
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
File: 3nORs21uduLMQKkEd3LACw93Umw.mft (raw, json)
Hash identifier: +cCBTkkxP22V24XXVoKDvLqZ/pLcYfSVM2hFLX31hCc=
Subject key identifier: B9:2C:86:19:5E:D1:49:F8:94:4F:CB:D5:B2:A0:62:7D:E7:A3:3C:7A
Authority key identifier: DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C
Certificate issuer: /CN=A91E4696/serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C
Certificate serial: 026D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
Manifest number: 026D
Signing time: Fri 25 Sep 2026 01:27:53 +0000
Manifest this update: Fri 25 Sep 2026 01:27:52 +0000
Manifest next update: Fri 02 Oct 2026 01:27:52 +0000
Files and hashes: 1: 3nORs21uduLMQKkEd3LACw93Umw.crl (hash: eMhvg4BP749Pnba0Bsmt31gerDrp+/XVXWbjbGuotZs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl
rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:27:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 621 (0x26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4696, serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C
Validity
Not Before: Sep 25 01:27:52 2026 GMT
Not After : Oct 2 01:27:52 2026 GMT
Subject: CN=6ab5ce18-57e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:76:11:b9:28:80:59:d6:b3:33:e5:54:58:20:
d6:1f:69:09:4b:df:03:19:03:a6:d5:8c:47:dd:58:
13:bf:eb:28:4b:08:5f:f0:98:46:08:83:8b:0f:86:
22:b3:f6:f5:ad:23:5e:c0:e8:a0:56:1e:ce:af:e0:
00:86:aa:9c:84:9c:e3:b6:bb:14:2f:31:a2:98:e0:
27:2f:72:f7:0c:4b:3c:70:4e:14:e2:44:51:66:35:
5f:20:45:25:40:d0:28:dc:ae:63:97:1e:08:96:f7:
77:1e:5a:3e:d3:94:be:7b:47:00:79:ca:15:ef:34:
2b:2b:fd:0c:7b:46:ca:46:fb:de:c9:96:fa:15:5c:
2b:76:19:aa:d8:d9:22:04:ea:d0:83:70:5f:df:09:
bf:e6:fb:77:d1:a7:b6:30:dc:05:c7:53:39:4c:d6:
a7:13:56:0d:5f:0d:60:51:09:0e:c7:e8:6d:a4:6d:
84:db:7d:75:bf:ed:95:05:c9:89:57:87:89:1a:85:
25:a3:13:19:46:d6:75:16:5c:05:c4:0a:07:82:27:
68:22:28:b2:c5:36:7c:55:18:73:d0:69:eb:b9:24:
02:08:68:72:f3:a6:a7:b5:28:0d:42:97:16:21:74:
a8:18:5f:6d:91:27:1d:a2:e3:f9:24:a3:ec:d9:b5:
c2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2C:86:19:5E:D1:49:F8:94:4F:CB:D5:B2:A0:62:7D:E7:A3:3C:7A
X509v3 Authority Key Identifier:
keyid:DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:85:94:f0:17:0d:fa:7f:37:77:c3:50:bb:5e:a1:4b:36:e2:
49:c4:ed:61:4c:58:1d:ae:73:5f:2e:fb:17:8c:1c:3f:5d:b5:
d7:e1:41:22:bb:cd:bb:d9:58:38:21:a7:d9:e9:02:74:c8:e5:
fc:7b:54:e1:e1:b8:5d:f6:a6:61:be:db:13:f8:93:df:49:9a:
84:28:1d:58:cb:58:0f:0d:54:34:05:81:e3:67:e6:c6:c7:b2:
2f:f5:b6:e8:29:eb:38:ff:2e:60:88:05:a1:51:c1:ab:0e:a8:
4e:80:8f:c5:09:85:0c:48:17:c4:93:06:3f:93:7c:24:59:de:
00:58:e1:60:84:f7:45:38:39:db:99:7a:e8:a5:42:5d:0d:ad:
25:a6:a2:09:f1:3e:71:05:57:8c:7b:24:0f:73:81:25:f1:2e:
f7:93:41:58:70:6c:e5:cf:a9:84:c1:7b:96:65:16:81:8a:41:
c1:88:02:56:dc:02:ef:cc:bf:37:2e:09:b3:fc:6f:37:20:bf:
de:27:22:4e:38:df:b4:1c:e5:23:b1:ec:22:3e:f9:3b:fc:25:
2c:93:c3:fe:fb:63:3c:54:e6:c8:27:c6:1e:b6:d8:e0:dd:18:
6a:be:27:7d:17:7c:70:29:d6:b1:29:4b:6d:7b:b4:c7:8d:c5:
68:33:f8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:17:15 2026 by rpki-client