
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
File: 3dU_UiXtL42o0J56rZgsgLbOrag.mft (raw, json)
Hash identifier: RNEQakQYtqcpUT/2RpEQpFMiLIca2zROrvuhk9/qWaI=
Subject key identifier: D6:61:68:AA:CD:16:90:E3:00:A9:8D:64:81:94:F3:02:0D:01:1E:F7
Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
Certificate issuer: /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
Certificate serial: 08A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
Manifest number: 2E90
Signing time: Fri 02 Oct 2026 16:51:19 +0000
Manifest this update: Fri 02 Oct 2026 16:51:19 +0000
Manifest next update: Fri 09 Oct 2026 16:51:19 +0000
Files and hashes: 1: 3dU_UiXtL42o0J56rZgsgLbOrag.crl (hash: QchGFX+SB7rl2pEHJQZ5GakK3R3hx83iY6vpKBzkwVE=)
2: CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa (hash: yofMdWFa6G+5IWdYK6Mk2y69/fwGAZwVAxMNAxb1xeg=)
3: 10C418C4D40011F083CDC127C4F9AE02.roa (hash: trEW3l3BfddlaJ5NOXeTcUWfTHS4ZdqJFRp+g2C/O5Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl
rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 16:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2214 (0x8a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
Validity
Not Before: Oct 2 16:51:19 2026 GMT
Not After : Oct 9 16:51:19 2026 GMT
Subject: CN=6abfe107-5a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:c9:db:1a:d0:5e:d0:16:71:3c:7e:f5:3c:
2a:fe:1d:ee:79:4e:c9:09:92:44:c9:ba:49:ea:22:
7d:4e:78:fe:a6:8e:c6:4e:67:d4:be:26:78:74:cf:
cb:7e:8d:3d:24:ad:8c:fc:a5:61:92:3a:e7:8e:0f:
9a:89:8d:05:50:83:a4:be:09:a3:3e:17:94:51:e5:
73:b3:37:ce:75:7f:6a:47:c2:31:23:be:a4:fd:fa:
f5:9a:31:c4:84:86:aa:05:02:31:46:42:52:16:51:
cb:6f:da:81:d2:87:08:ea:73:4a:e6:b1:cb:be:7b:
15:42:8e:73:45:ce:e6:00:c9:4d:9d:f5:84:7a:fe:
3b:6b:a0:95:2e:9d:84:ad:b0:59:92:8b:14:5a:a7:
d0:ec:30:4e:5b:a0:b1:24:43:93:6c:d0:e1:f1:24:
e1:20:13:9f:3f:29:b0:14:d5:6f:a2:e8:d2:f1:c0:
8f:b2:3a:b7:96:6f:c3:b0:58:bc:fb:97:dd:e7:01:
a9:63:52:b5:61:f9:61:a5:35:93:7a:1d:84:3a:a7:
75:59:d7:86:d3:dd:dd:b0:76:c2:40:10:c9:36:82:
01:88:dc:3f:1b:fb:6a:5d:18:31:1e:20:e4:ef:30:
de:d6:17:f4:11:36:fe:cd:88:02:5f:8e:82:4c:e9:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:61:68:AA:CD:16:90:E3:00:A9:8D:64:81:94:F3:02:0D:01:1E:F7
X509v3 Authority Key Identifier:
keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9d:35:81:e7:ce:94:d4:04:e5:c3:6f:0e:9c:e1:52:12:fc:
8a:67:5b:55:27:ab:b7:c1:1f:0f:d2:04:93:33:c0:a7:2b:c3:
7f:0c:24:03:03:cd:a6:19:7b:c3:1e:ae:89:77:bf:d7:08:bf:
45:59:71:0c:79:eb:51:5a:bc:e5:05:34:52:de:40:f2:02:3f:
94:2b:52:55:24:18:fd:f1:88:f7:36:07:e1:11:14:3a:07:37:
ae:c5:2e:7e:09:c6:4d:03:69:2f:27:e8:2e:41:02:3a:2d:d0:
01:42:59:97:66:23:96:24:59:82:f2:a1:27:7b:5b:9b:92:be:
8a:29:9f:3d:e9:85:cd:3e:f2:f3:da:37:3b:39:e5:db:fa:53:
b1:f3:c7:27:28:16:2b:8e:55:17:9e:8b:33:72:b2:11:70:bb:
ab:78:1f:38:36:34:95:72:10:bf:7b:89:6c:70:5e:02:1b:5e:
38:b0:e4:9a:62:e0:48:e2:5c:ec:88:62:b2:f4:08:3d:f2:dc:
04:2b:94:b3:6d:d9:36:e1:e3:fa:68:52:0e:32:5f:35:a3:4f:
b6:8e:7c:15:be:5c:23:cc:2a:63:3a:96:35:eb:27:db:22:eb:
81:51:48:b4:27:46:cb:b1:3d:64:10:3d:35:6b:a0:a6:80:4b:
ff:e9:9f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:14:30 2026 by rpki-client