
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF69B/D0A6D604912411F1A0E4B4A95A11F970/p3MQvP36A844ZrCqzJjJKkQ87dM.mft
File: p3MQvP36A844ZrCqzJjJKkQ87dM.mft (raw, json)
Hash identifier: lDk0Y8N+O7q+GkwaL3wWxSLziTdighw6s2NvMpPglNY=
Subject key identifier: B4:F3:FD:52:DF:7D:2C:44:82:CF:97:0B:48:13:22:89:72:D6:CF:70
Authority key identifier: A7:73:10:BC:FD:FA:03:CE:38:66:B0:AA:CC:98:C9:2A:44:3C:ED:D3
Certificate issuer: /CN=A91DF69B/serialNumber=A77310BCFDFA03CE3866B0AACC98C92A443CEDD3
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3MQvP36A844ZrCqzJjJKkQ87dM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF69B/D0A6D604912411F1A0E4B4A95A11F970/p3MQvP36A844ZrCqzJjJKkQ87dM.mft
Manifest number: 09
Signing time: Wed 19 Aug 2026 09:55:08 +0000
Manifest this update: Wed 19 Aug 2026 09:55:08 +0000
Manifest next update: Wed 26 Aug 2026 09:55:08 +0000
Files and hashes: 1: p3MQvP36A844ZrCqzJjJKkQ87dM.crl (hash: lOM+ww+PkbOvY1GL6VzPN2HnmzW8XLGt0ayXiL1YSlQ=)
2: 48FECFBC912511F1A8E8FFC05A11F970.roa (hash: D4+TvfPm3wAXw9U6+KaqFuoaVRMCsZmap8tPANSh1c8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF69B/D0A6D604912411F1A0E4B4A95A11F970/p3MQvP36A844ZrCqzJjJKkQ87dM.crl
rsync://rpki.apnic.net/member_repository/A91DF69B/D0A6D604912411F1A0E4B4A95A11F970/p3MQvP36A844ZrCqzJjJKkQ87dM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3MQvP36A844ZrCqzJjJKkQ87dM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:55:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF69B, serialNumber=A77310BCFDFA03CE3866B0AACC98C92A443CEDD3
Validity
Not Before: Aug 19 09:55:08 2026 GMT
Not After : Aug 26 09:55:08 2026 GMT
Subject: CN=6a857d7c-8ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:04:25:12:50:bf:7a:3f:86:a9:c6:5d:c0:
db:ef:3c:6a:73:24:dc:6b:80:a1:ec:f7:8b:ed:bf:
87:be:4a:f2:07:8a:a5:eb:72:bd:b0:e3:f0:66:b3:
03:23:37:45:8d:86:b7:68:cc:30:38:0a:bc:e3:9f:
34:e0:ed:8d:86:42:17:bb:77:b1:ce:cb:5a:77:bc:
f1:33:75:2d:da:43:ea:8f:0c:b3:95:3c:67:4e:6e:
37:36:57:e5:0c:11:dc:ea:3e:3a:43:a9:b6:63:dd:
1d:4c:e1:68:54:68:2b:6a:2b:97:ca:12:c0:b1:d1:
fa:75:0d:cb:b3:24:be:6c:a2:e5:3d:98:31:68:06:
3d:ee:24:66:00:4d:ef:46:d3:59:7d:96:f0:98:be:
77:ad:14:b2:54:da:bf:17:30:af:be:26:4b:ba:09:
63:96:8e:9c:65:bf:10:3c:a0:bd:86:b6:0a:39:47:
c1:eb:f2:3e:c5:1d:c4:ef:32:48:db:d4:bd:17:59:
4c:ee:0c:b4:c6:2a:1c:53:b1:53:53:08:a9:a5:7a:
8d:22:da:bc:7f:a5:ab:86:6a:92:43:58:1d:03:c8:
a6:a1:3f:61:09:ac:8d:d0:c8:2f:9c:60:bd:75:12:
03:50:ad:ae:10:63:8a:a4:08:13:3b:e3:44:45:d1:
d0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F3:FD:52:DF:7D:2C:44:82:CF:97:0B:48:13:22:89:72:D6:CF:70
X509v3 Authority Key Identifier:
keyid:A7:73:10:BC:FD:FA:03:CE:38:66:B0:AA:CC:98:C9:2A:44:3C:ED:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF69B/D0A6D604912411F1A0E4B4A95A11F970/p3MQvP36A844ZrCqzJjJKkQ87dM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3MQvP36A844ZrCqzJjJKkQ87dM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF69B/D0A6D604912411F1A0E4B4A95A11F970/p3MQvP36A844ZrCqzJjJKkQ87dM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:a4:13:67:b4:75:57:76:49:7f:f7:37:97:ca:16:d4:f2:94:
17:5e:05:fd:5b:6a:6d:15:06:20:49:1b:fb:63:e6:43:b7:4e:
a8:c8:d1:cd:c6:48:5a:fc:f6:be:1d:88:8d:c8:62:6a:42:ae:
b5:16:7d:f3:12:c4:dc:f2:bf:82:b0:a3:e1:56:08:95:3f:6a:
96:4b:e0:bc:ba:f1:ad:9c:0f:f0:79:3f:81:78:5d:74:68:03:
3f:4c:2b:f5:06:b3:3d:2f:67:f7:18:93:25:bf:d7:4e:e5:e3:
76:9c:f7:b4:04:ef:cd:db:bf:2d:43:ce:8f:ba:79:7d:b5:14:
74:f2:bc:41:18:92:aa:ba:a1:35:ea:79:7a:da:00:54:3c:9b:
8d:68:2c:10:24:24:d9:c0:3f:51:67:2b:b0:28:22:78:bd:16:
6e:3a:b8:fc:2e:25:13:6e:59:b5:59:a4:10:62:ae:fd:fc:b4:
f5:c4:96:86:9e:d8:12:72:cd:0a:a2:dc:37:e3:0e:fe:db:45:
5b:c6:5b:09:8b:9d:ce:33:40:c5:08:fb:ad:85:76:73:7f:6b:
4e:4d:1d:6f:d2:fa:68:52:a7:d8:7a:c4:49:63:f5:aa:16:68:
53:55:6c:9b:f9:08:fc:f7:92:bb:97:9f:06:e5:3c:db:c6:23:
8f:f9:85:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:41:55 2026 by rpki-client