
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
File: 3MtG6q3c1z9ar64LPwAu2SDA6H4.mft (raw, json)
Hash identifier: O2i+FOdEDXseRBPAnAMlmXNBoTXBXQpocm5EoOBfalA=
Subject key identifier: 56:62:35:68:14:41:C4:76:B1:8F:27:4C:A0:B8:05:C0:46:38:36:37
Authority key identifier: DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E
Certificate issuer: /CN=A91F182D/serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
Manifest number: 0102
Signing time: Wed 23 Sep 2026 06:03:15 +0000
Manifest this update: Wed 23 Sep 2026 06:03:14 +0000
Manifest next update: Wed 30 Sep 2026 06:03:14 +0000
Files and hashes: 1: 3MtG6q3c1z9ar64LPwAu2SDA6H4.crl (hash: nwjwdimvs+fcfsXOWhycv+1KyTSlH6hxZzCKlr45vNU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl
rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F182D, serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E
Validity
Not Before: Sep 23 06:03:14 2026 GMT
Not After : Sep 30 06:03:14 2026 GMT
Subject: CN=6ab36ba3-37e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:c1:63:dd:d5:2d:b2:96:22:ef:1b:cc:88:
f7:dd:6d:9f:e8:a5:f3:a4:97:0c:49:98:9d:47:24:
9f:b3:a0:4e:3b:e8:0f:a1:b4:e8:0c:f9:f2:84:fe:
7e:8e:4b:54:c2:89:d7:fc:ac:aa:8a:03:1a:2f:d4:
c4:1b:0b:dc:90:e8:1f:fd:11:c1:32:31:9e:e3:b6:
b9:07:9b:ab:4a:fb:51:ea:76:01:11:1d:e2:c4:42:
8e:00:29:5a:5c:11:2f:42:e1:bb:31:05:eb:cf:81:
9d:ed:ae:a4:51:f2:26:3e:f7:3a:02:ec:28:c1:ec:
26:03:e7:9a:6c:f4:3d:be:cc:5c:fe:1b:c8:d9:f6:
95:8c:db:26:93:6c:66:9c:42:93:d1:16:ad:c8:77:
16:ff:3e:bb:98:0d:7c:92:c6:a5:48:3a:7b:8b:ee:
44:c6:09:cc:e5:3c:9b:19:d1:15:54:8a:66:9a:e1:
f3:4e:b8:3d:fa:d4:9c:ae:15:e0:28:92:15:5a:ab:
29:12:b0:39:95:6b:65:a8:b9:09:54:17:84:3c:c8:
33:8f:c6:a2:72:f1:b0:c2:4a:97:5b:6c:13:5d:32:
5d:8a:49:91:85:6f:94:80:31:90:7f:e9:b4:a6:91:
e9:8e:a2:db:be:97:3c:9c:e3:38:21:08:fe:49:5a:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:62:35:68:14:41:C4:76:B1:8F:27:4C:A0:B8:05:C0:46:38:36:37
X509v3 Authority Key Identifier:
keyid:DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:45:d6:c7:81:9d:7a:54:57:1c:30:af:18:2e:12:d2:0d:98:
c2:58:5d:ca:75:33:83:05:61:6f:01:5b:14:1e:02:12:9c:08:
61:0e:98:11:12:c1:53:94:2d:bc:4a:5b:64:0f:c8:b5:a8:f1:
d4:e8:c6:9a:19:6f:82:f5:51:12:b7:5c:1d:92:cc:35:02:c7:
34:78:fb:93:0b:b8:2f:c4:f9:64:10:19:86:e2:62:b2:96:88:
31:43:1b:da:b2:6a:3b:2a:b3:e6:f2:42:fe:55:f4:de:46:b8:
2e:a1:a1:a3:35:8e:3c:a0:a2:0c:bc:dd:21:2c:d1:31:4e:31:
b7:c2:c5:40:b4:e9:55:b7:1c:e5:6d:7d:e7:c3:f5:82:98:61:
04:b7:88:99:f3:86:5e:b2:38:e1:64:8d:72:c9:c9:0e:23:f8:
14:67:33:60:d3:85:33:2e:73:2d:07:8a:2f:67:82:ef:41:82:
fa:5d:3c:3a:43:e0:5a:d2:c2:a2:99:d0:ac:85:54:9b:ac:04:
75:e1:53:8c:ab:d1:29:45:e9:ff:3a:61:77:24:12:c7:bc:31:
8a:5e:1b:70:0d:7f:c8:f0:44:ac:0f:74:c3:58:89:52:c4:4a:
83:b6:49:40:ee:2d:1c:bd:89:21:cf:1f:c1:a9:18:ca:6d:50:
0d:0e:47:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:41:20 2026 by rpki-client