
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft
File: d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft (raw, json)
Hash identifier: sXCibRGMVn0N/Gl8M2e0c2Lh52QEN5raIB/WzWxmPjs=
Subject key identifier: A3:85:3D:ED:F7:1B:6C:11:C8:32:D7:C8:0B:95:82:17:C1:9B:47:40
Authority key identifier: 77:70:06:A4:1E:01:8E:33:F6:7C:29:FD:69:7E:64:48:C7:8E:5B:1B
Certificate issuer: /CN=A91F8A7D/serialNumber=777006A41E018E33F67C29FD697E6448C78E5B1B
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d3AGpB4BjjP2fCn9aX5kSMeOWxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft
Manifest number: 37
Signing time: Thu 03 Sep 2026 08:50:22 +0000
Manifest this update: Thu 03 Sep 2026 08:50:22 +0000
Manifest next update: Thu 10 Sep 2026 08:50:22 +0000
Files and hashes: 1: d3AGpB4BjjP2fCn9aX5kSMeOWxs.crl (hash: t5Dy0AeUBfVvSGhBgnvli0lkQtsW7hbnpeA7H2dSX1w=)
2: 91FB34E2559511F1BB2B33C094833773.roa (hash: /gb08kbBAX/TgmBzdK2NO6dLCZws+/ifOStMBIrUaVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.crl
rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d3AGpB4BjjP2fCn9aX5kSMeOWxs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8A7D, serialNumber=777006A41E018E33F67C29FD697E6448C78E5B1B
Validity
Not Before: Sep 3 08:50:22 2026 GMT
Not After : Sep 10 08:50:22 2026 GMT
Subject: CN=6a9934ce-58eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f0:d7:ac:84:1f:f6:47:bd:1b:d0:67:c3:77:
5e:5f:04:5c:b4:9a:f8:6c:f2:2a:97:e5:3d:e4:6e:
3d:0a:82:71:fe:1c:53:40:f6:0d:c5:8d:6c:53:c8:
b7:26:01:91:bc:f1:e6:47:4a:fc:ae:57:8d:58:17:
48:99:5b:8c:3e:03:b8:f9:65:8b:00:b5:8a:f3:d9:
30:3a:c2:d1:0e:03:f6:92:74:bc:88:7b:5f:3b:75:
13:6b:a9:c1:dd:71:e4:b9:4d:15:c2:fa:2f:44:64:
ab:e0:d7:2d:b6:cb:0f:bc:35:53:4b:e6:02:ab:14:
0d:57:7f:ba:aa:c3:35:11:bb:85:f1:7f:00:2e:66:
db:d0:5b:f4:b7:ed:ac:be:6d:b7:c0:48:fb:72:59:
9b:4e:79:c4:c2:d5:3b:96:ff:7f:ca:43:ee:5a:4a:
3a:1c:0a:2f:0d:ed:a1:f7:d7:c0:0c:67:e1:2f:c6:
20:c0:10:1f:5f:fb:cf:6d:aa:7e:26:5a:ca:fa:b5:
c7:b4:ad:ee:5d:8b:15:6a:44:34:8b:62:ee:a5:98:
40:0c:d8:d9:13:7d:e8:a7:99:fa:58:bd:19:12:c3:
6d:9c:79:57:a0:97:19:3f:19:8e:f4:01:29:7a:e3:
b9:01:8d:d3:f6:38:ea:2e:1c:eb:ce:90:f2:de:67:
4e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:85:3D:ED:F7:1B:6C:11:C8:32:D7:C8:0B:95:82:17:C1:9B:47:40
X509v3 Authority Key Identifier:
keyid:77:70:06:A4:1E:01:8E:33:F6:7C:29:FD:69:7E:64:48:C7:8E:5B:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d3AGpB4BjjP2fCn9aX5kSMeOWxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:a9:d3:94:82:e3:bf:d0:65:2d:bf:ba:3b:b7:a0:a1:de:c5:
