
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
File: 3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json)
Hash identifier: C4mGdWhMszlS6IW6sTRsMoTnmEEL0YTq+DuLi54o4qc=
Subject key identifier: E9:E5:69:EB:F3:F5:E7:1E:82:97:A0:C0:AE:B5:CF:AA:E1:05:9E:13
Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7
Certificate issuer: /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7
Certificate serial: 01E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
Manifest number: 01D6
Signing time: Sat 03 Oct 2026 04:18:13 +0000
Manifest this update: Sat 03 Oct 2026 04:18:12 +0000
Manifest next update: Sat 10 Oct 2026 04:18:12 +0000
Files and hashes: 1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: /2MrdB6+9euU9hfztdGleU5S7a985AzLKAs3RWRadQk=)
2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: MxjihytyjqbI0kprRCcgZJxlcagSJ1SZVxyrVtzudrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl
rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 04:18:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480 (0x1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE2E, serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7
Validity
Not Before: Oct 3 04:18:12 2026 GMT
Not After : Oct 10 04:18:12 2026 GMT
Subject: CN=6ac08205-ee93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:1b:2b:25:2f:84:61:8b:a6:01:a0:98:18:
cf:23:6c:e9:fd:bd:24:73:59:21:25:e4:d5:b1:79:
0c:51:18:3c:25:83:40:63:8a:0c:78:61:82:43:a5:
69:fa:d8:87:b4:9f:ca:9b:4e:71:be:4f:7b:b2:3a:
7c:13:1b:cd:0f:62:d7:05:ff:25:91:1d:81:44:64:
9a:14:c4:13:1c:1d:00:00:aa:57:ec:ca:60:a6:3c:
b9:41:77:93:23:a9:8d:5c:7c:51:4d:91:9b:79:f4:
2b:11:0b:c4:b3:9c:4c:6a:2d:cc:1f:82:fa:60:b2:
ed:45:f5:4b:9e:77:b7:f7:2c:31:52:07:1a:29:14:
c8:59:50:cd:31:75:77:8c:4a:fd:2e:a2:b2:eb:79:
a7:2b:b7:46:66:36:68:30:6c:ee:5f:4d:26:d0:44:
c7:b3:64:b5:c3:c1:22:00:48:5e:64:ab:d6:b9:12:
8a:3d:51:ec:07:bc:ef:42:23:45:2e:26:b8:2f:6a:
17:45:11:9b:6b:7a:0d:5e:9e:31:ba:33:14:23:92:
54:0b:bb:ef:e6:da:8a:2f:b3:54:24:a3:b1:cb:a2:
ce:a7:3a:bb:84:4b:60:be:20:ee:36:77:e8:f1:7d:
53:22:30:31:e0:30:bf:8f:6d:ee:71:13:4a:82:c5:
59:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E5:69:EB:F3:F5:E7:1E:82:97:A0:C0:AE:B5:CF:AA:E1:05:9E:13
X509v3 Authority Key Identifier:
keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:56:1b:b8:7e:c7:7d:48:4b:fd:83:e6:08:ef:b7:51:50:5d:
61:eb:12:26:a7:09:3e:99:b4:7d:8a:5c:48:f4:b9:88:68:6a:
07:77:e9:cd:2d:d1:75:d4:4f:41:61:bf:3a:c7:fb:b3:77:3f:
f7:4d:72:0d:a5:ed:cf:d2:6c:64:39:d2:c6:96:08:72:9c:7b:
8e:d4:84:86:0e:cd:c4:d7:23:35:32:74:f8:e5:76:01:29:f7:
72:d9:f1:71:72:f6:35:d4:f4:91:08:28:40:a4:be:76:49:b9:
77:b7:83:8b:88:bb:d8:b8:3e:46:d4:fc:58:b5:ae:ad:e5:5f:
de:9c:14:b8:f6:14:e8:9d:fa:9c:06:63:99:00:a7:30:3a:b9:
06:44:09:bd:71:cd:20:1c:46:0a:b1:7d:fb:86:05:04:50:c1:
73:f0:94:7e:35:da:2c:34:97:cf:3c:2d:04:5f:87:0b:3a:ba:
1c:06:d3:44:91:a3:cd:d3:04:64:bf:fc:69:51:d5:33:66:5a:
71:d2:0e:25:7c:ec:b5:91:26:8c:89:ef:4a:0a:20:91:ba:e1:
e3:00:e1:ae:c4:3c:44:69:64:a3:2b:60:c8:81:b8:e0:7c:e9:
a7:d5:bd:76:ec:b6:8b:80:a6:e6:ee:14:68:26:89:db:3e:33:
df:80:88:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:38:37 2026 by rpki-client