
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft
File: 3panNCLI2QZghYm5zxT4SUcGqMM.mft (raw, json)
Hash identifier: P9gZZ3W7kYrcvt2jAZkOizAAMMvNdxovuhAvXjBkUB8=
Subject key identifier: C8:84:66:54:C1:DD:62:C7:78:32:63:3E:36:15:5E:1B:53:9A:EE:12
Authority key identifier: DE:96:A7:34:22:C8:D9:06:60:85:89:B9:CF:14:F8:49:47:06:A8:C3
Certificate issuer: /CN=A91BE8A9/serialNumber=DE96A73422C8D906608589B9CF14F8494706A8C3
Certificate serial: 84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft
Manifest number: 84
Signing time: Wed 07 Oct 2026 08:10:57 +0000
Manifest this update: Wed 07 Oct 2026 08:10:56 +0000
Manifest next update: Wed 14 Oct 2026 08:10:56 +0000
Files and hashes: 1: 3panNCLI2QZghYm5zxT4SUcGqMM.crl (hash: seBZdPW5lG+vcQemykIp5IDj3zJ/h8cFZwU81uqXQnE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.crl
rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 08:10:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE8A9, serialNumber=DE96A73422C8D906608589B9CF14F8494706A8C3
Validity
Not Before: Oct 7 08:10:56 2026 GMT
Not After : Oct 14 08:10:56 2026 GMT
Subject: CN=6ac5fe91-27a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:fb:c4:9a:f3:33:31:2d:24:6b:b6:3d:3a:
2f:14:2c:4c:73:5b:67:d2:4e:b6:f3:03:e4:06:29:
38:cf:fa:d3:3b:0a:85:fb:e2:d1:66:0b:54:ec:bd:
60:25:ee:81:d5:7f:40:53:d6:e5:46:74:56:2c:66:
f8:0a:05:72:7b:da:c1:dc:6b:3f:21:b3:12:c7:a5:
21:a6:91:d3:4b:e3:8c:b5:67:a5:13:08:cd:0f:43:
7e:90:83:9a:ff:35:c3:ac:94:83:a1:4f:8f:de:2b:
43:73:88:03:84:e7:ac:76:16:54:c0:2a:0a:2c:af:
8c:2d:4c:28:85:44:74:3a:00:a9:f9:55:4b:31:98:
8e:b9:a8:5f:2f:f5:e7:6c:e5:c3:5e:82:96:3e:c1:
ec:40:89:7b:1c:5a:58:e5:e0:9e:c6:5a:58:d0:9c:
c4:bc:c9:d1:2b:5a:13:af:26:c0:d6:d6:b8:07:bc:
b8:c1:03:e9:bd:40:ba:af:5e:0f:42:16:fa:10:63:
6f:68:e8:f6:39:98:3e:c5:a0:f0:e7:16:4f:07:27:
ea:03:4a:28:45:30:90:ad:bf:99:d7:86:b5:ee:2e:
95:5c:8a:fc:03:cf:79:9a:91:74:50:65:c8:e3:61:
6c:62:67:7c:c5:48:fd:59:ba:c5:ea:78:9d:ba:e0:
86:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:84:66:54:C1:DD:62:C7:78:32:63:3E:36:15:5E:1B:53:9A:EE:12
X509v3 Authority Key Identifier:
keyid:DE:96:A7:34:22:C8:D9:06:60:85:89:B9:CF:14:F8:49:47:06:A8:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:44:76:b3:0f:b2:8c:16:63:5d:9e:95:fa:3d:46:21:47:01:
cb:24:c3:ed:8e:50:bc:75:4d:1f:95:54:a2:ea:1a:a3:9e:2e:
52:c2:8b:c3:4e:fa:2a:27:35:aa:9b:b3:f9:6b:96:6d:f0:aa:
9a:4c:59:2f:bc:0c:21:39:4c:0d:18:bc:79:99:1d:e8:c9:b1:
2f:86:66:e2:93:7c:ed:53:d9:f4:86:22:99:f9:7a:0b:5e:a3:
2a:9c:be:26:a1:38:5b:8c:50:4d:d6:98:4e:76:d2:bc:5d:46:
fd:f4:18:7d:61:d0:cd:18:28:43:ef:29:71:5d:93:28:71:61:
6c:4d:94:57:e5:73:e0:d1:e5:d9:f6:74:b6:af:d8:a2:18:77:
38:6f:b1:dc:5a:ac:c6:8f:f5:87:49:5a:87:86:ba:18:09:fb:
98:a8:0e:df:fa:5b:30:40:73:db:2c:45:94:08:6d:06:bf:5b:
4a:7b:4e:16:68:24:9a:ab:0a:2a:34:39:65:e9:b4:b7:e5:12:
83:cf:ce:f1:7a:e6:29:00:70:f8:21:8d:c3:98:a6:20:ca:ae:
2a:1d:f1:63:2a:80:20:27:14:f3:83:cd:83:a1:d3:96:48:a0:
6b:10:18:72:fd:f1:09:0a:00:1b:64:09:32:d1:ef:8c:3e:4e:
1c:89:12:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 09:26:06 2026 by rpki-client