f4:58:b5:c2:90:0a:78:36:a2:40:41:87:9c:f7:f3:f2:68:c1:
a6:d8:16:8f:f8:51:1a:bb:bb:e2:21:5d:18:62:0c:c8:be:c0:
f6:ca:a9:e3:e8:4c:4b:4f:e9:e0:95:d2:84:1f:c0:bc:f2:e8:
0f:e3:7f:a8:ef:c7:87:68:76:03:6d:ca:b8:24:c6:b2:15:d2:
30:7c:49:03:c0:f1:9f:98:6f:b7:08:3c:3a:e5:98:ab:85:00:
21:ca:a9:8d:0a:97:25:77:62:5f:b0:49:44:9b:2d:1d:3a:c3:
68:15:27:ee:18:3b:2c:f6:23:03:ee:82:2a:d5:57:cf:00:12:
03:ba:00:96:af:ad:0f:8b:76:b3:90:a3:68:19:59:bc:a8:63:
95:34:44:95:47:2e:d0:c4:a9:e6:ad:b9:91:17:6e:9c:9d:4c:
b4:00:5c:aa:a9:f6:73:e2:d7:68:de:6e:1f:d1:9d:8e:12:0d:
23:b2:e3:4b:54:9d:47:c4:eb:4f:3c:2e:59:ba:e0:aa:bb:27:
f2:25:df:5f:3f:e5:2b:d8:b6:79:8e:57:03:40:09:42:97:f7:
6e:40:b2:ba:86:a8:01:04:e7:63:87:92:d9:fc:ef:ae:b2:5a:
11:4e:33:65
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
OEE3RDExMC8GA1UEBRMoNzc3MDA2QTQxRTAxOEUzM0Y2N0MyOUZENjk3RTY0NDhD
NzhFNUIxQjAeFw0yNjA5MDMwODUwMjJaFw0yNjA5MTAwODUwMjJaMBgxFjAUBgNV
BAMTDTZhOTkzNGNlLTU4ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCV8NeshB/2R70b0GfDd15fBFy0mvhs8iqX5T3kbj0KgnH+HFNA9g3FjWxTyLcm
AZG88eZHSvyuV41YF0iZW4w+A7j5ZYsAtYrz2TA6wtEOA/aSdLyIe187dRNrqcHd
ceS5TRXC+i9EZKvg1y22yw+8NVNL5gKrFA1Xf7qqwzURu4XxfwAuZtvQW/S37ay+
bbfASPtyWZtOecTC1TuW/3/KQ+5aSjocCi8N7aH318AMZ+EvxiDAEB9f+89tqn4m
Wsr6tce0re5dixVqRDSLYu6lmEAM2NkTfeinmfpYvRkSw22ceVeglxk/GY70ASl6
47kBjdP2OOouHOvOkPLeZ06BAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUo4U97fcb
bBHIMtfIC5WCF8GbR0AwHwYDVR0jBBgwFoAUd3AGpB4BjjP2fCn9aX5kSMeOWxsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4QTdELzY5NjVERkNBNTU5
MzExRjE5NTI5NjhCOTkyODMzNzczL2QzQUdwQjRCampQMmZDbjlhWDVrU01lT1d4
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZDNBR3BCNEJqalAyZkNuOWFYNWtTTWVPV3hzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4
QTdELzY5NjVERkNBNTU5MzExRjE5NTI5NjhCOTkyODMzNzczL2QzQUdwQjRCampQ
MmZDbjlhWDVrU01lT1d4cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAgqdOUguO/0GUtv7o7t6Ch3sX0WLXCkAp4NqJAQYec9/PyaMGm2BaP+FEau7vi
IV0YYgzIvsD2yqnj6ExLT+ngldKEH8C88ugP43+o78eHaHYDbcq4JMayFdIwfEkD
wPGfmG+3CDw65ZirhQAhyqmNCpcld2JfsElEmy0dOsNoFSfuGDss9iMD7oIq1VfP
ABIDugCWr60Pi3azkKNoGVm8qGOVNESVRy7QxKnmrbmRF26cnUy0AFyqqfZz4tdo
3m4f0Z2OEg0jsuNLVJ1HxOtPPC5ZuuCquyfyJd9fP+Ur2LZ5jlcDQAlCl/duQLK6
hqgBBOdjh5LZ/O+usloRTjNl
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:31:13 2026 by rpki-client