
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft
File: 3QrS3kp0TRozsRu2q9fm6s79wIU.mft (raw, json)
Hash identifier: dUBFxE6uYbd2vJ++5XH2qoypJGn1GQS/rv/DoGzNnec=
Subject key identifier: D0:83:0F:2F:47:F0:91:5B:65:53:F8:DF:89:81:E3:8E:36:64:C0:35
Authority key identifier: DD:0A:D2:DE:4A:74:4D:1A:33:B1:1B:B6:AB:D7:E6:EA:CE:FD:C0:85
Certificate issuer: /CN=A91DC897/serialNumber=DD0AD2DE4A744D1A33B11BB6ABD7E6EACEFDC085
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft
Manifest number: 80
Signing time: Wed 07 Oct 2026 08:15:41 +0000
Manifest this update: Wed 07 Oct 2026 08:15:40 +0000
Manifest next update: Wed 14 Oct 2026 08:15:40 +0000
Files and hashes: 1: 3QrS3kp0TRozsRu2q9fm6s79wIU.crl (hash: PcfVc9Xy6gjli49APl10cc76fMIcIrZPKR12aIbSSjg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.crl
rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 08:15:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC897, serialNumber=DD0AD2DE4A744D1A33B11BB6ABD7E6EACEFDC085
Validity
Not Before: Oct 7 08:15:40 2026 GMT
Not After : Oct 14 08:15:40 2026 GMT
Subject: CN=6ac5ffac-64c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:77:67:d8:7c:d5:b9:0c:1d:78:9b:59:ec:
06:a7:db:aa:09:3d:e5:3b:ff:ca:a5:79:78:b4:9f:
b4:9d:a6:bd:a2:52:e6:a4:f8:64:7a:a1:96:b6:01:
7c:3c:85:e2:f9:f0:1c:b4:c8:c6:a5:a2:33:b2:af:
7b:1c:e0:c3:63:2d:95:c9:8c:3d:2c:12:fd:e6:0f:
ac:b3:62:fc:5f:6c:ed:c9:cd:25:f9:3f:08:46:10:
ca:68:e2:d1:6f:7e:ca:39:7f:bf:f1:9b:a3:f5:09:
e1:16:49:b7:47:1c:4a:21:26:a0:e0:0a:cc:22:be:
db:32:ec:b9:9b:f9:bf:0e:90:c2:94:5c:e3:5f:eb:
50:e2:50:87:19:58:e5:a9:04:62:af:76:ac:1b:cd:
5b:44:a9:72:09:4b:91:3e:e9:6d:2d:b3:5b:dd:a5:
52:a6:90:fa:bc:7a:3d:93:97:2c:d7:93:12:1a:da:
62:83:dd:66:9b:82:b2:a3:f1:2f:87:1d:cd:6a:d5:
20:2c:22:cc:c3:5c:91:16:3d:ba:0b:9a:6f:d6:8c:
ed:ec:3e:53:9f:c8:47:35:df:aa:bf:df:dc:46:0f:
89:d7:ff:b9:26:04:24:05:c8:a5:11:68:53:7a:f4:
f1:84:c4:cb:ad:5c:1b:8a:0a:ee:69:e5:d0:ea:df:
77:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:83:0F:2F:47:F0:91:5B:65:53:F8:DF:89:81:E3:8E:36:64:C0:35
X509v3 Authority Key Identifier:
keyid:DD:0A:D2:DE:4A:74:4D:1A:33:B1:1B:B6:AB:D7:E6:EA:CE:FD:C0:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:30:13:16:35:b4:db:93:0c:b0:3d:6c:d9:3e:c0:e7:fa:88:
95:f5:3b:9c:3f:6a:2e:2d:e5:28:a9:b8:f2:bb:27:8d:6f:86:
cb:63:6b:65:65:d8:f2:47:1a:d7:49:60:09:b9:06:8a:84:56:
e8:68:2b:21:cf:10:8c:ba:99:79:e7:e6:98:7b:f8:cc:08:e8:
bb:b2:eb:2f:20:9a:10:f5:c4:39:a1:da:b1:71:67:32:a6:06:
1c:52:7a:c8:9b:25:0b:81:51:a8:49:3b:07:90:d2:b5:42:81:
93:bc:c3:14:fb:fd:5c:ff:db:81:c1:d8:4e:ff:da:cc:d5:36:
59:d7:1a:e4:3e:b8:dc:c6:83:73:ce:6b:dc:fa:4e:86:67:46:
20:ae:bf:6b:dc:d8:d9:14:38:03:d4:35:5a:90:a8:d8:a5:fb:
94:5c:21:cf:59:93:82:e8:ad:fc:8b:b3:32:dd:6b:75:2e:6b:
7b:2d:d3:d5:a6:6c:e1:32:dd:1d:ca:8a:70:c2:fd:09:18:23:
64:7b:1f:8f:f2:6c:d2:71:c5:56:1c:3f:87:75:e5:27:4b:4d:
16:d9:bb:20:ff:b4:7c:e4:9c:25:bd:c8:9d:45:04:e9:48:19:
1a:b4:60:33:50:d3:c5:79:49:64:8e:50:22:26:10:f9:1c:d3:
30:72:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:41:03 2026 by rpki-client