
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF69B/D0A6D604912411F1A0E4B4A95A11F970/p3MQvP36A844ZrCqzJjJKkQ87dM.mft
File: p3MQvP36A844ZrCqzJjJKkQ87dM.mft (raw, json)
Hash identifier: 9i5iA4oYpbpWqivVHYiNiAAQtUgNoqKnM8SjbPyT+1g=
Subject key identifier: 79:05:52:D5:19:6B:B6:D3:DB:5E:E2:07:05:6F:6D:41:F4:82:1B:8D
Authority key identifier: A7:73:10:BC:FD:FA:03:CE:38:66:B0:AA:CC:98:C9:2A:44:3C:ED:D3
Certificate issuer: /CN=A91DF69B/serialNumber=A77310BCFDFA03CE3866B0AACC98C92A443CEDD3
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3MQvP36A844ZrCqzJjJKkQ87dM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF69B/D0A6D604912411F1A0E4B4A95A11F970/p3MQvP36A844ZrCqzJjJKkQ87dM.mft
Manifest number: 25
Signing time: Fri 09 Oct 2026 09:38:56 +0000
Manifest this update: Fri 09 Oct 2026 09:38:56 +0000
Manifest next update: Fri 16 Oct 2026 09:38:56 +0000
Files and hashes: 1: p3MQvP36A844ZrCqzJjJKkQ87dM.crl (hash: ejCWwulExxAtDF5DnNQFZS1zX9HpPVnesE+FQ6Ej/Hg=)
2: 48FECFBC912511F1A8E8FFC05A11F970.roa (hash: 3KT6qG6Cmsc5yYwnqRXoaN7HG+nksr5OFUNb+d+J2eg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF69B/D0A6D604912411F1A0E4B4A95A11F970/p3MQvP36A844ZrCqzJjJKkQ87dM.crl
rsync://rpki.apnic.net/member_repository/A91DF69B/D0A6D604912411F1A0E4B4A95A11F970/p3MQvP36A844ZrCqzJjJKkQ87dM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3MQvP36A844ZrCqzJjJKkQ87dM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 09:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF69B, serialNumber=A77310BCFDFA03CE3866B0AACC98C92A443CEDD3
Validity
Not Before: Oct 9 09:38:56 2026 GMT
Not After : Oct 16 09:38:56 2026 GMT
Subject: CN=6ac8b630-a36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:3f:3a:df:fa:fa:30:9d:13:f9:15:28:a5:
0b:96:dc:c3:de:90:bf:52:d6:a1:63:58:64:4c:ae:
83:89:f6:fb:a0:e1:d8:99:e9:ee:ba:de:0e:45:6f:
57:d7:23:f5:26:e1:07:92:b1:69:14:8b:4b:47:ac:
15:5c:bf:fe:f8:a1:2c:00:2d:7b:95:14:14:40:f6:
5b:a2:ab:37:2b:3e:45:d8:7f:ac:c4:dc:c3:e8:62:
53:e1:ca:a2:0e:34:68:4e:00:53:3f:3e:b0:b5:c4:
c8:4e:52:bc:79:56:f5:80:ad:cc:6c:1b:ce:2d:ee:
d5:32:69:c7:94:5e:03:77:6c:3a:1b:e3:3a:9e:ed:
14:dc:82:b0:28:b5:df:4d:25:ad:a4:35:cb:3a:70:
dd:2e:31:b6:a1:1a:13:7c:a2:88:e1:88:34:86:7f:
19:83:a7:33:6f:60:17:44:0a:1a:16:94:49:99:81:
a0:81:13:37:29:49:45:a3:0e:f4:d5:ab:66:af:b4:
6e:80:3f:21:8d:a1:ce:bb:20:6e:d0:e1:89:fc:64:
8c:54:58:ad:24:79:85:3f:ef:a9:c9:00:82:f2:ad:
16:04:2e:a2:8a:ae:7b:86:5c:3a:fd:ee:b1:55:85:
00:ec:c3:9f:00:2a:55:11:7d:e2:c0:87:00:72:d1:
f4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:05:52:D5:19:6B:B6:D3:DB:5E:E2:07:05:6F:6D:41:F4:82:1B:8D
X509v3 Authority Key Identifier:
keyid:A7:73:10:BC:FD:FA:03:CE:38:66:B0:AA:CC:98:C9:2A:44:3C:ED:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF69B/D0A6D604912411F1A0E4B4A95A11F970/p3MQvP36A844ZrCqzJjJKkQ87dM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3MQvP36A844ZrCqzJjJKkQ87dM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF69B/D0A6D604912411F1A0E4B4A95A11F970/p3MQvP36A844ZrCqzJjJKkQ87dM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ad:b1:b5:04:cf:ea:32:5f:1a:7f:8f:a7:1b:2b:fc:cf:8a:
9c:ce:57:8d:06:b5:9f:d7:77:fe:93:6e:2e:cc:ef:4e:bf:93:
c4:8f:52:ae:16:f7:31:d5:b3:6e:cd:e0:b5:a7:53:9f:ea:8a:
36:b7:a2:fa:61:21:8e:87:bd:1e:f3:08:3c:ba:6f:92:aa:4f:
6d:27:40:40:5c:7d:20:25:ad:2d:5b:f3:76:e4:0c:4e:ec:a5:
b0:78:41:3f:d0:f5:5b:7d:c3:f3:46:57:e6:37:2a:9c:59:d1:
78:8d:70:6f:12:2d:98:9c:0b:28:16:40:ab:68:04:36:fd:56:
4c:16:75:70:0c:73:87:5f:b6:11:43:79:26:7f:dd:bc:9f:5c:
4b:ea:ec:ce:11:ec:2b:02:f5:cb:ad:fe:4f:5e:8f:0c:b8:13:
0d:38:4b:00:46:dd:e7:71:46:09:7a:c5:8b:7f:50:47:9f:60:
ba:bf:fe:93:73:a2:c5:47:3c:a1:4f:2d:0d:66:fc:d7:ae:df:
6e:35:93:35:f0:aa:6b:69:38:9f:ef:cf:72:8f:b4:0a:f3:98:
d9:08:7f:62:8e:52:ee:fe:e1:58:e4:8f:55:1f:da:9b:ac:c0:
f2:d8:3c:3d:58:c6:37:c4:a5:ba:7d:aa:ba:9b:d4:cc:34:be:
f2:21:28:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:17:11 2026 by rpki-client