
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft
File: 3IDIXlEBCJqyQl0_yRd5haASXG4.mft (raw, json)
Hash identifier: c0wIEh/+6DEvhRUWgeaFsVl8a9RyANM6Euak0e9Ltzk=
Subject key identifier: A7:F7:76:E5:06:82:1B:CD:73:C0:22:3A:F6:2F:C7:03:97:EB:90:87
Authority key identifier: DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E
Certificate issuer: /CN=A91D74A6/serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft
Manifest number: 0166
Signing time: Fri 13 Nov 2026 05:19:30 +0000
Manifest this update: Fri 13 Nov 2026 05:19:30 +0000
Manifest next update: Fri 20 Nov 2026 05:19:30 +0000
Files and hashes: 1: 3IDIXlEBCJqyQl0_yRd5haASXG4.crl (hash: f8Gi6klut0/SJREFzYjxHlvOML9lpK3DgWvLZ9DGVtk=)
2: 727850D8D3EF11EFB596E00CC4F9AE02.roa (hash: q0DHa5Wl8wyW8RcDFN0Qyu7ppbrZZWsxIyNW/w1xs0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl
rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 05:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D74A6, serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E
Validity
Not Before: Nov 13 05:19:30 2026 GMT
Not After : Nov 20 05:19:30 2026 GMT
Subject: CN=6af69de2-768e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6b:87:e4:7c:f6:26:45:08:d9:52:26:37:cc:
e5:ca:72:f8:84:08:d6:68:e4:93:8b:3c:b2:3a:9c:
fc:84:58:6f:90:4d:ff:2e:99:61:5c:3e:7f:99:cb:
6c:8e:6c:ca:7f:69:19:fe:f0:64:53:c4:3c:01:99:
c1:e9:7a:ae:0e:6e:ce:58:75:97:10:ee:64:a3:d9:
c8:1b:86:60:13:2e:10:df:f2:27:e6:49:d3:ec:42:
b6:34:ad:65:c7:cb:fb:eb:a8:15:83:b8:82:f8:c2:
ce:da:62:ce:f0:0a:bf:47:53:9f:9c:3e:c4:bd:18:
37:63:f1:8c:cb:4b:78:6d:75:77:28:a8:b1:8d:77:
ac:b4:05:ce:d9:e5:d0:c7:72:cf:1f:93:e9:79:a0:
ff:65:62:e9:17:2f:b9:84:a9:24:5b:09:f6:6c:36:
d0:a3:c5:40:a8:6e:f2:90:4e:7a:1e:42:32:12:4b:
51:dd:73:6e:df:16:4f:08:e7:74:12:fe:fa:0f:2f:
8c:ed:be:0c:25:9d:6f:0e:63:6a:00:17:84:24:21:
a8:e6:1a:ea:0f:88:6e:66:6d:db:af:70:01:b3:3b:
e2:d3:04:43:59:cc:99:2a:14:31:2a:b9:32:3e:26:
27:6d:a4:5b:0a:5d:af:a4:5e:8c:4a:97:08:ec:4e:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F7:76:E5:06:82:1B:CD:73:C0:22:3A:F6:2F:C7:03:97:EB:90:87
X509v3 Authority Key Identifier:
keyid:DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:e3:34:fd:d2:4c:56:1d:44:ea:76:fb:cc:b8:72:13:d2:83:
47:44:f4:cf:92:21:fa:12:97:3d:39:ae:02:31:9e:be:6b:20:
9d:08:78:fc:87:88:ad:d7:fe:99:8f:bf:af:59:8e:40:12:79:
10:24:42:07:6b:e6:9b:b5:77:79:29:9f:a8:8c:54:85:36:fd:
d5:79:ab:07:19:28:0b:d7:52:e7:2a:2c:8d:fc:ad:8a:e6:70:
bf:62:1d:f4:cc:b8:b0:62:0d:92:1a:64:be:38:fb:e0:4e:01:
13:ac:02:d6:64:ed:78:45:cb:bb:45:67:e6:6c:de:c3:01:0b:
73:8a:55:c0:93:6c:90:64:fc:a2:ed:ef:fc:42:8d:47:22:cf:
1e:0f:4e:fe:af:cb:b7:43:d8:07:62:a9:ac:20:62:1f:69:79:
5a:e4:c3:fa:f2:6b:14:22:40:4d:1c:6e:54:c3:87:a6:fa:08:
d8:94:65:35:1e:2c:4e:47:57:dd:76:d3:0c:33:f1:3a:5a:22:
ab:32:87:41:8b:41:6e:8b:b8:30:86:97:56:df:07:1c:01:94:
fa:85:6e:31:11:da:e5:69:48:cc:14:7c:45:0a:57:09:eb:f3:
6d:24:8c:f8:c9:f7:c8:ff:bf:98:4a:a8:07:66:2f:2b:86:64:
b6:7a:5a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:54:13 2026 by rpki-client