
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
File: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft (raw, json)
Hash identifier: ZwL88sN3tk9ajKZyyr/AWRO20E59h5DNKdq0NFeA2K4=
Subject key identifier: 01:2F:C2:B9:D8:0B:9F:B6:C8:7A:42:5A:89:CC:13:6C:A6:C8:F3:71
Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
Certificate issuer: /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Certificate serial: 19A2
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
Manifest number: 1998
Signing time: Sat 24 Oct 2026 15:44:36 +0000
Manifest this update: Sat 24 Oct 2026 15:44:35 +0000
Manifest next update: Sat 31 Oct 2026 15:44:35 +0000
Files and hashes: 1: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl (hash: Z3DWtnKizIfbqK+e5TUJvHUhVfX3Q3WUCexDnQyuA90=)
2: AEA7C9C0818911EA81577016C4F9AE02.roa (hash: zQccTnouDv5A6wclfHfEY6cMmKILAn1V1UJrrTmuOMo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6562 (0x19a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Validity
Not Before: Oct 24 15:44:35 2026 GMT
Not After : Oct 31 15:44:35 2026 GMT
Subject: CN=6adcd264-151d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:71:f5:cf:d0:cc:6b:a2:0c:e9:d0:6a:3f:64:
55:7d:69:34:93:d2:04:9b:43:12:8b:12:26:53:ac:
cb:30:8b:64:d5:a6:d0:45:e2:b4:56:3d:ac:93:95:
50:ef:2e:33:5b:2d:ab:a5:95:b6:76:e0:2c:53:58:
4a:c0:e8:2f:34:e5:7a:7c:8d:a6:59:32:cc:68:58:
65:dd:b7:04:9c:54:c8:85:d3:06:2e:56:3f:9f:f6:
ab:ad:0c:f9:0a:d6:67:e1:98:9a:8f:f3:a7:71:58:
84:bd:7e:fa:02:ab:f1:fe:bb:b9:b0:f3:12:df:b9:
14:5f:c5:b2:d4:c3:7e:37:c8:a0:ad:16:09:68:07:
16:d3:f6:b4:b3:31:f8:dc:7b:f0:1c:8d:94:42:3f:
05:f4:59:cb:34:bc:6e:9c:44:ff:25:c1:4c:80:8d:
4a:ce:c3:58:4d:41:2c:4c:0e:96:09:96:f6:1b:bf:
27:c1:56:cc:a4:cd:f0:73:85:de:1a:d3:23:6a:11:
5d:a7:25:25:81:e6:f7:24:86:76:5d:b4:3e:72:c1:
54:8c:0e:bc:81:8e:ed:55:31:d2:c9:62:a9:92:cb:
52:aa:07:ed:3a:66:1d:3d:d7:1c:7d:75:d5:ec:49:
1a:ea:6b:8f:0c:e3:c2:61:13:1f:45:10:b6:f0:58:
ab:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2F:C2:B9:D8:0B:9F:B6:C8:7A:42:5A:89:CC:13:6C:A6:C8:F3:71
X509v3 Authority Key Identifier:
keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:f9:b3:62:44:a5:69:b9:6a:16:d5:f6:58:d7:54:aa:c3:05:
96:ac:6d:5e:ee:12:73:3f:89:9d:cb:60:5e:bb:50:84:d2:82:
65:5a:e1:7c:e0:11:37:9a:9e:7e:d0:a5:1e:39:83:a6:2a:98:
53:b8:11:fa:9c:af:a9:8f:7c:13:e8:f7:00:64:e2:26:03:61:
60:01:de:d5:40:e4:fa:e0:70:d9:3c:94:60:0f:e7:57:ae:0c:
f6:d4:6b:ab:3e:f7:c2:7e:2b:4b:73:34:de:01:2e:02:d3:4d:
85:70:ff:9d:fb:1f:c1:44:bd:08:a9:eb:9e:73:15:0d:f6:6b:
79:c9:00:f6:ae:53:a3:e2:d3:a1:7c:2d:4b:9d:3b:17:70:4c:
7d:4b:57:66:16:13:e0:f4:0a:fb:72:fd:ae:0a:a8:40:71:ce:
c0:a5:09:44:cd:c7:48:f3:68:c8:2b:04:fa:83:57:3a:f5:2a:
dd:fb:0b:4e:80:24:b2:a5:9d:9b:90:29:9d:f0:6e:1b:36:2b:
91:aa:3c:f9:32:8e:51:27:87:a9:69:d6:0c:f5:06:23:73:fc:
9c:a0:86:5f:2c:3b:7f:52:c5:da:f9:55:55:52:d6:ef:90:98:
81:f4:32:a9:73:6e:2d:c9:44:c4:14:98:5e:7b:f5:a5:fc:ef:
29:27:6f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 23:17:21 2026 by rpki-client