
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
File: 3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft (raw, json)
Hash identifier: 2NGuBed3TBZIyNpl0LyQrPmq/33wFO6R3RkNKQX68o8=
Subject key identifier: 46:20:56:E9:31:FF:5A:83:A8:A8:E4:D4:7A:7D:E9:5F:CA:44:3B:76
Authority key identifier: DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0
Certificate issuer: /CN=A91A5201/serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
Manifest number: 0122
Signing time: Tue 27 Oct 2026 06:06:49 +0000
Manifest this update: Tue 27 Oct 2026 06:06:49 +0000
Manifest next update: Tue 03 Nov 2026 06:06:49 +0000
Files and hashes: 1: 3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl (hash: zLKE+klsoqfWyZQo2vVf+lXxyArecoxctr0Y4wM+7cw=)
2: D0CA23541BC611F09FDAC047C4F9AE02.roa (hash: T6VpKK0GSgbr7FyO43J42BuxmDs3Uod/nZfdKOm/b7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl
rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 06:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5201, serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
Validity
Not Before: Oct 27 06:06:49 2026 GMT
Not After : Nov 3 06:06:49 2026 GMT
Subject: CN=6ae03f79-7205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:1d:6c:20:38:50:81:e2:6f:b3:28:a4:19:
4b:48:8e:41:0c:32:c5:d5:71:a9:34:1f:08:4b:81:
fd:00:fa:b5:e9:f0:cd:9f:f4:96:69:97:46:ed:d9:
49:ad:a8:52:24:54:24:04:1d:93:81:16:3d:8e:86:
24:aa:f3:40:95:8c:91:5c:a1:f2:f6:89:de:d6:60:
5b:df:66:ae:6e:61:73:88:2f:d2:dc:e0:47:b7:fa:
1c:9a:2f:26:c7:ae:07:f5:13:73:17:dd:f3:ab:80:
f6:08:cd:aa:d4:74:0d:5c:87:d0:be:e1:61:7b:f8:
4f:c2:e3:cb:bd:b8:54:1f:6d:3a:de:8e:b2:54:07:
e5:01:d5:aa:1b:45:eb:28:d8:91:ae:92:56:0f:d8:
6a:da:3d:01:7a:07:ad:f7:34:38:c4:45:fa:73:26:
8b:33:d0:72:0a:30:73:df:71:0e:4f:aa:9d:24:83:
01:10:fa:d5:07:f2:88:24:f9:4b:84:88:ee:73:19:
c6:08:d3:cb:16:a9:18:80:c5:2f:b3:29:3a:3f:22:
0d:6e:f4:d1:4a:cc:9a:dc:22:2a:6a:15:6e:d5:71:
d6:56:bc:55:b8:1f:ad:57:5b:f9:f0:23:54:17:d1:
f0:f1:45:fc:b9:b4:35:59:dd:12:62:73:47:8f:7a:
2a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:20:56:E9:31:FF:5A:83:A8:A8:E4:D4:7A:7D:E9:5F:CA:44:3B:76
X509v3 Authority Key Identifier:
keyid:DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ab:1e:88:d6:36:42:11:41:7a:91:25:2f:87:32:eb:bf:d2:
a8:20:f7:20:0b:92:99:01:99:76:f6:2b:99:1b:cf:15:0d:23:
6b:b3:f7:d0:38:9b:fa:03:24:4f:e2:00:86:b6:5e:25:d9:99:
9f:6c:08:c0:90:73:e5:bb:d9:e3:6b:01:25:29:6f:4e:41:61:
05:53:2e:f2:47:49:4f:e3:4e:f6:2a:e9:ad:9e:0d:3a:09:29:
9f:10:34:a5:28:ef:d9:ce:cb:e0:f8:6b:6a:c6:d3:c3:81:72:
ee:b9:4b:e5:e1:e6:a4:ef:11:3a:9a:01:b2:bc:ad:8f:b2:f7:
26:06:55:f2:a3:0e:f6:12:49:6d:17:ff:cf:4b:4c:49:01:73:
f2:b4:67:ba:01:34:58:53:43:88:01:df:fc:96:9e:16:4b:6b:
a0:f2:74:a5:d2:b2:f4:2a:d9:ce:39:bb:3e:2f:a3:bb:ca:c3:
50:c6:64:ee:b6:89:17:c2:ad:1d:7e:79:fd:7a:79:36:e7:31:
2d:76:6e:6a:79:66:2b:94:42:7a:b4:f0:8f:8f:43:04:0b:58:
52:44:75:34:de:32:96:b0:c4:8b:de:97:85:96:db:c9:aa:eb:
d9:88:b6:4a:fe:a5:18:9e:39:23:c2:bc:3f:d8:56:76:00:0b:
ab:a4:9b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:11:30 2026 by rpki-client