
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft
File: 3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft (raw, json)
Hash identifier: JpplEydnpizIpoTG83/rjdmEOyhny9tPY1larYfaeJM=
Subject key identifier: 3E:B7:AB:AB:76:A0:6E:48:84:0D:1E:76:EB:9E:AE:90:C5:46:4D:D2
Authority key identifier: DD:AE:AA:53:40:2B:70:A9:4F:73:7C:1B:0D:5D:95:01:F8:29:F0:39
Certificate issuer: /CN=A91D2A10/serialNumber=DDAEAA53402B70A94F737C1B0D5D9501F829F039
Certificate serial: 61
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft
Manifest number: 61
Signing time: Wed 23 Sep 2026 07:49:42 +0000
Manifest this update: Wed 23 Sep 2026 07:49:42 +0000
Manifest next update: Wed 30 Sep 2026 07:49:42 +0000
Files and hashes: 1: 3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl (hash: ccLvJgWzOYkLXYp+kVPOVCpU0ZDPxVfaGOEnP61Be2Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl
rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2A10, serialNumber=DDAEAA53402B70A94F737C1B0D5D9501F829F039
Validity
Not Before: Sep 23 07:49:42 2026 GMT
Not After : Sep 30 07:49:42 2026 GMT
Subject: CN=6ab38496-e1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:43:14:b7:7f:f6:e2:33:17:11:61:e1:40:90:
5a:5a:80:96:7a:74:b1:1e:8d:2a:b0:08:ee:d9:e4:
21:e7:09:af:92:61:03:19:81:1d:ed:84:9d:97:3c:
36:06:b4:cd:58:03:77:60:6a:00:39:2e:f0:c8:47:
bf:21:45:ca:fd:d3:76:15:2e:d2:37:bb:7d:d5:a7:
cf:2b:e9:99:a1:28:0d:90:96:76:1e:7a:f5:1b:1c:
29:a0:02:5c:33:68:e8:4f:0e:66:40:1f:d3:bb:2d:
ef:95:1f:2f:a0:8a:cd:4e:3d:06:37:c5:b8:3c:94:
28:e5:b8:07:d1:28:88:75:f6:be:59:15:7a:06:be:
b3:7a:1c:d2:56:9d:b5:ff:10:ab:36:38:55:26:37:
cb:93:ae:68:ee:68:51:0e:f1:f3:83:ad:f3:13:4b:
38:46:09:80:e1:b7:81:1a:5a:9f:2b:6c:e5:ed:03:
94:3a:cd:d5:ad:7b:55:5f:13:7f:09:72:65:db:5b:
72:52:40:a7:12:2e:a5:e8:f3:50:27:19:15:61:38:
24:5c:a4:a9:d4:70:ae:d8:ec:1f:60:c7:e2:9f:10:
d7:1e:f5:c1:4f:88:6c:a3:5e:a8:42:81:b3:e4:9a:
24:14:33:36:c7:37:86:b0:50:cd:e1:5b:b6:98:95:
53:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B7:AB:AB:76:A0:6E:48:84:0D:1E:76:EB:9E:AE:90:C5:46:4D:D2
X509v3 Authority Key Identifier:
keyid:DD:AE:AA:53:40:2B:70:A9:4F:73:7C:1B:0D:5D:95:01:F8:29:F0:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bb:10:c9:bf:29:f4:db:ff:48:95:de:1f:94:2e:9e:f8:ea:
f0:2d:23:0b:f9:8a:1b:0f:85:8f:fc:4f:c5:cb:3c:8f:28:97:
18:a5:6f:13:9f:50:80:1d:09:48:4a:69:c1:c6:b0:dd:93:1e:
4d:25:63:b0:ee:5a:f8:6a:0f:d9:07:d0:03:75:7b:76:41:94:
fe:e1:17:f2:4b:cf:80:9d:44:6b:43:32:76:29:14:f0:be:30:
49:e0:07:8b:fb:97:97:69:5f:62:b3:42:8d:12:77:c4:cb:df:
6e:5d:00:e2:19:36:56:04:22:a8:6c:e9:40:88:08:a1:45:a5:
e2:00:5d:4b:60:f8:3c:8c:97:ec:7b:b9:ea:b9:c6:e0:dd:a3:
e5:57:96:d1:3f:d6:df:5f:b2:e1:75:6f:01:e7:81:83:30:7f:
33:49:b9:52:5f:1a:a8:cb:6a:07:e4:21:93:ba:4a:a1:db:e8:
7d:aa:01:8c:ea:d0:f1:3c:ca:85:16:53:f6:eb:a0:49:fe:b7:
6d:54:e6:39:59:09:15:06:22:69:e9:9b:35:0c:af:9b:0b:be:
28:17:13:8c:60:7b:fe:94:82:1b:15:3b:2a:0e:71:88:64:03:
bc:bc:85:03:c1:06:2c:05:d9:76:45:f1:30:8c:ee:62:c6:2b:
c8:ed:5a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:25:02 2026 by rpki-client