
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
File: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft (raw, json)
Hash identifier: F2cNZmzFWACQZ0aACBRyVrb2TDNk43p08i8uScGLQbg=
Subject key identifier: DF:F1:D5:83:65:DC:6B:B4:46:5F:D8:E5:CF:99:2D:D2:DA:F4:E2:F5
Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
Certificate issuer: /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Certificate serial: 0CDA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
Manifest number: 0CD0
Signing time: Sun 04 Oct 2026 18:32:12 +0000
Manifest this update: Sun 04 Oct 2026 18:32:11 +0000
Manifest next update: Sun 11 Oct 2026 18:32:11 +0000
Files and hashes: 1: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl (hash: q46YgXG4NJT5lMrO+tyaJyk353QLFQLM0hkJv8ZcxsY=)
2: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (hash: veYCT0YVn2lsSh/a1SemHmCMUXzXqFx3N+q0M958UTg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 18:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3290 (0xcda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91822BF, serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Validity
Not Before: Oct 4 18:32:11 2026 GMT
Not After : Oct 11 18:32:11 2026 GMT
Subject: CN=6ac29bab-5a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d0:8b:c3:99:7d:f7:c7:7c:aa:90:7b:fa:bd:
94:f7:42:7c:0a:b8:bb:71:af:57:c2:b1:cc:06:7a:
1e:0c:5f:03:a5:44:24:9f:79:a8:cd:96:c9:db:78:
1d:ed:7d:9c:2a:60:6e:bf:dd:93:ec:d7:56:71:4d:
e9:5f:44:e2:36:da:29:c6:b7:ab:71:ea:49:6c:db:
3d:59:af:7e:79:18:a2:76:b1:97:7a:26:df:c6:f6:
83:cc:39:69:0c:1f:58:20:1c:b0:90:21:03:72:5c:
f0:39:32:82:b3:7f:0a:e5:92:4e:58:bf:7e:7d:6d:
0a:bb:e0:4f:c3:9b:5d:34:99:6e:9c:e3:d7:a7:6d:
77:57:7d:63:81:37:da:cb:fd:bd:29:23:f3:1e:00:
6e:8d:85:f9:e7:03:d9:29:37:8d:58:85:f4:e4:d8:
5b:8a:d0:3d:97:8f:e2:80:39:a7:c5:ec:19:15:ef:
e9:9e:8d:d2:bb:0f:ee:4b:27:ce:72:24:ec:9f:78:
4c:f3:70:fa:f6:d4:ff:04:02:5d:6e:bf:18:92:f9:
a0:33:d5:05:94:62:c3:70:19:41:ec:fe:22:3a:67:
3a:e0:72:04:01:97:75:e0:08:95:c2:28:81:e0:10:
76:93:2d:26:de:27:ed:06:8a:2d:e6:6f:e2:e6:6d:
21:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F1:D5:83:65:DC:6B:B4:46:5F:D8:E5:CF:99:2D:D2:DA:F4:E2:F5
X509v3 Authority Key Identifier:
keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:98:9f:66:a0:de:89:48:1a:97:91:3c:5c:5d:ce:37:bf:da:
dc:7d:44:58:00:aa:6b:f6:ba:28:eb:5c:b8:d5:84:e4:a5:4d:
63:5e:f9:c8:2c:48:57:8b:8f:1b:44:1f:4d:20:dd:dd:5a:2a:
c3:7a:e9:62:c4:f0:34:46:eb:c8:d8:fc:ce:c2:22:01:68:c1:
75:37:9b:c8:cd:c3:d1:1d:28:99:f9:cb:99:53:a2:46:1d:cc:
9f:69:72:d2:95:74:d8:70:7d:c9:fa:51:a5:62:c7:62:74:d9:
8e:b3:0a:b5:35:bd:c9:12:c0:58:6f:75:b5:4e:a1:ca:4b:e5:
7f:9d:12:74:35:14:79:c5:5d:e7:8e:23:ca:bd:5d:e2:a5:bc:
dd:98:73:b6:b7:e8:c2:52:65:39:5f:65:73:df:97:04:50:b2:
de:60:c4:cd:4b:c1:dd:88:5f:4d:e0:1d:14:c1:d7:a6:d6:92:
f4:79:6e:b2:6b:8f:4d:98:d2:b3:26:80:bd:47:9e:0c:15:e2:
5a:a4:2f:fa:55:66:cc:df:bc:92:4e:7b:09:9f:3f:27:b4:ea:
af:fe:3b:8b:ff:95:e6:77:26:20:ef:1a:8f:fc:91:1e:a9:12:
fb:f1:e2:e4:96:dc:f2:46:40:25:f8:b8:78:e7:89:ef:64:2d:
80:8f:84:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:35:37 2026 by rpki-client