
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
File: _3wGiSUYZz7M4Ea2pxfzU85TxQk.mft (raw, json)
Hash identifier: uwmPo0j0+T0l4Viu+PAf9CFuJfr2xnx3MaxTLilLEUk=
Subject key identifier: 36:F3:C2:B8:A0:12:90:E3:24:8E:B5:08:DB:65:7E:76:3A:AE:3D:57
Authority key identifier: FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09
Certificate issuer: /CN=A91476FE/serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
Manifest number: 0123
Signing time: Sat 03 Oct 2026 06:32:18 +0000
Manifest this update: Sat 03 Oct 2026 06:32:17 +0000
Manifest next update: Sat 10 Oct 2026 06:32:17 +0000
Files and hashes: 1: _3wGiSUYZz7M4Ea2pxfzU85TxQk.crl (hash: uORBXA2yejTivy4ZWlb0SEj2mmijVBy/nSF24B/Q3p0=)
2: CC704C6639B711F09D08292CC4F9AE02.roa (hash: 0J+mjRLeZ9f4gHq+bgky2vWfLxgWauEf1jkqEX1oIGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl
rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 06:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91476FE, serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509
Validity
Not Before: Oct 3 06:32:17 2026 GMT
Not After : Oct 10 06:32:17 2026 GMT
Subject: CN=6ac0a172-923a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fa:d8:37:c8:f4:f3:fc:b7:19:36:1f:62:f7:
23:c8:43:cc:f8:93:93:1c:39:68:fa:91:ed:cc:c4:
30:2b:cf:85:3b:3a:e9:20:ed:03:31:0e:cc:e8:8d:
79:b4:83:2b:c3:0a:a7:36:f5:28:38:e7:df:b8:89:
46:3d:49:cc:3e:cf:1f:7a:4a:fb:52:58:49:f1:9f:
1e:80:ff:51:ea:06:ce:21:1f:50:fb:75:98:a6:a5:
9a:92:71:d7:15:6b:bf:34:b4:03:f7:46:c8:57:de:
01:ed:a9:57:d8:9b:4c:4d:b1:af:18:5c:83:85:24:
c6:8b:bd:18:29:13:b5:67:46:3d:d3:a8:c6:bf:33:
20:69:5d:83:df:27:be:86:2f:e6:01:87:3d:fe:bb:
0d:35:35:04:50:7d:9b:ae:fe:a6:23:75:1f:60:7a:
fe:a8:75:e6:e8:dd:93:67:63:73:be:d3:7f:6d:d3:
e3:25:f8:8d:b9:8c:b1:af:14:25:4d:0d:fd:12:21:
1f:c8:e8:ad:3e:01:45:12:bd:a2:1f:a8:a6:e7:81:
bd:fd:c9:30:59:aa:1b:01:2a:0b:0d:db:b0:d8:9d:
74:ac:2b:10:cf:a1:5a:f2:e9:4e:db:40:9d:e7:11:
43:d3:c4:52:e8:91:e7:43:a7:09:aa:b6:7f:b0:3f:
d2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F3:C2:B8:A0:12:90:E3:24:8E:B5:08:DB:65:7E:76:3A:AE:3D:57
X509v3 Authority Key Identifier:
keyid:FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:1a:8a:bc:63:43:f0:32:cb:c1:08:5f:82:9e:15:07:00:0d:
8e:ed:86:1e:98:fe:44:44:bf:c7:de:13:6b:14:cf:03:20:9f:
9f:ff:63:a5:8a:9c:a1:a7:32:8a:ab:fa:95:b7:a3:e0:59:b8:
9d:6f:9a:44:24:a0:03:79:97:d8:1e:e1:ce:63:8f:f4:70:a0:
aa:5c:f2:3f:79:49:76:60:bc:f8:3c:71:69:0c:98:c2:40:d0:
96:63:c7:45:e5:ac:ef:aa:54:18:bf:ea:c4:30:82:01:c8:74:
c5:81:c9:b6:c9:b9:58:b6:c9:eb:6f:d5:7f:fb:a3:a3:5d:74:
0b:11:c2:c9:39:56:14:fc:da:61:3d:0d:d5:03:a2:b0:f6:5a:
32:7a:df:b6:ff:c7:42:e3:f7:6b:8f:18:1a:6a:f2:54:a7:c0:
1f:c3:f9:33:19:0c:10:b5:05:0b:ef:1d:7b:f5:cf:16:e4:07:
eb:f9:9b:c6:3d:6b:6f:2d:5c:b8:71:2d:ee:c3:af:ab:41:6b:
f8:c0:d1:02:3c:ce:06:82:2d:88:5b:d6:66:2b:dd:90:26:d0:
c7:73:cc:0f:4c:97:40:fe:a3:f6:5f:28:ec:87:21:24:17:7c:
ef:3f:66:8b:df:95:c0:11:a6:60:f3:93:0d:ee:3d:96:5e:ac:
83:98:60:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc2RkUxMTAvBgNVBAUTKEZGN0MwNjg5MjUxODY3M0VDQ0UwNDZCNkE3MTdGMzUz
Q0U1M0M1MDkwHhcNMjYxMDAzMDYzMjE3WhcNMjYxMDEwMDYzMjE3WjAYMRYwFAYD
VQQDEw02YWMwYTE3Mi05MjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2frYN8j08/y3GTYfYvcjyEPM+JOTHDlo+pHtzMQwK8+FOzrpIO0DMQ7M6I15
tIMrwwqnNvUoOOffuIlGPUnMPs8fekr7UlhJ8Z8egP9R6gbOIR9Q+3WYpqWaknHX
FWu/NLQD90bIV94B7alX2JtMTbGvGFyDhSTGi70YKRO1Z0Y906jGvzMgaV2D3ye+
hi/mAYc9/rsNNTUEUH2brv6mI3UfYHr+qHXm6N2TZ2NzvtN/bdPjJfiNuYyxrxQl
TQ39EiEfyOitPgFFEr2iH6im54G9/ckwWaobASoLDduw2J10rCsQz6Fa8ulO20Cd
5xFD08RS6JHnQ6cJqrZ/sD/S5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDbzwrig
EpDjJI61CNtlfnY6rj1XMB8GA1UdIwQYMBaAFP98BoklGGc+zOBGtqcX81POU8UJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzZGRS85MEZFNDcyMDA4
MzcxMUYwOURCOTFCNzBDNEY5QUUwMi9fM3dHaVNVWVp6N000RWEycHhmelU4NVR4
UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL18zd0dpU1VZWno3TTRFYTJweGZ6VTg1VHhRay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzZGRS85MEZFNDcyMDA4MzcxMUYwOURCOTFCNzBDNEY5QUUwMi9fM3dHaVNVWVp6
N000RWEycHhmelU4NVR4UWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASBqKvGND8DLLwQhfgp4VBwANju2GHpj+RES/x94TaxTPAyCfn/9jpYqcoacy
iqv6lbej4Fm4nW+aRCSgA3mX2B7hzmOP9HCgqlzyP3lJdmC8+DxxaQyYwkDQlmPH
ReWs76pUGL/qxDCCAch0xYHJtsm5WLbJ62/Vf/ujo110CxHCyTlWFPzaYT0N1QOi
sPZaMnrftv/HQuP3a48YGmryVKfAH8P5MxkMELUFC+8de/XPFuQH6/mbxj1rby1c
uHEt7sOvq0Fr+MDRAjzOBoItiFvWZivdkCbQx3PMD0yXQP6j9l8o7IchJBd87z9m
i9+VwBGmYPOTDe49ll6sg5hgTA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 00:24:49 2026 by rpki-client