
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
File: r3YSV94snaXzPnHGQZ4meoYt-2I.mft (raw, json)
Hash identifier: 0m0lVq3mRwQf/QZKTIKD93/6EvXXEgRy3kHp9yhRquw=
Subject key identifier: 60:C4:E2:40:43:98:7B:A5:00:2A:74:E5:00:2A:98:D0:8D:E2:92:92
Authority key identifier: AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62
Certificate issuer: /CN=A91F4D54/serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
Manifest number: 013E
Signing time: Fri 23 Oct 2026 06:02:07 +0000
Manifest this update: Fri 23 Oct 2026 06:02:07 +0000
Manifest next update: Fri 30 Oct 2026 06:02:07 +0000
Files and hashes: 1: r3YSV94snaXzPnHGQZ4meoYt-2I.crl (hash: 7p7zG1TtOeb+tkeDYZaNjo53HbkXXTeOUAmW264njts=)
2: 61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa (hash: TBjFZLoAcX8XTz4OXPD8ohPadAtZD+uq/tBStT0J3HQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl
rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 06:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4D54, serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62
Validity
Not Before: Oct 23 06:02:07 2026 GMT
Not After : Oct 30 06:02:07 2026 GMT
Subject: CN=6adaf85f-01fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f1:ce:d8:c1:91:a3:5e:a6:e0:3a:75:1c:0f:
93:ab:eb:24:fd:5a:4c:83:c8:2c:9e:95:a8:2a:8e:
ac:ad:02:28:a6:f4:a6:e3:28:c7:eb:32:cb:9a:ed:
f4:05:23:84:d0:e6:70:16:d3:a8:4a:98:7a:e6:83:
a6:63:66:8a:83:c5:1a:e0:b9:fb:f8:86:bb:ef:6d:
69:aa:01:c3:3d:bb:cf:3d:18:fa:47:0c:9e:de:54:
78:a9:27:ac:19:d3:3b:b3:93:48:fd:cb:86:61:c9:
cf:f3:af:38:a1:33:ec:14:cb:f1:e7:61:6d:27:05:
31:87:9e:2e:2e:ef:56:de:9a:6e:20:70:e6:2b:8a:
6c:ba:75:dc:4d:38:ef:41:f1:c5:8b:f5:f0:89:c4:
c4:d7:8c:f6:3d:ac:61:67:91:5e:f8:46:85:8d:2b:
cd:97:a8:05:55:31:f9:9c:38:49:64:c0:66:1e:c3:
c1:6d:bc:c2:23:ac:27:e5:98:78:56:74:ec:86:22:
59:95:9f:9c:43:87:d6:1c:88:bf:63:24:29:6b:e0:
2f:19:5f:38:60:06:8b:66:8a:8b:88:a7:aa:64:21:
4b:41:01:66:32:32:24:ed:21:81:b0:3f:bf:20:ac:
09:1e:41:cb:9a:58:ec:b4:fd:91:77:8f:25:d7:58:
c9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C4:E2:40:43:98:7B:A5:00:2A:74:E5:00:2A:98:D0:8D:E2:92:92
X509v3 Authority Key Identifier:
keyid:AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a2:f5:12:92:d7:e5:8f:e7:36:69:c4:9c:8b:5e:72:4f:48:
0b:82:25:a1:a5:4e:40:76:7d:eb:33:f2:19:25:fc:2e:75:3c:
ea:d1:e5:27:a7:b8:81:3e:86:fc:fe:c6:40:ae:5a:08:7b:1b:
fb:58:6a:ef:98:1b:40:ca:49:0c:12:2c:e2:82:df:f2:77:b3:
d3:42:e7:43:ed:2b:25:52:dc:4d:c7:5e:0e:f2:69:c4:40:f5:
12:ab:f0:67:e0:90:8d:8c:6a:c5:8a:25:90:0f:c4:ca:e9:2b:
01:79:d2:1b:d1:99:2f:ab:8d:13:3a:c1:b5:7d:d4:72:fd:3c:
13:36:71:36:20:73:36:a6:ea:e3:15:d2:10:07:09:3e:34:1d:
7e:6b:9c:3f:f4:e5:0e:70:7b:52:44:c1:15:89:fa:13:09:05:
ab:82:80:66:38:be:be:04:da:88:65:64:d3:3b:3d:98:8f:f6:
19:e4:8a:2b:b2:d8:74:9c:ab:c4:9b:54:b7:ce:cb:f9:f5:71:
1a:95:12:ca:c7:ea:d2:bd:fd:c3:ea:38:69:5d:2f:aa:1a:b7:
2c:3d:d2:4b:cd:24:4d:22:b4:42:13:6d:8f:7c:38:f0:06:66:
95:d3:01:12:6e:a2:88:28:47:ae:85:d0:d8:34:5f:f2:15:42:
80:3d:e9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 23:39:15 2026 by rpki-client