
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
File: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft (raw, json)
Hash identifier: awjjXi9eXmpdqy8hashcul5l17l5WVsT79T20Q8jBIU=
Subject key identifier: E3:DA:3B:67:B6:85:82:B8:BD:64:00:A9:B4:21:7B:6E:9B:5A:B7:AA
Authority key identifier: DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6
Certificate issuer: /CN=A91CDFFB/serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
Certificate serial: 0931
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
Manifest number: 0923
Signing time: Sun 04 Oct 2026 20:16:23 +0000
Manifest this update: Sun 04 Oct 2026 20:16:22 +0000
Manifest next update: Sun 11 Oct 2026 20:16:22 +0000
Files and hashes: 1: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl (hash: sfpKGcZsjQGn+/xf6lK89osd0tATksXhGLKAv8eMbs4=)
2: CA42E5689FA411EBBC1FFB40C4F9AE02.roa (hash: 4udzqiQRKh+z3+sZYM7W4JxOQlCcj9u8JQ3LT8BeXiE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl
rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 20:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2353 (0x931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDFFB, serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
Validity
Not Before: Oct 4 20:16:22 2026 GMT
Not After : Oct 11 20:16:22 2026 GMT
Subject: CN=6ac2b416-fa23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:8a:fd:2e:b7:f3:62:d4:70:ee:9c:d8:75:
aa:e3:37:c3:c3:39:29:8f:ec:3f:4d:b8:c4:05:8f:
5b:9a:c0:57:8a:33:0e:4a:ef:81:77:a0:48:66:92:
70:1f:76:a4:de:71:e5:d5:18:10:67:06:85:9e:f8:
cb:e2:ff:7e:90:7a:99:d2:8b:cd:35:ca:1b:63:8e:
33:a7:d9:43:4c:44:20:99:1d:ff:81:c8:b4:a0:d7:
f6:44:a7:bc:58:1b:52:5a:23:15:e1:7c:27:ab:8c:
b7:90:ab:50:4f:46:2f:1b:45:35:9f:d2:d7:a5:d6:
6d:8b:af:95:84:07:ca:f8:a9:2a:0a:7f:9c:b0:3f:
74:b2:80:56:68:03:40:d8:d3:60:99:2d:64:55:fe:
95:19:e2:19:a1:cb:e2:0d:0a:bc:07:2f:4e:c7:5e:
bf:9f:ca:32:79:1c:18:cd:c9:d8:c2:b2:d2:6e:c1:
0b:4a:b4:29:60:2f:b2:f1:06:f2:cf:57:4a:42:68:
be:82:cc:58:fb:df:98:2c:b0:62:58:c2:a0:6d:a3:
96:88:b5:07:d1:23:5d:7f:47:9d:bd:45:75:5b:05:
da:6e:8d:82:e1:4b:df:02:d9:da:9b:fe:80:7b:b4:
92:6b:07:cc:7b:7e:b6:dd:78:cb:4b:4f:01:95:91:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DA:3B:67:B6:85:82:B8:BD:64:00:A9:B4:21:7B:6E:9B:5A:B7:AA
X509v3 Authority Key Identifier:
keyid:DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:49:2a:52:64:e7:66:fa:68:79:65:3a:1e:53:bb:71:09:0c:
9b:d7:d1:d7:12:bf:78:2d:f6:85:43:9c:98:e3:28:42:8b:61:
75:a8:ae:4a:05:da:e0:73:48:76:85:8e:41:80:6f:36:ab:2c:
b9:13:40:e7:7f:b5:e2:87:04:35:ca:cd:4a:1b:ba:29:f3:4b:
55:75:90:e1:11:98:0c:e2:34:6b:36:eb:2a:bf:98:46:30:e9:
36:9f:8b:3d:a0:19:78:ba:a4:ef:43:97:e9:08:5d:bb:27:b3:
fe:41:7e:91:94:77:2d:40:a5:44:ee:a9:1c:5e:33:cd:10:fa:
32:07:b2:c3:7c:95:4d:47:5c:4b:3b:a3:14:2f:06:88:63:3f:
97:9d:ab:bb:b6:df:91:f4:12:7b:98:77:eb:a4:2d:13:e7:c0:
ce:e6:48:7a:7a:2f:72:5d:31:ec:15:b3:ed:5e:25:b3:fe:a4:
6c:69:47:c3:cf:1e:2f:14:cb:f5:26:b4:64:ac:5f:24:81:30:
29:0b:76:5b:d8:c7:c5:8e:ef:78:45:11:1e:cf:67:83:2e:c1:
b2:79:38:c0:86:18:62:b3:52:43:85:79:eb:c4:99:50:2e:76:
9b:9d:ee:e8:a1:42:2f:fb:da:44:1e:10:f0:b1:04:f5:6f:72:
48:5f:b1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 18:01:11 2026 by rpki-client