
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft
File: 3panNCLI2QZghYm5zxT4SUcGqMM.mft (raw, json)
Hash identifier: 6LrfSbjBDiV9nlGPQNfGFMEzTSN0fTc1z7+hGQU4EII=
Subject key identifier: 2E:39:BD:E1:62:67:14:D8:FF:C1:12:09:0A:41:21:33:30:18:C4:A6
Authority key identifier: DE:96:A7:34:22:C8:D9:06:60:85:89:B9:CF:14:F8:49:47:06:A8:C3
Certificate issuer: /CN=A91BE8A9/serialNumber=DE96A73422C8D906608589B9CF14F8494706A8C3
Certificate serial: 7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft
Manifest number: 7D
Signing time: Wed 23 Sep 2026 07:29:56 +0000
Manifest this update: Wed 23 Sep 2026 07:29:55 +0000
Manifest next update: Wed 30 Sep 2026 07:29:55 +0000
Files and hashes: 1: 3panNCLI2QZghYm5zxT4SUcGqMM.crl (hash: wiOw427vMF9704+4QT7slaMOkF78+pSwm/+89xgFKxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.crl
rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE8A9, serialNumber=DE96A73422C8D906608589B9CF14F8494706A8C3
Validity
Not Before: Sep 23 07:29:55 2026 GMT
Not After : Sep 30 07:29:55 2026 GMT
Subject: CN=6ab37ff4-9004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:06:a9:62:ed:d2:de:56:24:78:d9:75:5b:
11:da:5d:c0:cc:76:4f:24:db:99:df:43:25:1a:a2:
cd:30:5d:54:22:11:e7:fa:03:dc:e5:00:64:7b:f4:
fc:39:e9:17:03:59:eb:d7:90:20:9f:46:98:54:8d:
b9:59:fa:09:32:5f:4f:6e:61:dd:e1:13:d0:7b:f2:
44:7a:0f:a5:ce:c0:46:f1:44:20:ec:12:96:85:a1:
34:c0:da:67:b5:cd:30:96:a9:94:16:60:3b:33:d9:
aa:b3:12:4e:22:17:99:ac:01:70:88:90:0d:ad:09:
f7:60:73:ad:6a:42:67:db:39:51:92:22:a8:e0:29:
6b:70:d8:71:66:70:b2:60:50:25:e6:6b:22:6b:a1:
1f:c7:06:09:9f:a3:cd:e5:c6:79:63:9b:46:8d:f7:
c6:b7:f7:cb:59:d9:c4:43:87:58:14:e2:39:f1:9e:
4c:83:5d:09:d3:81:f4:76:6e:b1:b2:79:f2:e6:91:
47:b8:9c:cd:d1:33:ca:6d:69:af:31:28:38:78:07:
19:07:02:aa:aa:29:00:03:36:2c:b3:b2:43:82:9d:
66:9d:4c:37:89:9c:bb:8f:b1:f4:7f:84:57:56:72:
60:79:f4:25:88:7f:b1:f2:ad:f6:c5:59:36:81:12:
89:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:39:BD:E1:62:67:14:D8:FF:C1:12:09:0A:41:21:33:30:18:C4:A6
X509v3 Authority Key Identifier:
keyid:DE:96:A7:34:22:C8:D9:06:60:85:89:B9:CF:14:F8:49:47:06:A8:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:b7:a2:40:8b:1b:c4:9a:45:9d:69:5c:da:ef:c2:80:e4:bb:
aa:8f:b6:26:67:a8:01:4c:bf:09:5c:33:59:44:b3:f3:27:29:
97:d5:c2:82:36:72:4e:c7:ac:d9:c2:17:db:f9:4a:47:8e:75:
16:d1:57:6b:24:84:35:c9:48:a8:c7:0e:d4:1d:d0:d5:e3:fd:
c7:d5:5e:23:d2:33:9c:3a:83:8b:d8:f7:55:63:93:47:2b:ea:
16:1e:2a:5e:1a:87:b2:87:07:2c:65:68:79:a8:e1:04:4e:8a:
a7:7a:a5:af:f1:f9:f6:1e:c3:45:e0:48:88:e6:15:1a:49:8a:
f3:13:d6:23:30:dc:30:32:db:70:83:a4:22:28:b3:b0:e2:65:
f3:1d:3c:b6:b1:88:60:67:56:2b:3f:1e:c8:c7:9a:f4:bb:9e:
c8:2f:77:12:6d:af:f4:3f:e6:b1:cd:8f:77:a4:94:e0:ac:06:
04:d8:ef:35:f3:e6:51:09:b7:77:1d:1f:78:aa:d6:76:97:33:
45:83:a8:e3:0b:0f:e4:1c:7a:8b:a8:13:e1:10:4b:31:8f:10:
1f:16:68:87:14:47:e6:fb:74:17:2c:e0:8b:10:91:7d:47:e0:
04:a9:e2:71:e0:a0:17:df:13:69:4c:57:3f:d1:19:97:84:12:
6b:b6:f3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:11:42 2026 by rpki-client