
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
File: _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json)
Hash identifier: An+Y/86IHRXGxI1/THOXCkB0+5Ad7UqYYZGr3ZmHbN4=
Subject key identifier: 06:43:29:2B:66:4E:44:60:10:C9:DF:C3:24:12:F1:12:73:0B:CB:CF
Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5
Certificate issuer: /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
Certificate serial: 0303
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
Manifest number: 02F6
Signing time: Mon 05 Oct 2026 01:11:46 +0000
Manifest this update: Mon 05 Oct 2026 01:11:45 +0000
Manifest next update: Mon 12 Oct 2026 01:11:45 +0000
Files and hashes: 1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: udbbsMzlzPXB7/nQ43nhmIh/wZCTbwHle/9eYLkT+UM=)
2: 41669A1AFA7111EFBBC5374BC4F9AE02.roa (hash: olDCuTzSXRa+4yuV9e6OJTjYDQDslUZvSPW/HYSoqc0=)
3: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: rO0tDNcttMplae7nIOvYG1R1bdxFHJg9RWvc/5wp/yQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl
rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 01:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 771 (0x303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
Validity
Not Before: Oct 5 01:11:45 2026 GMT
Not After : Oct 12 01:11:45 2026 GMT
Subject: CN=6ac2f952-c05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:9f:ba:f7:76:db:14:b4:f3:e7:76:c3:f3:
8d:a7:1d:3e:b7:d6:7e:83:30:c3:ab:08:52:8c:d5:
91:6b:c5:dd:33:76:dc:17:5f:99:45:40:b7:b7:ca:
bd:6c:57:80:32:d5:73:2a:64:ad:a3:f8:a3:a0:7e:
80:31:57:0d:61:7b:92:f9:39:6e:a9:b2:ec:45:46:
76:b6:b2:e2:5b:d7:96:e5:08:a2:eb:82:4b:b2:a8:
84:3a:c7:26:7c:39:ec:23:17:21:d0:5e:f9:47:c8:
0f:9a:7d:9c:e8:a0:21:9e:c1:7b:32:bc:9a:52:35:
f8:30:b2:5a:c5:94:25:7c:68:4f:66:b4:d7:6a:2d:
7e:54:87:50:5c:d4:b2:90:bc:e0:d5:b3:79:08:3d:
3b:e9:20:9f:e5:2a:65:92:dd:e3:d8:14:45:40:de:
4a:c0:29:38:69:21:23:fa:10:da:89:65:92:5e:20:
c5:fc:8e:f8:d6:4b:c6:74:38:3c:01:e5:58:a6:6f:
7d:6a:e8:f9:53:a0:50:54:1f:83:ed:ae:3e:06:50:
44:9d:79:00:d9:66:48:b3:74:f3:53:d7:cf:67:4a:
10:94:62:12:e0:bb:f6:9d:2f:f3:5c:0c:68:18:5c:
53:7d:cf:57:bf:1e:cc:b9:5b:ff:e9:e3:7a:00:fe:
e1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:43:29:2B:66:4E:44:60:10:C9:DF:C3:24:12:F1:12:73:0B:CB:CF
X509v3 Authority Key Identifier:
keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
df:1d:e3:58:be:fa:8a:af:b7:d1:ba:c9:50:b8:fa:fb:a8:fc:
8d:a9:c8:94:4d:b4:8b:3f:cd:c1:6b:d9:e8:2d:bb:f7:fb:46:
6d:6a:db:eb:97:97:6f:6d:60:3f:87:00:02:c7:a8:9d:86:79:
75:60:a8:61:10:fc:2a:3d:cb:7a:7f:c7:fa:00:ac:ad:81:c2:
af:6b:47:08:70:85:51:cf:4b:fe:09:cb:d6:b5:f5:9a:16:e9:
6b:22:aa:88:45:9d:69:11:4f:d6:90:f0:62:3d:ad:ee:6e:33:
f5:c6:3d:b7:0d:93:c4:7e:a9:f3:81:a1:9c:89:98:0b:2c:fb:
f5:53:90:19:3c:7a:a6:d2:0c:16:fa:4b:ad:44:71:51:67:6a:
a4:48:31:f6:f8:35:ed:53:c1:a2:66:d2:5e:34:b7:10:b5:62:
a4:b2:21:5b:4a:71:06:17:9e:82:c8:4b:70:30:66:65:4b:fe:
d7:6d:60:cc:fc:2c:28:ad:71:76:b9:dc:1b:3e:cb:76:e6:da:
7a:b7:fb:c7:08:b1:55:17:3d:79:4f:e0:64:0f:f4:a1:f0:7f:
a1:2e:9e:a2:40:fc:77:fa:a4:9e:b8:99:cb:45:35:4a:f6:1b:
cf:a8:9b:4b:59:78:6d:0d:f6:c3:c7:c5:ed:dd:76:3a:d0:1a:
7f:04:b3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:33:22 2026 by rpki-client