
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
File: pi3nVqmxabvP97VW1DMAlV1A4yA.mft (raw, json)
Hash identifier: cjDR/5a+PtcqCRgryk7Iqtg1BGQIZUEVuP3V+r5Eel0=
Subject key identifier: 83:85:0B:6A:18:E1:8E:3F:69:89:C8:F2:4D:70:AC:B5:33:5D:BC:06
Authority key identifier: A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20
Certificate issuer: /CN=A91104BD/serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320
Certificate serial: 0C45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
Manifest number: 0C3B
Signing time: Sun 04 Oct 2026 18:48:46 +0000
Manifest this update: Sun 04 Oct 2026 18:48:45 +0000
Manifest next update: Sun 11 Oct 2026 18:48:45 +0000
Files and hashes: 1: pi3nVqmxabvP97VW1DMAlV1A4yA.crl (hash: mqi88md960XDqXI9jjvQlSMnyl+m8BxCRqsRUKgxPIU=)
2: D326CC30384411EA9D540B58C4F9AE02.roa (hash: SUySTCjdxnI+cxS2bLgTY8Om9FwHon+t3aXtW/eo6yU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl
rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 18:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3141 (0xc45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91104BD, serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320
Validity
Not Before: Oct 4 18:48:45 2026 GMT
Not After : Oct 11 18:48:45 2026 GMT
Subject: CN=6ac29f8e-c604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ae:6c:21:21:3f:19:f6:70:7a:7b:15:e4:67:
86:73:26:c1:d8:71:0a:da:bd:db:73:20:da:cc:d7:
19:20:fd:1a:25:6e:5e:05:8f:54:b3:56:db:db:72:
3e:30:69:44:66:32:0b:70:59:e4:5a:94:ce:f5:c0:
0f:5e:d3:12:d7:bf:62:37:e6:db:03:9c:7f:97:e4:
3b:a8:41:b5:a7:a7:ea:c0:a3:c2:c3:76:20:d2:03:
0f:c3:44:c8:45:42:33:e6:86:36:4f:d9:be:e0:65:
57:b4:2d:a5:b4:ce:02:46:81:f1:0b:ee:e2:e9:1c:
00:09:e2:74:fc:4f:cc:d6:c4:93:6c:ef:31:14:7e:
29:32:fc:b6:5f:c2:16:fa:a4:4e:b7:d0:d6:b9:17:
67:c4:bc:ec:d9:d2:84:30:5c:a3:b0:f6:cc:0c:a3:
ea:86:dc:29:1f:d1:cf:bf:f7:ec:00:31:97:26:fd:
78:0e:7e:88:e9:28:ca:00:dd:89:42:19:94:88:6e:
f7:dd:21:43:10:04:3c:83:a9:b2:cc:16:59:c1:93:
17:0b:7b:42:37:0a:83:11:86:c8:1a:23:d9:50:6e:
b6:c8:35:d2:a1:65:a4:1c:44:58:8f:3b:36:22:45:
5c:bd:1f:e9:0b:da:72:50:0a:b6:46:78:97:c8:e5:
d7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:85:0B:6A:18:E1:8E:3F:69:89:C8:F2:4D:70:AC:B5:33:5D:BC:06
X509v3 Authority Key Identifier:
keyid:A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c4:47:78:5f:49:22:3e:0b:72:ea:21:43:61:54:92:a8:e2:
67:e7:8f:ee:b1:12:9f:2b:d8:cb:38:90:e2:83:46:54:83:63:
8f:c4:df:38:ec:2f:6a:cf:5b:21:b6:89:42:e0:91:af:9c:8a:
e6:55:7e:49:eb:0f:87:80:be:7d:38:f0:d3:d2:72:27:1f:cb:
4c:81:40:31:76:f1:3b:d9:5b:44:27:9e:73:eb:64:f1:78:10:
44:51:35:45:04:6c:af:5f:46:83:e2:f9:2c:f6:ef:83:c6:4a:
4e:45:52:56:4b:cf:7f:84:7b:40:bf:f2:6d:cd:81:46:26:c0:
e6:4f:3e:83:33:66:f2:19:b6:e8:a4:39:a7:98:39:2f:31:9c:
ad:7f:e1:c8:73:f0:20:2c:35:0f:7b:01:91:f4:7a:d0:e1:ed:
89:1e:30:b6:1b:ef:b9:02:23:27:14:7d:f8:40:81:1e:7f:b5:
75:3b:79:f7:d8:d3:96:e1:09:ee:b1:3f:f2:2b:5d:45:81:ef:
97:99:86:95:d0:c3:85:72:bc:88:c5:01:31:81:ec:ca:a5:a2:
bd:5d:cd:5c:2c:22:8c:f2:9b:3c:0d:c1:ed:1c:ed:84:78:94:
e5:59:7e:02:3e:5f:0f:80:36:97:8b:82:d2:80:58:35:8b:d4:
be:ed:17:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:49:28 2026 by rpki-client