
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
File: 3dU_UiXtL42o0J56rZgsgLbOrag.mft (raw, json)
Hash identifier: sLgHcX8LvfAZseCe0YcPLSuzDrGvIwC3tARxydhjgbI=
Subject key identifier: EF:83:3B:89:55:77:BA:5E:AF:06:18:7F:EC:CD:2D:38:B5:5A:EF:D5
Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
Certificate issuer: /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
Certificate serial: 08A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
Manifest number: 2E93
Signing time: Sun 04 Oct 2026 16:44:13 +0000
Manifest this update: Sun 04 Oct 2026 16:44:13 +0000
Manifest next update: Sun 11 Oct 2026 16:44:13 +0000
Files and hashes: 1: 3dU_UiXtL42o0J56rZgsgLbOrag.crl (hash: gYTt2vMmWs7MO21tuOGdDwz1jYaeRNJKed/8cUrgkWE=)
2: 10C418C4D40011F083CDC127C4F9AE02.roa (hash: trEW3l3BfddlaJ5NOXeTcUWfTHS4ZdqJFRp+g2C/O5Y=)
3: CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa (hash: yofMdWFa6G+5IWdYK6Mk2y69/fwGAZwVAxMNAxb1xeg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl
rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2215 (0x8a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
Validity
Not Before: Oct 4 16:44:13 2026 GMT
Not After : Oct 11 16:44:13 2026 GMT
Subject: CN=6ac2825d-0f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:9f:8f:98:da:6f:f9:dc:07:06:dd:3d:97:
d8:f5:ea:6f:21:53:98:ba:76:e4:8b:12:83:f2:68:
fa:03:07:51:e2:51:87:e1:63:86:37:ce:48:bc:00:
e2:50:cb:57:eb:2c:e5:85:92:35:98:46:52:c7:9c:
14:eb:c4:59:91:18:c3:e5:c8:f9:ac:0a:82:28:02:
50:a1:e0:ed:e3:37:ac:9c:3e:ee:6c:99:21:f7:ea:
2a:28:62:f9:67:33:84:eb:c1:1d:ab:4d:a9:e1:c8:
8a:cc:cb:c2:d2:78:40:c1:5c:f7:2a:7f:6c:57:9a:
90:a3:cd:68:17:23:3b:56:da:3b:f6:38:a3:37:f4:
c7:f0:8f:59:6e:0f:ac:a9:a8:47:17:d4:ed:c5:43:
d8:02:35:f6:61:df:27:a8:65:c9:8a:e2:f5:fd:70:
a4:14:4d:f3:a3:fb:b1:39:92:f2:c6:84:d9:c6:b7:
ea:7c:b2:22:c9:c4:6e:d4:06:5e:d2:80:06:cc:e2:
f5:63:cb:18:ba:1b:55:a7:80:33:44:85:66:56:3e:
f9:db:34:d6:45:6b:ed:26:69:09:df:58:d5:ac:98:
c2:33:dd:03:e3:6d:25:7f:7d:ff:5b:ae:ec:1d:88:
f4:79:f4:90:3e:3a:05:91:01:22:f2:49:32:8f:da:
b5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:83:3B:89:55:77:BA:5E:AF:06:18:7F:EC:CD:2D:38:B5:5A:EF:D5
X509v3 Authority Key Identifier:
keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:bb:a5:46:59:2e:06:2b:ef:d5:ed:08:c5:54:29:36:ce:5f:
2a:19:26:f4:15:fb:f4:4d:c7:eb:ff:3e:18:5d:ec:67:f7:02:
71:26:77:b4:6c:b4:13:2c:4e:98:84:af:d3:ef:37:ec:23:fd:
bd:39:d3:5e:d3:75:d7:7f:6f:cf:fb:d8:69:56:21:46:80:f1:
5a:21:41:37:19:31:c5:2c:53:59:59:0e:28:ed:3c:7a:6c:4a:
48:2d:9f:b2:e5:76:19:88:df:ed:89:ac:a1:f1:58:90:a8:ef:
8f:d7:e7:87:5a:f8:5a:7f:7d:1a:83:33:6d:b8:2a:65:da:d6:
ac:6b:c6:81:6c:33:bb:b1:39:eb:25:4a:50:f8:25:19:b8:e0:
62:06:b2:4e:4e:c8:d2:fa:17:aa:ed:07:7e:e1:9c:61:e3:f8:
09:a9:cc:22:03:fe:e3:dd:34:05:6d:44:3b:e5:6c:c6:30:2c:
6a:7c:6d:9a:16:df:fa:d5:0c:6a:0e:43:06:90:1c:ae:32:69:
a6:06:47:7a:b0:7e:22:b4:bf:59:8b:01:40:12:4b:87:a4:d9:
03:12:17:13:ce:9c:39:d8:06:76:64:27:b4:5a:f3:7c:ca:39:
25:6d:aa:35:b7:a1:7c:18:44:dd:ae:75:73:c7:50:99:f6:a9:
40:b4:e8:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU4RUYxMTAvBgNVBAUTKERERDUzRjUyMjVFRDJGOERBOEQwOUU3QUFEOTgyQzgw
QjZDRUFEQTgwHhcNMjYxMDA0MTY0NDEzWhcNMjYxMDExMTY0NDEzWjAYMRYwFAYD
VQQDEw02YWMyODI1ZC0wZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmdOfj5jab/ncBwbdPZfY9epvIVOYunbkixKD8mj6AwdR4lGH4WOGN85IvADi
UMtX6yzlhZI1mEZSx5wU68RZkRjD5cj5rAqCKAJQoeDt4zesnD7ubJkh9+oqKGL5
ZzOE68Edq02p4ciKzMvC0nhAwVz3Kn9sV5qQo81oFyM7Vto79jijN/TH8I9Zbg+s
qahHF9TtxUPYAjX2Yd8nqGXJiuL1/XCkFE3zo/uxOZLyxoTZxrfqfLIiycRu1AZe
0oAGzOL1Y8sYuhtVp4AzRIVmVj752zTWRWvtJmkJ31jVrJjCM90D420lf33/W67s
HYj0efSQPjoFkQEi8kkyj9q1vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO+DO4lV
d7perwYYf+zNLTi1Wu/VMB8GA1UdIwQYMBaAFN3VP1Il7S+NqNCeeq2YLIC2zq2o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB
RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0Mm8wSjU2clpnc2dMYk9y
YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNkVV9VaVh0TDQybzBKNTZyWmdzZ0xiT3JhZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NThFRi9EMjQzMzc5NjRBRUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0
Mm8wSjU2clpnc2dMYk9yYWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARbulRlkuBivv1e0IxVQpNs5fKhkm9BX79E3H6/8+GF3sZ/cCcSZ3tGy0EyxO
mISv0+837CP9vTnTXtN1139vz/vYaVYhRoDxWiFBNxkxxSxTWVkOKO08emxKSC2f
suV2GYjf7YmsofFYkKjvj9fnh1r4Wn99GoMzbbgqZdrWrGvGgWwzu7E56yVKUPgl
GbjgYgayTk7I0voXqu0HfuGcYeP4CanMIgP+4900BW1EO+VsxjAsanxtmhbf+tUM
ag5DBpAcrjJppgZHerB+IrS/WYsBQBJLh6TZAxIXE86cOdgGdmQntFrzfMo5JW2q
NbehfBhE3a51c8dQmfapQLTo7g==
-----END CERTIFICATE-----
Generated at Mon Oct 5 22:48:19 2026 by rpki-client