
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
File: n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft (raw, json)
Hash identifier: 6de9bTCwlLrl85JETOYh6K2XCgrcqLTuTZlzhDom970=
Subject key identifier: DE:66:73:D6:F3:85:CE:43:81:E1:44:7B:C7:BE:C0:B9:15:9E:16:64
Authority key identifier: 9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7
Certificate issuer: /CN=A91F8282/serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7
Certificate serial: 0133
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
Manifest number: 012B
Signing time: Wed 07 Oct 2026 06:13:37 +0000
Manifest this update: Wed 07 Oct 2026 06:13:36 +0000
Manifest next update: Wed 14 Oct 2026 06:13:36 +0000
Files and hashes: 1: n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl (hash: uQ8fSnzm8dmp50BjV9g5WDLEfsmrMQboYLr6zMTr9+Q=)
2: 05EBB6CEFEF811EFB0C52572C4F9AE02.roa (hash: YgdZkpaRGf3qZu8ORhNwjKQyDofcMXRWEr4dow0fuZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl
rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8282, serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7
Validity
Not Before: Oct 7 06:13:36 2026 GMT
Not After : Oct 14 06:13:36 2026 GMT
Subject: CN=6ac5e311-e882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:36:80:b6:c8:fe:6a:9e:3d:0a:8f:a4:04:b3:
9d:44:34:1c:cb:c1:6c:51:af:5d:c3:28:38:da:5c:
9d:3d:2a:52:ad:3a:53:78:b3:45:05:7b:30:99:b9:
7f:bb:a6:ac:11:11:bb:bd:9a:c8:24:5e:59:6d:6f:
5e:07:3c:fd:fd:33:6a:23:48:3e:50:4e:81:31:ae:
9d:09:ad:b2:68:46:1f:2a:e4:a6:56:66:39:04:29:
3b:f6:1c:a7:84:5f:13:87:83:47:c1:bb:e6:be:6e:
f2:87:d2:d7:7d:9b:50:7a:e5:0e:f5:42:7e:be:bf:
7d:b9:2c:2b:37:8d:85:b7:17:77:7d:12:b6:e7:7f:
52:52:60:92:26:81:de:95:d0:e3:35:04:22:62:68:
74:20:95:de:a2:d8:cc:a1:9e:27:30:19:3e:e0:1e:
eb:55:06:07:9b:02:07:a8:ca:92:69:e6:94:af:d9:
c1:6f:2b:2e:27:75:9f:b5:11:8e:c5:5c:1d:b5:4f:
e8:7d:18:ef:8e:41:5b:3a:53:af:33:25:eb:cb:2f:
ae:b4:25:04:e4:46:d6:f6:65:50:20:00:08:8e:5c:
57:fa:a6:86:aa:b2:2b:91:fd:8e:be:c0:72:74:4a:
c2:a9:f2:a4:ab:0f:60:bb:e7:2a:45:5a:01:e9:5b:
bb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:66:73:D6:F3:85:CE:43:81:E1:44:7B:C7:BE:C0:B9:15:9E:16:64
X509v3 Authority Key Identifier:
keyid:9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:e5:e1:7e:94:c9:4c:dd:04:3a:dd:50:38:8e:05:c2:02:b0:
35:e6:af:e5:52:6d:4c:c9:7f:ce:b9:ca:01:5d:8d:92:5f:87:
8b:35:72:ab:47:91:a2:7d:a5:14:c5:b2:bb:83:5c:a9:41:c7:
bd:5b:90:8a:db:6e:29:bd:4a:77:b1:91:29:09:c1:39:4a:3c:
01:35:c8:bf:18:29:ce:7e:76:ac:48:ba:4f:57:5b:a1:fb:86:
8c:76:18:34:03:df:d8:73:a4:c7:d5:ca:b0:bd:3f:e2:e9:63:
5e:31:d0:0e:31:35:92:e2:8a:29:96:a9:3c:1d:00:d7:69:20:
5f:53:f9:7c:eb:df:7f:25:40:7d:34:1b:ec:87:69:96:ed:ea:
bc:f6:21:b1:60:8c:42:bb:3a:2c:a5:83:fa:3f:58:dd:d7:b1:
db:c7:9b:fc:91:28:e9:69:c9:a7:5c:fb:14:83:b1:81:4e:f2:
2b:01:2c:6a:40:71:ae:9a:97:30:8b:3c:ba:fb:6e:08:af:15:
dd:7c:a0:61:1a:c5:a7:f3:20:8f:bc:92:cd:81:23:7f:a8:7b:
71:27:0a:30:6e:b8:83:2d:d2:ca:be:67:fe:4f:25:1e:40:a7:
47:c3:5a:6c:df:77:91:23:17:ee:0d:4d:7a:4e:f4:6b:94:f8:
14:f2:7c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:02:27 2026 by rpki-client