
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/3g51A-ABhslzWN1dtBsa6o1bt98.mft
File: 3g51A-ABhslzWN1dtBsa6o1bt98.mft (raw, json)
Hash identifier: rqKNk2JXnuQGsfBDsY40a7hIDvDjZR/F6eWqV3RHK6Q=
Subject key identifier: 95:75:8D:CA:5C:20:6A:F7:58:86:EE:8C:CB:D3:1B:7E:DB:BB:18:35
Authority key identifier: DE:0E:75:03:E0:01:86:C9:73:58:DD:5D:B4:1B:1A:EA:8D:5B:B7:DF
Certificate issuer: /CN=A91DEF3E/serialNumber=DE0E7503E00186C97358DD5DB41B1AEA8D5BB7DF
Certificate serial: 0D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3g51A-ABhslzWN1dtBsa6o1bt98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/3g51A-ABhslzWN1dtBsa6o1bt98.mft
Manifest number: 0C
Signing time: Sun 11 Oct 2026 09:51:11 +0000
Manifest this update: Sun 11 Oct 2026 09:51:11 +0000
Manifest next update: Sun 18 Oct 2026 09:51:11 +0000
Files and hashes: 1: 3g51A-ABhslzWN1dtBsa6o1bt98.crl (hash: LgzgZ9tWsHDup3td1ie65412SOaWsWAxYPHwsZnBhOU=)
2: 16F2E8B4B5D311F18B3897F34511F970.roa (hash: aPzgvPWBiEMb+aOplX7bKEWIyKEhhVZj+xQvU3c5hig=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/3g51A-ABhslzWN1dtBsa6o1bt98.crl
rsync://rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/3g51A-ABhslzWN1dtBsa6o1bt98.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3g51A-ABhslzWN1dtBsa6o1bt98.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 09:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEF3E, serialNumber=DE0E7503E00186C97358DD5DB41B1AEA8D5BB7DF
Validity
Not Before: Oct 11 09:51:11 2026 GMT
Not After : Oct 18 09:51:11 2026 GMT
Subject: CN=6acb5c0f-1586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:82:85:42:15:5d:bd:ed:4a:48:94:b3:b3:
b6:f0:1f:53:26:2f:3e:c8:aa:02:c7:e4:da:e4:8c:
8e:28:97:06:4e:46:63:70:04:99:e4:2a:ff:9d:e4:
71:02:dd:f1:c9:d7:48:bd:14:29:31:f2:1a:08:19:
fd:e9:98:2a:cb:1b:b7:db:1b:3e:f0:67:ae:ae:c6:
51:bf:ba:8b:93:6e:d6:4b:3e:aa:9f:40:3d:51:4c:
32:57:ac:a9:19:35:bc:8b:6c:ab:dd:a6:10:71:6c:
8a:5e:41:d2:ae:75:15:53:39:f0:54:3d:43:63:84:
51:a4:46:e4:46:d4:3f:8e:84:c6:1b:17:67:3a:4d:
80:9c:0f:52:60:12:bd:f3:87:d6:11:60:d8:fa:17:
52:58:f9:1d:8b:ba:62:2e:b9:45:dd:7c:db:e7:59:
66:0e:c4:8c:84:49:8f:85:32:7e:24:6c:58:c4:76:
af:9e:c3:b3:77:5e:cc:5d:dc:16:a1:49:08:a3:7e:
9d:d1:ec:d7:72:6b:03:50:9a:ca:64:1a:7f:8a:43:
24:e2:66:ae:a4:c1:75:9b:db:49:5f:af:b5:4c:49:
d5:e5:9f:3e:55:a7:67:31:8d:b5:03:af:db:7a:a8:
88:ce:bc:e5:05:48:d5:d0:ca:d1:20:bf:ac:c1:53:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:75:8D:CA:5C:20:6A:F7:58:86:EE:8C:CB:D3:1B:7E:DB:BB:18:35
X509v3 Authority Key Identifier:
keyid:DE:0E:75:03:E0:01:86:C9:73:58:DD:5D:B4:1B:1A:EA:8D:5B:B7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/3g51A-ABhslzWN1dtBsa6o1bt98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3g51A-ABhslzWN1dtBsa6o1bt98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/3g51A-ABhslzWN1dtBsa6o1bt98.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:c9:55:60:d4:1c:5a:15:cc:b5:1d:8b:eb:09:54:be:dd:91:
7f:8a:5e:44:62:7e:49:a5:5e:53:e3:5a:c6:7c:ff:b7:78:c6:
ec:a1:5c:46:a2:a9:00:ac:43:b2:34:2d:1e:af:53:71:f9:f0:
f2:5e:3d:af:ea:0a:a9:0c:b4:25:49:ac:eb:6b:87:b4:2f:9b:
6a:a6:66:20:ec:63:4a:28:f1:d1:71:9d:20:eb:74:fe:4d:a1:
eb:c2:f6:55:5e:65:fe:03:0c:53:e9:15:b0:6a:80:14:f6:d5:
23:f1:79:07:a9:24:a6:41:eb:ab:ea:bb:7b:2b:25:46:a6:fa:
64:0c:22:8e:3c:2f:e9:71:ea:b5:e4:ee:b1:54:ca:b0:11:4a:
b6:85:c8:40:d7:cd:3e:13:a2:d5:c7:87:79:42:69:8c:6f:68:
ac:15:34:da:ca:8e:da:1d:e5:25:40:c2:4d:e0:de:b7:b6:cb:
e0:f3:75:5e:95:d0:9b:23:1a:9b:fd:75:5f:b8:4e:1a:f7:21:
72:8d:7e:f0:8e:63:fb:7c:56:1b:91:f5:c1:71:58:47:33:39:
df:e7:9c:0f:20:70:68:20:60:9e:2e:22:e6:56:b7:a4:52:db:
82:b5:df:8c:eb:42:b9:50:4d:99:9f:b3:3d:9e:36:30:a6:63:
16:8e:b4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:31:05 2026 by rpki-client