
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
File: k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft (raw, json)
Hash identifier: NsgFOanGAhn7/11aBVOpFPPDFnFvksvom8BAB9HbS6s=
Subject key identifier: B3:63:88:10:87:D1:9C:73:AE:C9:7A:B2:33:A2:49:15:84:DF:84:71
Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
Certificate issuer: /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
Certificate serial: 0225
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
Manifest number: 01FA
Signing time: Mon 19 Oct 2026 04:01:15 +0000
Manifest this update: Mon 19 Oct 2026 04:01:14 +0000
Manifest next update: Mon 26 Oct 2026 04:01:14 +0000
Files and hashes: 1: k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl (hash: T6Kr2v1JD3ANW8fShxclrspelmN8tUJJF4UJCurh+jU=)
2: 69299E5E451A11F1923B844B97833773.roa (hash: 6yTtk6GVQ3Q+uX3huIXknhgsTRlkg8J79fIZJaNP+EQ=)
3: CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (hash: T+9eZucYuIbcTkKwIw8LA6osZSTEz7bmZE02liyk2E0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl
rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D73BB, serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
Validity
Not Before: Oct 19 04:01:14 2026 GMT
Not After : Oct 26 04:01:14 2026 GMT
Subject: CN=6ad5960b-6c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:fa:94:1a:50:25:36:a2:dc:ce:de:8d:0b:
dd:74:83:32:74:e7:6f:8b:b3:b3:b4:10:51:ed:84:
21:cf:29:02:94:e2:c9:7b:4a:01:6d:e5:f2:b7:b1:
a3:f1:45:5c:60:b0:88:47:24:5b:cf:e0:f6:31:8c:
b6:75:fd:93:83:6e:f1:ab:40:1a:4b:d8:3c:2f:5c:
99:5c:65:7e:b5:db:28:4c:86:d6:63:a8:be:c9:01:
8a:c1:db:8a:b4:7e:7a:18:8d:24:d3:29:7a:24:c9:
eb:92:b1:d1:ae:e7:81:54:44:c4:2b:11:b5:33:31:
80:5d:57:23:19:ea:7a:b8:5a:e5:77:41:a1:ab:85:
d2:4e:0e:38:09:7f:35:75:8a:d9:55:36:56:71:71:
c4:60:ca:38:b6:c5:55:5f:c4:3b:dd:31:53:bc:91:
80:70:50:fd:d6:31:67:74:24:23:c2:19:d5:a1:63:
a0:87:04:d7:63:e6:d1:ec:d6:3e:8d:87:53:1e:a1:
cd:50:41:f4:9b:44:c2:cf:a4:e5:17:81:6c:7d:a0:
9d:ab:bf:f7:5f:33:88:6a:04:ff:8b:d9:fa:09:3a:
c8:8d:5f:1c:5b:aa:34:7a:2f:f0:aa:5c:d9:f9:04:
32:96:1b:64:8d:39:42:4a:12:36:25:55:aa:91:f1:
ae:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:63:88:10:87:D1:9C:73:AE:C9:7A:B2:33:A2:49:15:84:DF:84:71
X509v3 Authority Key Identifier:
keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:ba:4a:54:70:95:fe:2d:7c:59:fe:95:6c:3f:37:d4:90:76:
99:e6:28:5e:b8:69:d7:e3:dd:12:d1:5c:1a:92:49:c5:a2:c4:
b5:15:39:83:61:cf:f3:3e:50:86:17:db:22:a3:fb:69:d6:77:
f0:96:1f:66:db:06:ef:2b:42:6b:b2:c3:69:34:4a:9c:3b:f7:
51:11:27:e3:3d:0f:14:60:8f:b5:31:b7:b7:30:f7:17:9b:c8:
42:2d:c6:30:34:a3:9c:aa:8f:5d:75:5d:75:76:66:c7:be:8d:
06:15:d3:fa:d1:bb:4d:aa:2f:97:e8:f7:7f:8b:ab:6c:c3:f4:
32:a6:cb:e5:d1:81:f2:58:e0:1d:84:e2:cc:0d:86:45:d6:b6:
9d:4a:21:68:9d:aa:4d:e5:b3:05:02:11:52:e9:32:12:ba:3e:
f9:00:6a:73:97:2c:0d:b5:fc:51:e1:f5:43:d1:ba:e6:c4:2d:
80:7d:e1:d2:96:a3:69:ce:e6:f6:f5:87:b7:a9:8b:70:34:7a:
bb:19:71:2a:e6:da:e8:dc:f8:c0:2c:a5:ad:59:b2:d6:b7:fd:
c1:57:c7:c5:bb:55:cb:35:79:88:db:3b:e4:5f:92:a0:49:6a:
64:0d:5b:21:a0:08:77:0a:81:f5:c3:1b:39:8a:74:cc:2e:fa:
85:9c:d3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:59:24 2026 by rpki-client