
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
File: 3K6HG3xct5vH7PZ5s7LTyVan2eM.mft (raw, json)
Hash identifier: Me7rbY1hZXAQPxvQypGqEfaDb022NT9V6N9aOKBhWLU=
Subject key identifier: 62:AA:1A:C3:3B:B5:67:76:07:C5:F2:80:BB:DC:19:70:02:46:29:36
Authority key identifier: DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
Certificate issuer: /CN=A91604AC/serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
Certificate serial: 0771
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
Manifest number: 0763
Signing time: Fri 04 Sep 2026 21:37:06 +0000
Manifest this update: Fri 04 Sep 2026 21:37:05 +0000
Manifest next update: Fri 11 Sep 2026 21:37:05 +0000
Files and hashes: 1: 3K6HG3xct5vH7PZ5s7LTyVan2eM.crl (hash: zGQr7vYRuRZ9FpsG1FNrdWoYr8Zb+NevUuAgaqR10fk=)
2: 0081F3D6F22111EE8EEC070EC4F9AE02.roa (hash: gt5MzzOyMRjHAQJ1OB2Ov2agdEJbjl0iI4HuG5lS+Fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl
rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 21:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1905 (0x771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91604AC, serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
Validity
Not Before: Sep 4 21:37:05 2026 GMT
Not After : Sep 11 21:37:05 2026 GMT
Subject: CN=6a9b3a01-405d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:9a:e4:39:52:1a:09:61:30:57:7d:2e:ea:
a6:8a:72:52:66:43:d9:2f:ca:3f:10:51:be:59:84:
6a:88:ea:60:0b:56:82:25:57:f9:c1:0d:db:bb:92:
83:87:7d:7f:15:46:bc:ce:7b:25:5a:9f:8b:ab:b3:
e5:c6:90:a4:94:1e:ad:56:25:03:de:8c:c1:17:0f:
22:5c:bd:d0:59:0d:d4:81:c4:ea:9f:54:75:19:43:
39:cf:9e:e0:6b:b1:5c:d1:f6:4e:f6:a9:0a:d8:50:
93:c2:9d:42:96:af:5f:39:58:f7:15:6e:11:13:d6:
7d:9d:44:af:97:6c:e6:ec:5e:20:41:50:bd:50:cf:
3a:cf:08:ca:e9:19:ac:ef:6d:1d:e2:a5:81:ba:db:
10:ee:37:43:eb:a4:60:ba:c2:04:cf:f5:d1:70:52:
37:e1:56:38:a4:36:9a:7a:97:90:f0:19:f7:12:7c:
09:c3:e1:e7:f8:61:49:57:d4:6b:d5:9f:70:85:29:
a9:2a:f7:fa:b7:ab:6d:8c:b7:a0:7d:d6:75:3b:b8:
f5:b5:f2:e3:f0:6a:51:e8:b7:83:04:4f:75:ab:7f:
aa:31:5b:ec:a2:79:78:82:70:18:d2:8d:8f:c2:4d:
2b:5b:58:b3:48:e4:19:5d:81:48:19:96:be:96:e6:
b6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AA:1A:C3:3B:B5:67:76:07:C5:F2:80:BB:DC:19:70:02:46:29:36
X509v3 Authority Key Identifier:
keyid:DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:03:26:f8:11:26:1e:9a:76:2f:40:83:e1:ae:d9:b1:1f:f6:
26:1e:3e:fe:80:39:c5:b7:57:7e:cd:8f:8d:49:7f:a9:5d:16:
cb:f0:ba:dd:16:85:92:0d:ab:6a:ac:0d:f8:f0:dc:dc:28:37:
68:79:c8:ec:53:d0:78:b8:0e:22:3d:47:a9:4b:32:ec:4f:cd:
46:2f:8b:3e:b5:7c:b7:50:8b:30:37:02:6c:71:f3:64:a9:14:
b3:ed:08:03:b1:c3:86:21:7e:fe:25:db:f9:fc:df:c4:cd:f4:
20:75:33:57:b6:cb:91:0c:73:67:f1:00:ba:a2:aa:fc:fd:3a:
2f:de:91:e8:b9:9f:39:07:7d:ee:55:f2:df:ef:51:d7:ed:7e:
2b:38:7b:40:72:a3:0b:70:00:e6:98:12:4f:e3:cf:ec:eb:9e:
27:c9:13:a4:96:2c:72:8c:ee:50:1d:fb:71:fb:f1:3d:e6:43:
f8:06:77:d6:5d:f2:fd:b8:06:94:e3:66:ec:bb:b9:6d:90:02:
9e:13:23:a6:14:6a:30:fb:06:e2:dd:14:33:1d:02:1f:5d:47:
a8:68:e8:d5:1a:8f:08:67:43:44:89:63:ea:5a:6e:c8:26:2b:
96:11:15:d9:49:2f:06:24:cf:57:8d:f8:8d:ea:21:37:93:f0:
17:3e:98:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:00:47 2026 by rpki-client