
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
File: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft (raw, json)
Hash identifier: hTLB099tLVXUhRctdg0WYV0y6OEaVTD6YwG+w/NGgEE=
Subject key identifier: 82:0C:BB:92:31:D9:A7:E0:65:17:76:DB:55:3C:25:A7:FD:47:20:D7
Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
Certificate issuer: /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Certificate serial: 0CD8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
Manifest number: 0CCE
Signing time: Wed 30 Sep 2026 18:41:46 +0000
Manifest this update: Wed 30 Sep 2026 18:41:45 +0000
Manifest next update: Wed 07 Oct 2026 18:41:45 +0000
Files and hashes: 1: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl (hash: CfdBEHU1NwsueCY4R0/8T/7mDpiTgPF3cPMeNC8h/ZU=)
2: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (hash: veYCT0YVn2lsSh/a1SemHmCMUXzXqFx3N+q0M958UTg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 18:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3288 (0xcd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91822BF, serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Validity
Not Before: Sep 30 18:41:45 2026 GMT
Not After : Oct 7 18:41:45 2026 GMT
Subject: CN=6abd57ea-219e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:d6:fe:1e:34:cf:4f:68:ec:b7:c2:86:ef:
8d:cb:9b:98:2b:23:da:44:b9:69:db:8e:96:18:0d:
31:c8:78:a5:44:d4:89:88:66:6f:05:5c:ee:22:82:
db:3a:d0:68:ae:9f:93:dc:e0:78:e9:34:14:86:43:
9d:89:bb:bf:a3:64:1e:92:7b:c5:89:5c:2d:3a:6a:
bc:95:24:4d:3d:b4:42:bf:17:db:46:88:7d:29:bd:
4a:34:a8:96:1d:90:15:8c:1c:b1:e1:44:a8:f2:69:
26:e0:66:78:01:ef:92:ab:a0:ca:d7:04:dd:ef:76:
13:e5:ab:4b:a5:30:f7:04:5e:a0:94:cb:e9:46:d4:
53:c8:ff:76:f1:de:fb:db:c2:ba:52:b4:07:8d:86:
cd:78:45:4e:be:e8:68:03:10:7c:08:79:bb:9d:55:
81:4c:42:5b:ce:dc:2e:88:3e:b0:a9:fa:e4:8d:b5:
dc:9b:87:77:5f:a5:0d:a8:c1:12:c3:75:22:72:60:
24:23:c1:bd:84:fe:d2:55:ef:b8:ef:16:bc:28:da:
2b:c4:33:a4:00:85:7f:a8:d3:60:c0:b2:6b:bb:b4:
bd:62:30:36:54:b4:12:ff:13:e0:e6:7a:8e:a6:43:
67:2e:cd:ce:67:20:c9:65:16:ea:d5:98:1a:5a:bb:
62:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0C:BB:92:31:D9:A7:E0:65:17:76:DB:55:3C:25:A7:FD:47:20:D7
X509v3 Authority Key Identifier:
keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:b7:3c:db:aa:89:08:2e:86:ec:29:83:f7:05:ce:b0:74:c4:
c1:12:02:61:41:8b:97:86:29:96:ed:57:d8:b8:e8:80:5c:f0:
63:27:14:44:c3:86:a7:4f:c7:8a:55:84:f5:dd:57:8e:d5:77:
2a:5e:ba:42:ca:8a:2b:69:54:cd:5d:08:a3:45:ba:c3:ea:b3:
b1:59:8e:e2:07:7b:c4:f1:e4:00:7f:67:95:20:f6:16:2a:43:
80:11:a7:8c:d5:8a:37:b1:6b:f2:3f:dd:04:b5:4a:25:7e:40:
d6:05:13:4d:68:86:16:b5:de:29:18:ce:5e:3d:22:a2:36:0e:
dc:67:41:7e:64:ef:85:9e:bc:1d:6d:95:ea:0a:55:17:cf:d7:
0d:f6:6c:06:49:fb:4a:13:fe:7f:1c:77:49:bb:e8:17:13:f0:
fe:86:c6:67:7b:64:fb:4b:00:15:ef:0b:c8:0b:fe:ab:0b:7a:
5b:5b:fb:12:fb:20:3d:87:e5:73:d3:78:5b:1c:89:be:41:a1:
89:3a:93:60:a7:2b:42:02:c1:e5:90:7b:1d:26:16:8f:e1:94:
41:24:4a:3e:51:1b:0c:31:32:00:66:2f:35:4b:ea:91:18:66:
46:2e:83:a3:cf:bd:ee:71:c5:80:88:d7:d9:2b:fc:56:1f:a8:
e7:db:73:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 17:43:30 2026 by rpki-client