
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
File: US3AbkHAiZokofyIXrNG5FMH80c.mft (raw, json)
Hash identifier: ZfzRQvMWHWAkqep81YNlSCWE8FrK3ePkSidYPA81YYY=
Subject key identifier: 90:39:8C:ED:CD:CF:40:C4:BE:30:DA:A7:49:6C:D1:52:59:74:1E:F8
Authority key identifier: 51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47
Certificate issuer: /CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347
Certificate serial: 0A5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
Manifest number: 0A54
Signing time: Sun 04 Oct 2026 19:43:14 +0000
Manifest this update: Sun 04 Oct 2026 19:43:13 +0000
Manifest next update: Sun 11 Oct 2026 19:43:13 +0000
Files and hashes: 1: US3AbkHAiZokofyIXrNG5FMH80c.crl (hash: KaZVWoaVEnXkOOVvxhQWgNhvkYIUG8t6E9oE0pWzPfw=)
2: 9EEA3006979411EA8C6FC25AC4F9AE02.roa (hash: OYi6iPOzlWh6eoXqX49fJiVTJCcfXyryKflqKEAnvYA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl
rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2653 (0xa5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA4F2, serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347
Validity
Not Before: Oct 4 19:43:13 2026 GMT
Not After : Oct 11 19:43:13 2026 GMT
Subject: CN=6ac2ac52-832d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:62:82:58:5b:f4:17:da:f0:8a:98:47:e6:5f:
69:a9:d5:c0:2f:35:96:91:0e:bc:fb:0a:be:ed:2d:
30:7b:88:96:a1:58:fe:f9:58:95:43:3f:4b:cc:50:
9d:d2:f8:a2:7b:25:26:58:d8:39:6d:d3:cb:a7:03:
ed:3f:32:81:4d:d4:f9:06:ff:f4:e5:a4:4a:aa:3b:
e0:4e:85:23:4c:4a:ec:34:af:e4:3a:8f:60:f8:f1:
bd:eb:ee:56:43:4e:1d:86:90:2a:2c:7c:13:bc:0f:
da:1a:f8:58:0a:37:c4:5b:0d:f2:a8:83:9f:ff:45:
9e:74:ac:ba:c5:94:d6:a6:b9:65:cf:fe:9d:aa:e2:
e1:c2:a8:f7:ab:a1:80:52:b7:ba:4b:93:42:d6:df:
a6:6b:e3:cb:a9:66:9d:8a:c0:93:55:9d:5d:c0:cb:
66:99:6d:f9:fe:46:22:3b:b9:cc:97:99:a4:fb:b0:
b8:4f:95:2e:72:57:8b:65:00:04:05:4c:e9:7c:0f:
03:d4:5d:bb:ec:38:89:7d:70:4a:f3:1b:72:a0:40:
63:10:d2:7c:cf:7c:41:4a:22:b3:8b:61:84:29:b3:
97:3f:b8:4d:7b:ff:4a:dc:20:16:c6:e5:3d:3d:65:
0f:ad:86:46:67:a1:f9:7b:44:80:f7:b0:bb:4d:05:
51:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:39:8C:ED:CD:CF:40:C4:BE:30:DA:A7:49:6C:D1:52:59:74:1E:F8
X509v3 Authority Key Identifier:
keyid:51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5f:e8:90:8a:d0:a1:f5:11:5a:72:a9:a5:86:a2:1a:6b:cd:
63:32:d0:50:84:1f:b5:32:9e:6a:8f:c7:cc:e5:43:15:61:d4:
8d:1d:bb:ab:c0:ab:0f:14:05:c8:8b:df:6b:a8:b5:48:c2:14:
2e:63:ef:2c:c4:33:06:0d:2f:ee:d3:77:25:da:6e:9b:90:e3:
69:48:ae:89:08:78:e3:f3:2e:76:34:1e:1a:1e:88:0b:b1:45:
cf:17:79:8e:ae:95:05:5e:82:ef:4a:11:83:13:ff:a9:ce:83:
55:d3:66:31:d6:b7:42:0c:10:68:0f:a1:c9:c7:94:61:a8:80:
56:b8:60:1d:03:12:9b:de:9a:31:32:e3:36:41:0e:16:04:1f:
55:3a:57:e1:7f:2a:e9:7e:59:98:8e:e7:b1:ce:68:d4:e2:ca:
51:96:1e:2f:4a:bc:e6:95:8d:74:4a:e4:a6:14:e1:dd:9b:14:
cf:d4:87:de:a4:09:cc:fb:b9:02:9a:01:06:15:a2:06:85:71:
b6:6d:21:06:af:c0:4f:55:1f:53:e3:ea:e0:1b:59:d8:a6:b9:
1e:e6:4a:3b:29:fb:6c:1c:f1:31:cf:4e:bb:8d:5a:18:f1:fb:
e7:ac:c8:d3:e5:2a:69:46:be:46:5c:3a:34:15:7e:d5:6b:ad:
4a:89:79:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkE0RjIxMTAvBgNVBAUTKDUxMkRDMDZFNDFDMDg5OUEyNEExRkM4ODVFQjM0NkU0
NTMwN0YzNDcwHhcNMjYxMDA0MTk0MzEzWhcNMjYxMDExMTk0MzEzWjAYMRYwFAYD
VQQDEw02YWMyYWM1Mi04MzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA02KCWFv0F9rwiphH5l9pqdXALzWWkQ68+wq+7S0we4iWoVj++ViVQz9LzFCd
0viieyUmWNg5bdPLpwPtPzKBTdT5Bv/05aRKqjvgToUjTErsNK/kOo9g+PG96+5W
Q04dhpAqLHwTvA/aGvhYCjfEWw3yqIOf/0WedKy6xZTWprllz/6dquLhwqj3q6GA
Ure6S5NC1t+ma+PLqWadisCTVZ1dwMtmmW35/kYiO7nMl5mk+7C4T5UucleLZQAE
BUzpfA8D1F277DiJfXBK8xtyoEBjENJ8z3xBSiKzi2GEKbOXP7hNe/9K3CAWxuU9
PWUPrYZGZ6H5e0SA97C7TQVRuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJA5jO3N
z0DEvjDap0ls0VJZdB74MB8GA1UdIwQYMBaAFFEtwG5BwImaJKH8iF6zRuRTB/NH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTRGMi8yQUVERUY5QTk3
OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWlab2tvZnlJWHJORzVGTUg4
MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VTM0Fia0hBaVpva29meUlYck5HNUZNSDgwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTRGMi8yQUVERUY5QTk3OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWla
b2tvZnlJWHJORzVGTUg4MGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADF/okIrQofURWnKppYaiGmvNYzLQUIQftTKeao/HzOVDFWHUjR27q8CrDxQF
yIvfa6i1SMIULmPvLMQzBg0v7tN3Jdpum5DjaUiuiQh44/MudjQeGh6IC7FFzxd5
jq6VBV6C70oRgxP/qc6DVdNmMda3QgwQaA+hyceUYaiAVrhgHQMSm96aMTLjNkEO
FgQfVTpX4X8q6X5ZmI7nsc5o1OLKUZYeL0q85pWNdErkphTh3ZsUz9SH3qQJzPu5
ApoBBhWiBoVxtm0hBq/AT1UfU+Pq4BtZ2Ka5HuZKOyn7bBzxMc9Ou41aGPH756zI
0+UqaUa+Rlw6NBV+1WutSol5qQ==
-----END CERTIFICATE-----
Generated at Mon Oct 5 05:18:09 2026 by rpki-client