
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.mft
File: k9QYmEjS8Ji0s1nr0FLriYPVDqA.mft (raw, json)
Hash identifier: og+fY6Nk8vtgeYyRO3gpRI37RQPjQcyg8kbLxIrPTLc=
Subject key identifier: CF:78:5D:20:35:52:F4:C7:44:68:FA:AC:58:EB:86:1E:F2:C9:B2:F2
Authority key identifier: 93:D4:18:98:48:D2:F0:98:B4:B3:59:EB:D0:52:EB:89:83:D5:0E:A0
Certificate issuer: /CN=A912A3C4/serialNumber=93D4189848D2F098B4B359EBD052EB8983D50EA0
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k9QYmEjS8Ji0s1nr0FLriYPVDqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.mft
Manifest number: 3B
Signing time: Tue 06 Oct 2026 19:59:45 +0000
Manifest this update: Tue 06 Oct 2026 19:59:45 +0000
Manifest next update: Tue 13 Oct 2026 19:59:45 +0000
Files and hashes: 1: k9QYmEjS8Ji0s1nr0FLriYPVDqA.crl (hash: 4p84Y5tfJXQdqhHTbirCb4suDsDieZdv+oWLyBUM9v0=)
2: 39E2E2326AB211F1AD02B3F4A147A888.roa (hash: G1Hlr/rHIQ0S04hSoxt84tCzDTSCe59VGh3JefnKY08=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.crl
rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k9QYmEjS8Ji0s1nr0FLriYPVDqA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:59:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3C4, serialNumber=93D4189848D2F098B4B359EBD052EB8983D50EA0
Validity
Not Before: Oct 6 19:59:45 2026 GMT
Not After : Oct 13 19:59:45 2026 GMT
Subject: CN=6ac55331-f4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:e4:7d:e9:e2:16:9a:40:99:4b:6f:cf:6c:
d6:85:58:5d:87:6c:73:4d:71:7b:18:cd:45:a0:8c:
0f:59:a8:10:8d:10:a9:f8:de:c7:f6:0b:06:5d:7c:
07:91:c9:8c:bc:60:2a:74:de:87:59:45:0f:2a:cf:
31:4c:ba:e6:de:1b:ca:ef:44:24:04:eb:61:eb:6c:
bf:cd:2c:42:ad:1a:b2:e2:f6:ea:a8:bb:0a:92:49:
81:41:96:db:17:92:ee:c0:af:ee:3c:7a:4c:c9:4a:
69:db:ae:6c:b4:a0:df:78:1d:cd:1c:23:42:dc:9a:
4c:0f:9f:8e:54:73:84:4f:66:73:11:50:7e:57:70:
37:8a:76:8f:3f:a1:6c:8a:af:e4:7d:ae:77:be:a8:
cd:93:48:22:f8:ab:17:fb:9f:f5:95:5e:05:d6:ec:
df:56:3a:12:85:6b:e8:2c:d6:c6:78:5d:a7:3b:fc:
5f:aa:a2:63:ab:f5:f0:e5:6d:0a:76:8b:e6:ac:b2:
26:b1:50:8a:b0:5c:86:e2:79:6c:ad:c5:9e:c2:86:
7b:59:bd:bf:b5:30:3a:98:88:d1:6f:79:fd:2e:d4:
f0:2d:b8:3d:3d:6b:1b:6f:03:38:aa:0c:2e:7b:df:
ad:89:e2:d8:02:ec:96:b0:8c:62:64:27:31:82:bb:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:78:5D:20:35:52:F4:C7:44:68:FA:AC:58:EB:86:1E:F2:C9:B2:F2
X509v3 Authority Key Identifier:
keyid:93:D4:18:98:48:D2:F0:98:B4:B3:59:EB:D0:52:EB:89:83:D5:0E:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k9QYmEjS8Ji0s1nr0FLriYPVDqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:62:12:40:c2:91:49:67:08:38:74:a5:99:60:1e:8f:7f:47:
3a:a3:9b:91:7c:49:6f:80:ee:9e:b0:7a:b1:fb:90:b5:47:32:
33:af:46:c0:2d:56:ab:ee:d2:0f:eb:86:7d:8a:4c:4a:5c:c8:
0a:94:d9:88:94:dc:a8:c8:26:5c:34:07:25:d5:ab:24:b8:ef:
4c:df:3a:4c:26:3f:b9:27:38:29:9e:cb:5e:3e:b8:a8:1c:c5:
73:ea:c8:30:e5:9c:87:c5:be:f1:c2:80:e9:31:23:dc:7b:7a:
ce:86:2a:d7:e3:ca:a8:9c:f5:79:40:41:6d:2a:0e:94:5a:a7:
ff:6f:db:c2:3a:d3:cb:d3:73:d8:6c:c5:e4:5d:6b:77:4c:ac:
39:60:3d:e2:8c:d4:08:a4:06:0d:01:c1:3d:65:6b:93:bf:d1:
e6:93:cf:b8:df:ac:6e:5e:d2:a4:0e:39:69:4a:4a:d5:4f:1d:
71:39:16:c4:69:61:b2:69:aa:3b:d7:d4:cf:be:05:35:c5:b3:
9b:fb:eb:e8:7c:af:14:b5:a2:56:ca:80:da:6a:81:f2:33:b2:
19:02:0b:6e:32:7d:e0:97:57:13:b7:37:f7:08:6e:76:44:86:
d2:80:35:fa:d7:b3:39:c3:3c:46:35:8f:a7:ae:44:7e:a2:6f:
b7:17:3d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:23:23 2026 by rpki-client