
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
File: 3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft (raw, json)
Hash identifier: 02zCM+O0/ioR32AbPZHv+ijkNB0KR9GD0vWHOsv8H0s=
Subject key identifier: 9A:B3:8A:7E:C1:FB:95:E8:6E:43:79:DB:63:A3:69:A8:E6:6C:80:58
Authority key identifier: DC:99:3F:AE:88:10:E9:31:4F:5A:7D:F0:8D:6F:0C:D5:7E:A5:91:6E
Certificate issuer: /CN=A9120656/serialNumber=DC993FAE8810E9314F5A7DF08D6F0CD57EA5916E
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
Manifest number: B8
Signing time: Wed 23 Sep 2026 06:51:05 +0000
Manifest this update: Wed 23 Sep 2026 06:51:04 +0000
Manifest next update: Wed 30 Sep 2026 06:51:04 +0000
Files and hashes: 1: 3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl (hash: 88umuqoySkZuhoKbxPvVy9el9+srdPxRIrWOx58Nj2o=)
2: 9CBDB3D273C211F18F47108281A30FBC.roa (hash: QzjpXPwZ05RXkz8fbxHltT903W4r3GjO2bGz/Fnh4bQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl
rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120656, serialNumber=DC993FAE8810E9314F5A7DF08D6F0CD57EA5916E
Validity
Not Before: Sep 23 06:51:04 2026 GMT
Not After : Sep 30 06:51:04 2026 GMT
Subject: CN=6ab376d9-90d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:82:70:61:52:8e:03:77:68:2d:14:23:23:1e:
e2:81:5c:e7:50:2a:7d:dc:a6:a3:72:b3:ac:94:1f:
11:f1:79:19:3a:ee:5c:cf:fc:7e:1a:a7:96:a6:9b:
48:95:eb:ac:17:04:e2:8b:2f:8d:b3:6e:d9:d9:79:
ad:b8:44:62:73:f1:05:44:5b:39:1a:98:de:d3:48:
d6:e3:67:b8:76:83:f0:e3:ee:6a:47:d9:12:4b:9c:
5d:79:90:18:9f:85:e1:f3:50:f1:85:ac:a3:5b:f5:
c8:1c:8e:e2:25:bf:1c:51:bf:45:2d:30:17:79:b4:
48:5e:c4:2f:f7:69:76:96:ac:2f:32:b0:45:7a:bf:
46:c3:7e:8e:81:13:3f:c2:1a:e5:e9:41:4f:1f:43:
12:ea:38:ac:4e:6d:db:8e:7a:5e:43:49:77:69:56:
aa:43:b7:66:b8:b8:a7:d8:2e:08:19:90:3e:7b:b9:
13:d7:4f:b8:70:46:b0:b4:37:97:95:30:26:be:48:
e8:08:70:70:36:7d:97:30:7b:85:e5:46:62:85:15:
08:99:37:72:21:5e:31:6e:a3:e0:a2:b0:75:c6:98:
e4:9a:0c:fc:51:99:3b:37:7b:a6:35:86:38:67:b9:
4b:60:72:cb:6e:14:bd:00:2f:83:9e:15:50:ae:9b:
ae:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B3:8A:7E:C1:FB:95:E8:6E:43:79:DB:63:A3:69:A8:E6:6C:80:58
X509v3 Authority Key Identifier:
keyid:DC:99:3F:AE:88:10:E9:31:4F:5A:7D:F0:8D:6F:0C:D5:7E:A5:91:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/541CC6FAB00D11F08DE4ED7BC4F9AE02/3Jk_rogQ6TFPWn3wjW8M1X6lkW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4b:16:2b:ca:be:97:1e:02:16:f2:1d:5b:8f:d4:de:f1:cd:
3b:22:e2:e9:a3:1f:a1:d0:fd:4d:07:ff:8e:c9:fc:74:d4:e3:
f8:f7:60:64:a1:9b:82:16:42:c0:59:ac:45:80:a4:75:08:e8:
c5:e0:71:fc:d1:b2:4a:c4:01:6d:08:d3:c5:79:ba:8c:80:df:
00:fe:70:dd:a9:30:9a:c8:66:36:55:3d:6e:05:0d:a4:d9:dc:
98:45:8b:2a:f1:3d:b8:5d:8c:a0:a4:68:c0:fe:23:da:85:a7:
7d:48:6f:11:ec:c4:76:09:ff:97:d0:e3:3c:59:13:79:b6:c1:
df:2a:40:91:2d:67:68:9f:91:6b:b1:12:8b:ad:66:cd:ec:df:
77:8f:c8:e6:c2:2c:37:2f:23:55:40:6f:ba:32:c8:1a:9a:ef:
3c:57:6c:a9:3f:c1:fb:6a:a0:49:8b:ba:3a:e7:4a:45:bf:bd:
28:36:d9:6e:65:84:c4:8a:ba:c7:9e:a4:af:6e:42:0f:8f:89:
34:c4:1e:bf:e0:c5:08:91:35:37:48:c6:dc:07:c1:a1:75:6f:
1e:34:60:22:00:44:18:db:75:a3:04:41:4b:43:7d:52:f5:47:
d1:11:12:78:b8:26:a8:b7:9a:3b:5b:6f:8f:cb:77:f6:e0:98:
3f:0f:87:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:41:11 2026 by rpki-client