
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft
File: 3n3GT5n2JAYkuhPSFUlETEJLVG8.mft (raw, json)
Hash identifier: 0HYG+qjY48g/S47PsL5CXEUyZodYffrELfunRGXV2co=
Subject key identifier: AD:68:2C:27:4D:06:80:7A:3F:FA:39:C9:59:13:73:17:DC:65:B8:07
Authority key identifier: DE:7D:C6:4F:99:F6:24:06:24:BA:13:D2:15:49:44:4C:42:4B:54:6F
Certificate issuer: /CN=A91567EF/serialNumber=DE7DC64F99F6240624BA13D21549444C424B546F
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft
Manifest number: 80
Signing time: Wed 07 Oct 2026 08:24:00 +0000
Manifest this update: Wed 07 Oct 2026 08:23:59 +0000
Manifest next update: Wed 14 Oct 2026 08:23:59 +0000
Files and hashes: 1: 3n3GT5n2JAYkuhPSFUlETEJLVG8.crl (hash: 2zzTPK198kzeZXSBBe8xciOfGRmCAs/OgtHRp1YtykU=)
2: 616D1BAC6B9C11F1A5AE9DAA6D47A888.roa (hash: Q8pRs/zL4LH+ArnuogEwPHVYr3czyBo1S7DW7cvjosM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.crl
rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 08:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91567EF, serialNumber=DE7DC64F99F6240624BA13D21549444C424B546F
Validity
Not Before: Oct 7 08:23:59 2026 GMT
Not After : Oct 14 08:23:59 2026 GMT
Subject: CN=6ac601a0-4922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:80:bd:ae:af:93:0b:6f:7c:b9:78:9d:43:
de:ba:56:e4:4c:5f:66:bb:58:31:a5:d1:d7:f8:75:
5b:6a:31:9d:f1:fb:e3:db:50:33:4d:37:3c:21:08:
ad:64:b4:50:43:c6:d4:c5:b4:f2:df:72:92:21:91:
98:ef:8b:3e:98:ea:93:0f:90:7e:53:5a:1c:d8:c4:
d8:da:86:5e:a1:fa:49:89:a8:52:24:28:2c:98:4f:
f4:09:82:63:1b:3c:2c:61:15:98:5a:f6:23:2d:47:
d1:5f:87:0f:1d:44:aa:ec:d9:49:ae:91:ae:cd:de:
19:33:a0:7c:44:27:37:8b:74:59:ca:71:c3:fc:39:
50:51:39:87:cb:1c:0d:63:ff:87:e6:a1:3d:c9:e8:
04:51:42:55:d8:dd:b1:38:66:d6:0e:3c:1d:9e:9e:
72:87:1d:0e:5d:57:99:9d:a4:59:70:04:94:44:77:
e1:20:3a:f7:dc:56:e2:67:f2:75:a4:a3:2a:d7:2c:
fd:ac:5f:1e:af:3e:d8:94:74:2f:9d:5f:f0:1a:a5:
5d:cb:93:d1:3d:a1:c2:be:aa:ea:52:8f:b8:b9:51:
26:a1:c6:48:43:4c:09:e0:f1:12:7a:61:c8:ce:4e:
fe:21:67:0c:8d:c3:57:ed:81:6e:ba:3a:4b:06:81:
4c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:68:2C:27:4D:06:80:7A:3F:FA:39:C9:59:13:73:17:DC:65:B8:07
X509v3 Authority Key Identifier:
keyid:DE:7D:C6:4F:99:F6:24:06:24:BA:13:D2:15:49:44:4C:42:4B:54:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b5:62:db:0c:72:5c:bf:07:5f:05:2b:0d:b8:7f:ef:d9:5a:
c0:1b:a5:41:5e:41:19:7e:41:2a:5f:a0:1c:b9:27:81:8b:d2:
39:11:31:33:16:df:a5:c6:9e:c8:55:90:78:fd:ae:69:92:40:
31:66:34:db:32:29:a2:a1:ec:8f:3f:13:9a:8b:f3:21:91:8a:
b5:4e:fd:52:dc:13:87:7b:c6:53:f4:c4:6a:d9:f1:c8:71:14:
f7:bc:9a:af:d7:3f:86:2f:2c:78:31:c7:1e:2d:0e:50:ce:7f:
e8:8f:48:3d:7a:1b:1b:ca:18:63:34:76:7c:13:2a:06:80:77:
3c:4d:52:85:b8:d5:a3:70:07:17:3b:3e:43:c6:05:44:ea:07:
88:16:f5:54:84:e5:1d:01:1c:60:d2:19:0d:92:ef:a6:b1:62:
6d:69:a5:69:28:77:76:0d:1e:5f:58:d5:36:d6:aa:35:4c:e7:
55:50:84:05:b4:2b:4e:4d:c1:c7:3c:c5:67:69:f4:c2:c1:44:
eb:ee:9e:bb:b4:9a:c4:97:85:ba:3c:f1:52:cd:45:44:8f:53:
ea:44:4d:12:0c:8f:77:4c:e3:56:46:75:82:d4:5e:8f:4b:8d:
a2:e2:de:da:cc:5b:27:81:ca:0e:7a:d1:5a:04:fd:b4:45:31:
eb:fe:77:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:40:03 2026 by rpki-client