8iJXkw.crl (hash: YEimh2WDoz5mRJyVNiC7w/iT/Ybd7W2upo0WicQY5+M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.crl
rsync://rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RLtc6ywUU4D8meITUNc-8iJXkw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 08:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121335, serialNumber=DD12ED73ACB0514E03F267884D435CFBC8895E4C
Validity
Not Before: Oct 7 08:28:09 2026 GMT
Not After : Oct 14 08:28:09 2026 GMT
Subject: CN=6ac6029a-2603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:f5:dc:f8:7a:61:f2:75:df:b7:fe:84:6e:
85:ef:80:a5:0a:30:95:37:b1:5b:48:0f:0e:37:7a:
ca:9d:5c:e0:ae:03:73:3f:d3:ae:67:f2:b1:db:34:
9a:15:ba:3e:48:7a:74:b2:1a:e8:45:2c:e0:f7:5b:
97:04:96:dd:7d:79:af:8e:f5:bf:a1:e6:24:ab:11:
e6:c0:e8:0c:67:68:2f:c6:64:8c:a9:df:7f:47:09:
a2:66:8a:36:d3:31:89:7d:79:8e:fe:44:74:81:cb:
99:eb:1c:eb:9f:a6:99:78:70:e6:f7:28:34:fc:3f:
6c:92:59:d7:fe:b2:c9:05:38:bd:fe:51:f5:bd:6c:
c6:66:31:3c:40:c0:5e:b7:9f:ad:ab:08:a7:ed:24:
4e:1d:37:66:4e:fb:d0:ba:68:76:73:9e:32:05:1f:
db:9d:46:7e:3c:c5:8f:c3:21:36:6d:e5:76:8c:8a:
63:67:38:df:35:56:89:90:d8:b9:08:8d:c4:cc:03:
4c:bc:3c:fe:ee:ee:fd:fd:ae:6f:9b:6f:45:85:c7:
fa:8a:a3:56:b0:76:e5:11:6a:2e:2f:ae:4b:0c:51:
ad:2f:d9:05:87:22:5c:26:37:1d:cc:5c:0f:2f:b7:
58:22:22:7e:e8:75:f2:4f:35:f1:67:e1:62:6b:c5:
aa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6D:C5:28:4B:71:98:34:92:71:58:32:A9:D5:29:84:7E:19:37:63
X509v3 Authority Key Identifier:
keyid:DD:12:ED:73:AC:B0:51:4E:03:F2:67:88:4D:43:5C:FB:C8:89:5E:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RLtc6ywUU4D8meITUNc-8iJXkw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:06:5b:a4:f6:7d:62:c7:f4:41:a0:a5:67:0b:d5:d4:e4:6d:
a0:69:99:ba:8c:14:db:14:26:a3:d0:49:7d:da:cd:a4:0e:5f:
29:1b:33:b9:26:e6:8a:b9:de:f1:bc:75:dd:4d:36:b3:4a:d7:
ea:3b:81:ff:e3:96:22:d3:ba:92:37:dc:db:2d:89:00:5f:f4:
45:30:dd:15:0d:ed:35:85:d8:fd:3f:91:d0:59:68:58:f5:10:
ed:51:a7:e6:68:01:67:29:13:1b:64:df:5b:ad:b3:13:53:76:
49:61:eb:22:6a:ee:c3:ff:d1:a9:f5:9c:61:f9:1b:65:69:c6:
20:5e:d5:84:1d:c6:5b:a3:0b:c1:6a:dd:ea:03:af:7b:a2:02:
63:50:3d:c0:98:2f:10:18:f2:79:5c:c4:ab:b2:08:97:74:7e:
7a:23:1d:0a:40:23:67:94:ff:6d:ff:35:0e:2d:6a:0c:ff:2a:
02:2d:ef:b4:bd:ee:61:bf:df:70:f2:bb:5f:c9:00:90:0d:50:
41:1f:d0:34:a0:49:8a:a2:90:c2:b0:92:86:93:95:3a:41:5c:
81:a3:17:ce:78:38:b4:01:5c:15:58:cf:1b:84:e3:34:3e:94:
07:6b:f8:12:66:b2:40:32:8c:4c:76:75:72:70:14:4f:ef:93:
a6:7d:eb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:30:03 2026 by rpki-client