
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft
File: 3iZtavC5PenIaScyCi6du8nPnMI.mft (raw, json)
Hash identifier: O5wWTmyhohEyffv6x0OvLz7YanB932NmQJ66ob4W+vs=
Subject key identifier: 36:63:BA:BD:D0:7F:CC:D6:AD:EF:B0:CE:D7:40:F3:F8:53:C1:4E:9F
Authority key identifier: DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2
Certificate issuer: /CN=A91CD314/serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft
Manifest number: 6E
Signing time: Thu 03 Sep 2026 08:14:08 +0000
Manifest this update: Thu 03 Sep 2026 08:14:07 +0000
Manifest next update: Thu 10 Sep 2026 08:14:07 +0000
Files and hashes: 1: 3iZtavC5PenIaScyCi6du8nPnMI.crl (hash: qb0YM2ikMBps9kPeM9P/Fei9A+r2IDdiHB8GiLbxiGM=)
2: F6C2C81E834311F1B9E2C7285DA30FBC.roa (hash: kCrXSc0aKtEtfFEBk7WKaV+XU9QoVwY1fk0Vu7k5ZJY=)
3: C4D99CDE097B11F1B8223907113D8C67.roa (hash: KEWr/3hG6gAXbw8XNIv0hau0dk9zYvinvGd5h59v7Jw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl
rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:14:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD314, serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2
Validity
Not Before: Sep 3 08:14:07 2026 GMT
Not After : Sep 10 08:14:07 2026 GMT
Subject: CN=6a992c50-df84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:ed:0f:ac:dc:f5:6e:00:d1:b1:93:eb:80:
7a:07:88:3b:38:83:a8:8f:3a:33:3b:7f:95:00:17:
d0:22:10:7d:16:6d:00:98:07:96:10:37:3d:dc:27:
69:8d:c0:9c:b8:83:e2:cf:39:a3:a0:bf:9d:9c:24:
0c:72:0d:c6:77:ef:f7:54:83:1a:7a:19:cc:15:27:
74:9b:32:d5:54:d0:56:d8:5c:44:23:7e:ff:18:e2:
04:da:f7:1a:c2:0e:31:ba:76:57:73:16:f9:84:13:
6b:c1:f1:98:5a:ed:db:a5:b1:b8:e5:9b:cb:e7:8f:
a7:50:57:96:bc:1a:1a:a7:05:b7:d5:5a:cc:62:c0:
36:c0:5d:27:f0:d9:49:91:da:1d:22:e4:80:5f:14:
ad:3f:cc:40:57:b6:7e:80:fe:f4:1e:2c:5d:df:1e:
ff:28:1e:65:cf:6c:d5:cd:c3:81:19:b3:03:37:07:
97:e2:82:70:25:09:5c:bb:e3:4d:0f:0c:36:46:0c:
81:82:3e:01:b9:a4:14:de:4e:ec:76:9a:be:b9:6c:
cf:3f:2d:e8:ce:07:21:cd:e9:8b:fb:29:51:a8:d4:
5a:60:7e:af:ba:ca:cf:9e:52:a8:18:61:fd:f4:86:
c6:13:c8:19:a7:da:b3:29:93:20:d9:60:ea:ab:a3:
53:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:63:BA:BD:D0:7F:CC:D6:AD:EF:B0:CE:D7:40:F3:F8:53:C1:4E:9F
X509v3 Authority Key Identifier:
keyid:DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:33:85:5e:56:75:ce:29:80:e5:4e:55:9a:e2:0e:c1:f5:6c:
58:50:ef:55:0a:01:a6:a9:9f:dd:7f:a2:74:94:04:48:2b:16:
68:03:75:6c:f9:ea:dc:2e:1f:ce:f9:38:89:8f:7e:4f:95:c4:
b7:ae:e7:31:49:2f:8e:2c:b2:0d:17:cf:64:58:1f:2f:c5:92:
37:7a:1a:0a:93:99:c3:ce:38:e7:9d:1d:94:ad:f0:3f:39:c8:
79:c6:99:a4:54:4e:14:3a:11:a4:83:29:59:2e:92:4e:39:c1:
ff:54:62:d7:68:f6:31:5d:79:23:aa:2d:74:d9:b9:62:9d:a2:
71:ce:a0:9a:f7:5a:a8:c4:0b:bd:4d:99:ba:73:39:3e:d2:ba:
1e:63:bb:f6:66:fe:7f:16:8e:47:c4:05:43:16:40:d1:b2:a6:
03:42:f7:c4:82:f6:ba:9f:63:a1:7a:58:1d:54:5d:2d:33:46:
99:2d:9b:7c:82:b9:53:f5:1b:75:15:8c:35:8c:3f:aa:36:f1:
3d:5b:56:f0:6d:9b:e5:7c:44:f3:ec:e9:5b:e2:8e:a3:a9:cc:
f1:1f:b3:20:e5:16:57:f5:91:2e:11:08:51:8e:8f:12:b2:34:
e1:9d:fa:33:6e:af:a1:11:bf:4f:4b:5d:9b:49:13:ce:44:ba:
ee:d7:41:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:51:00 2026 by rpki-client