
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft
File: 3DHPX8nyg0g327s2g8uK9kKrSnw.mft (raw, json)
Hash identifier: gXpyqqgWOAWQWXqwNYMScadwk1jGRrJEWNQfk8IRkSc=
Subject key identifier: 8C:00:A0:00:FD:C3:CB:06:D6:CE:A3:DD:0D:03:7D:67:15:BE:AB:80
Authority key identifier: DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C
Certificate issuer: /CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C
Certificate serial: 0235
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft
Manifest number: 022F
Signing time: Wed 23 Sep 2026 02:31:50 +0000
Manifest this update: Wed 23 Sep 2026 02:31:50 +0000
Manifest next update: Wed 30 Sep 2026 02:31:50 +0000
Files and hashes: 1: 3DHPX8nyg0g327s2g8uK9kKrSnw.crl (hash: ePF3xxqLh2EpmLmFNyakjeI8f9KQHhK3S5efFDpE3fo=)
2: EE28B64661D611EE9C66300EC4F9AE02.roa (hash: S+Y8oP//RYaIR2kO19UxtIdNUz76sF0XE/tof0f/xOE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl
rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF85B, serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C
Validity
Not Before: Sep 23 02:31:50 2026 GMT
Not After : Sep 30 02:31:50 2026 GMT
Subject: CN=6ab33a16-623d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:61:34:b1:24:0c:e9:3d:9f:44:ce:5f:d2:
10:f5:d6:89:e7:dd:5c:72:68:88:dd:3d:f7:61:ed:
b1:e4:6f:15:51:d4:f9:57:93:79:39:7a:0d:63:52:
6d:a0:e2:28:16:49:aa:86:c9:97:c0:c8:b2:99:c3:
d1:26:b9:d0:88:21:67:f3:5f:79:93:ec:91:a9:6f:
b6:b8:72:31:d6:40:d1:1f:2e:88:52:3f:05:d5:f4:
20:0e:01:c3:e6:89:f3:97:9d:6c:08:46:26:18:37:
4a:2e:f1:f7:fe:bb:f3:48:d5:12:95:63:ba:a3:b1:
02:05:37:3c:b9:63:b8:df:28:13:48:95:31:91:eb:
3d:d2:45:bf:90:9c:93:d4:f4:15:0a:21:84:26:ab:
28:96:a3:34:2a:1f:c4:8f:ff:22:fa:bd:60:30:d1:
7b:18:4c:1f:1d:d7:a8:40:11:24:8a:ff:23:a8:4c:
df:78:08:d0:9e:3b:a9:f9:98:c4:43:df:19:42:03:
fe:b9:e4:4c:08:20:08:4b:8c:9d:b0:af:7a:af:2e:
94:99:da:b9:ed:95:1c:00:95:c8:13:8d:c2:d5:8d:
0f:ff:ed:39:4e:aa:f6:78:b9:81:52:51:33:bf:fd:
0e:0a:45:5f:33:c2:2a:33:64:e9:68:f5:7c:d0:f4:
b5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:00:A0:00:FD:C3:CB:06:D6:CE:A3:DD:0D:03:7D:67:15:BE:AB:80
X509v3 Authority Key Identifier:
keyid:DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:35:eb:22:ee:94:ff:92:24:ea:f7:ed:df:b4:c4:43:c3:6b:
80:44:bd:47:1f:0f:1a:a2:04:92:b7:72:55:c5:e4:fc:98:8f:
af:2d:18:9c:5e:59:9f:9c:60:ed:51:a2:f1:80:f1:3f:59:02:
d9:c5:ae:1f:56:37:67:5f:17:de:9c:9d:49:be:e5:0e:4f:e0:
09:e6:b6:be:6d:34:6e:21:1d:51:7f:38:4e:95:8a:6c:e1:96:
d8:9c:aa:99:4b:6e:85:00:17:45:db:89:89:a9:7e:f6:c1:d7:
f6:a8:55:72:ac:8c:70:84:3b:61:a4:6a:75:05:ca:dd:66:cc:
07:b3:41:88:e4:4a:6c:e6:91:aa:ef:4d:6b:0a:7b:89:50:50:
5b:fb:9d:f0:f4:f1:59:d2:4d:80:da:1a:3b:4a:40:ec:99:ca:
8c:bd:7f:1d:d1:b7:77:cb:9b:45:12:06:2a:6b:a4:80:07:97:
b5:fd:2d:a8:d3:3f:b0:38:1d:34:e6:62:f2:aa:ad:5c:35:87:
14:6c:da:e2:83:0d:78:66:0e:19:39:35:ea:98:ea:f9:f6:a7:
91:ef:69:fa:1d:13:2c:ad:5c:a1:10:28:11:e5:4b:fa:c6:c2:
7b:b8:be:d0:0c:f9:55:b6:9f:5d:ca:7c:c6:ef:84:a3:89:30:
5e:fa:74:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:55:28 2026 by rpki-client