
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
File: 3owRZVEEK-jnJkvttYLwo3e7JL0.mft (raw, json)
Hash identifier: 9EipGtsAqN+GnjM731fyAEbY1Lh1Dp481y9ImYbxBfc=
Subject key identifier: 89:AD:7C:A1:67:A7:59:EC:8D:9C:AE:6A:6F:5B:88:31:68:2C:5B:64
Authority key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD
Certificate issuer: /CN=A91471A0/serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
Manifest number: 9D
Signing time: Sat 03 Oct 2026 08:06:51 +0000
Manifest this update: Sat 03 Oct 2026 08:06:51 +0000
Manifest next update: Sat 10 Oct 2026 08:06:51 +0000
Files and hashes: 1: 3owRZVEEK-jnJkvttYLwo3e7JL0.crl (hash: zNCrdj10SEwVZLozsSmLis/P4Ks1Wgd3e8tW7qcYRxg=)
2: 9572FAF41D1B11F1B62EA9A5103D8C67.roa (hash: YxVjuj/u6cFjLolYA4vHKI/ekIe2/ZI5hcZUBzFakNE=)
3: A4A022041D1B11F188B066AA103D8C67.roa (hash: 0UiK+7UG4gazEA6M9ztbhs59f2RFRj/xH1mxg/FNT2U=)
4: 947595301D1B11F1B62EA9A5103D8C67.roa (hash: fyVIn40fjMUq1jfx5eUqoEzNu3Qfs0MIIOR0mSpXHec=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl
rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD
Validity
Not Before: Oct 3 08:06:51 2026 GMT
Not After : Oct 10 08:06:51 2026 GMT
Subject: CN=6ac0b79b-3f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:87:bc:1e:a6:9c:5b:11:f5:7d:83:60:6e:
d1:6c:c6:d7:38:25:d3:3d:65:b1:46:81:25:44:f9:
9a:48:6c:7c:88:57:4d:d9:e1:d7:2f:ce:95:80:8b:
f1:e8:67:30:b4:73:97:58:77:34:34:c2:47:7a:a7:
0d:40:51:70:5e:f4:ce:82:8e:8a:6f:98:c9:c3:3e:
a4:03:93:b7:33:4c:60:be:f2:47:f0:c4:f8:d6:e1:
53:af:d2:80:bc:47:30:ad:a6:d3:74:8f:45:9a:f9:
51:ef:93:00:4b:e6:45:f6:27:a0:c6:ab:2f:4f:db:
ee:3d:e7:fd:07:60:da:b0:d1:54:6b:fb:36:55:80:
fe:4c:cc:0f:6c:55:ef:10:c9:48:bc:83:a6:16:6d:
08:52:0b:df:cf:78:15:59:23:4d:0c:07:39:aa:c2:
3c:67:0f:3c:83:d4:ec:a3:3d:38:9d:b3:10:f8:47:
80:44:0d:27:9e:eb:35:8c:a3:4b:50:47:25:36:1e:
32:ad:cc:86:ee:52:69:e2:51:35:07:af:0a:9f:99:
06:65:fe:d4:9a:db:24:f0:8f:1a:f2:10:7d:ef:b7:
25:7e:d6:bf:e7:8e:a9:75:6a:7e:a4:6c:ed:93:55:
a3:05:da:e1:3f:19:af:e4:36:9a:0c:31:cd:76:96:
01:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AD:7C:A1:67:A7:59:EC:8D:9C:AE:6A:6F:5B:88:31:68:2C:5B:64
X509v3 Authority Key Identifier:
keyid:DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:30:f6:97:aa:75:32:00:fc:8d:54:78:4a:58:98:22:f8:a1:
74:b0:5b:be:91:3d:16:04:0d:4b:b8:76:2c:89:b2:00:fb:fa:
78:74:b9:78:8f:6c:97:59:fa:9e:93:64:0e:f6:f6:96:eb:55:
0b:5c:0b:0f:0b:57:80:3d:70:dd:6b:0c:41:f6:a8:20:c0:44:
e0:3a:28:47:c6:b3:a8:53:8f:0a:3f:3b:ed:7f:24:c7:fc:64:
03:1c:a6:e6:70:22:f7:21:0b:2d:1c:62:38:82:83:e5:80:e8:
0d:13:c1:7a:f4:19:c9:7f:bd:0b:d0:f2:81:0a:d2:5a:00:0a:
2a:61:b5:aa:6d:8b:d9:0e:b2:df:78:08:2e:3b:13:5a:db:b4:
ee:d7:d0:24:d3:34:b4:37:cd:74:b4:b0:eb:c9:3f:4b:00:5a:
82:84:c7:c9:75:ff:24:42:04:99:9c:f9:2a:51:0f:da:dc:4c:
1f:37:08:80:70:b9:74:2d:0a:47:8f:9a:2e:ab:f5:ba:73:d1:
18:9f:79:5b:af:83:8d:9e:25:99:17:ea:c4:d0:40:67:15:09:
d8:a1:2b:90:56:3c:12:8c:74:66:1e:cf:0f:16:07:e6:dc:4f:
af:83:59:33:3f:26:ca:90:57:52:e0:ba:c9:45:ea:47:47:a1:
1b:ed:d0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:46:06 2026 by rpki-client