
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft
File: 3NoGnj7_iVbAFXKBanAjUZXwZyU.mft (raw, json)
Hash identifier: EI/ABQUHwDS3kvZdFjV9IERul3J5vgQO4R24REOBSqo=
Subject key identifier: DA:B7:00:72:B0:DB:CD:FE:77:3B:70:2C:F9:64:BE:0E:AA:F3:CF:66
Authority key identifier: DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25
Certificate issuer: /CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft
Manifest number: 01F7
Signing time: Wed 23 Sep 2026 03:11:25 +0000
Manifest this update: Wed 23 Sep 2026 03:11:25 +0000
Manifest next update: Wed 30 Sep 2026 03:11:25 +0000
Files and hashes: 1: 3NoGnj7_iVbAFXKBanAjUZXwZyU.crl (hash: VBFfJr5oZriw9npsY9iagv9dVEb+ncUwhJqAMNr0kc4=)
2: 37D72D7CC17C11EE8391A218C4F9AE02.roa (hash: f0Nq6bNqAFhlnNadTuboxrgMX1sJQBWxkk0foam6u60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl
rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:11:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9F31, serialNumber=DCDA069E3EFF8956C01572816A70235195F06725
Validity
Not Before: Sep 23 03:11:25 2026 GMT
Not After : Sep 30 03:11:25 2026 GMT
Subject: CN=6ab3435d-2a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:90:fc:30:8e:fd:4f:40:b2:55:21:1a:35:13:
13:d1:5c:f4:3b:fc:9e:e1:76:c7:4e:0e:d6:e6:69:
41:82:99:26:4b:27:ad:28:25:bd:f8:fc:df:0d:3f:
88:89:77:f1:c8:02:20:b9:ba:2c:ac:06:bb:b2:bc:
17:46:93:5e:e6:f8:8b:35:cf:9d:8f:4d:04:f1:c1:
87:6b:e8:89:01:28:c1:60:3d:17:cf:1f:d6:f5:74:
c1:76:37:46:a9:62:bb:f4:c7:17:19:48:65:68:83:
c3:67:34:6a:ed:97:ec:f9:3a:81:95:14:ce:99:b1:
24:ca:62:a1:77:17:8e:c5:64:ae:f7:c1:e3:99:c3:
41:3d:ef:c6:b1:43:44:77:4d:37:99:aa:50:3e:2f:
83:6c:da:b4:ce:fc:91:c1:52:c0:f9:b1:70:59:47:
a2:c0:41:1a:d8:12:69:fc:b3:88:25:cf:53:0f:11:
a2:fb:3f:f6:76:26:86:b7:7c:d4:35:19:c6:bd:dd:
4e:86:1d:a9:69:05:fe:d2:de:e5:6f:0f:b4:b3:11:
e7:bd:00:21:19:81:31:ec:a0:9c:05:8b:6c:2c:f5:
65:11:c6:ee:8d:48:1d:f4:53:9a:5c:9f:3a:6a:3b:
1b:53:20:5e:6d:48:5a:f4:c3:2e:80:dd:38:b8:68:
3c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B7:00:72:B0:DB:CD:FE:77:3B:70:2C:F9:64:BE:0E:AA:F3:CF:66
X509v3 Authority Key Identifier:
keyid:DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:73:c0:e7:5a:47:16:80:c8:92:95:9c:0d:92:81:5c:bd:40:
8f:16:70:a2:a7:9f:2b:11:85:69:82:d9:48:57:17:d8:53:35:
8e:d0:b5:05:e4:d1:40:eb:04:58:9f:9e:a3:62:3f:e8:a5:ee:
9e:a1:c7:07:8d:5e:35:a3:d1:3f:88:21:52:9e:b6:6c:26:22:
3d:86:07:f6:e8:dd:3d:82:f8:d8:c4:11:de:79:58:ee:f3:a6:
77:29:8b:0e:fe:43:e2:d4:e5:4e:04:b0:47:56:aa:fe:f3:31:
5b:91:7a:12:95:0a:fa:27:86:30:24:b3:19:7b:5d:47:e4:58:
d7:b6:eb:83:ff:ad:83:15:3a:3d:be:d0:70:f8:a5:aa:05:67:
50:e2:38:e4:9c:5b:5a:c2:73:f8:9f:20:77:c8:3c:ce:0a:58:
e1:ec:35:0c:80:4b:0c:08:e5:6e:77:cd:53:bf:cd:11:6f:e8:
a2:41:59:34:d8:34:12:1f:d4:56:0c:6f:00:6f:c4:03:44:d3:
af:a7:28:eb:3f:4f:9e:b0:a6:cc:64:a3:f0:9f:89:50:7e:ca:
12:b4:39:cc:eb:b8:5d:e5:23:70:2b:29:a3:61:58:a2:2b:88:
b6:13:33:bf:1f:b8:d1:4a:91:6b:0c:87:cb:9a:2c:35:e6:b2:
7e:3e:ad:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:49:10 2026 by rpki-client