
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
File: r3YSV94snaXzPnHGQZ4meoYt-2I.mft (raw, json)
Hash identifier: YldKOge9VxxjMQyVdYO6g5ZJbBwiaQDq6XGMn1eGZSg=
Subject key identifier: 01:B2:6F:81:C5:F5:64:E3:06:38:E6:3E:EF:B9:C3:90:F6:9F:C6:F4
Authority key identifier: AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62
Certificate issuer: /CN=A91F4D54/serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62
Certificate serial: 0138
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
Manifest number: 0134
Signing time: Sat 03 Oct 2026 06:16:48 +0000
Manifest this update: Sat 03 Oct 2026 06:16:47 +0000
Manifest next update: Sat 10 Oct 2026 06:16:47 +0000
Files and hashes: 1: r3YSV94snaXzPnHGQZ4meoYt-2I.crl (hash: ffufaFksvmDOXCytJ6P2N0TzglalqC9gPLjaVZyIoOM=)
2: 61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa (hash: TBjFZLoAcX8XTz4OXPD8ohPadAtZD+uq/tBStT0J3HQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl
rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 06:16:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4D54, serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62
Validity
Not Before: Oct 3 06:16:47 2026 GMT
Not After : Oct 10 06:16:47 2026 GMT
Subject: CN=6ac09dcf-79dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bc:aa:b4:70:3a:dd:70:5e:47:57:27:4c:a0:
54:d0:8d:dc:37:29:92:e9:bf:15:63:84:da:3e:fb:
d3:20:8e:09:3b:c4:2d:16:8c:5e:ca:1f:7a:b9:2c:
a6:64:b0:92:15:d7:81:df:2c:b5:c4:14:dd:88:b0:
ee:41:57:9c:5b:26:02:c1:d2:8f:1b:2e:e2:d3:46:
e7:53:15:af:5b:f8:69:b0:79:0d:57:70:be:23:1f:
da:69:fb:d4:16:c3:ad:7d:12:b7:b5:ff:6a:2f:99:
12:73:e7:b1:2b:1b:e1:a8:72:c6:da:c8:85:9c:0c:
2a:30:eb:bf:e1:91:38:c9:46:5d:78:5f:72:b5:c8:
dc:18:cc:50:4f:c3:8e:fb:85:be:71:3b:74:4b:c6:
6a:f9:69:09:64:06:5e:b8:c3:65:cf:b6:79:b0:e8:
e2:d1:e2:31:d9:e9:5d:76:12:68:4a:6a:28:06:a7:
e4:28:a7:ae:c6:30:8f:55:2d:f5:05:25:39:99:3e:
ef:89:25:cc:be:23:f4:a1:0d:32:73:d0:ca:c2:72:
55:3e:74:03:07:15:7a:f2:36:c2:d6:20:27:39:96:
64:21:50:f1:4e:9e:64:f1:42:88:25:40:e8:c6:28:
c8:3c:19:d7:f8:1b:23:f0:fc:07:2c:d0:21:db:ff:
78:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B2:6F:81:C5:F5:64:E3:06:38:E6:3E:EF:B9:C3:90:F6:9F:C6:F4
X509v3 Authority Key Identifier:
keyid:AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:e7:2b:0c:d9:1d:12:22:9a:c0:65:73:50:4f:aa:70:30:32:
74:ea:fe:43:54:47:b6:d1:02:d7:76:09:8d:4e:e5:b3:30:ed:
d9:00:86:61:d9:ac:ee:ba:77:eb:0c:a2:5a:7a:f1:8f:c0:4d:
75:8d:75:5b:59:34:e4:aa:88:c9:c0:db:82:8d:01:0f:a9:6e:
ce:7a:cd:d7:d4:67:62:c5:1f:18:4d:fb:8f:36:6d:af:5e:84:
ad:b3:c1:75:0f:32:17:77:16:e2:b1:c7:1d:54:3c:30:75:6a:
8b:84:ee:b9:aa:57:96:ac:f1:08:53:51:30:a9:fb:df:b0:a8:
1c:bf:57:e1:a8:30:a3:6d:ff:1f:e3:6a:3a:95:a6:03:10:2c:
24:cf:31:5d:07:2c:74:7f:3a:bd:6b:1c:ba:68:f0:01:2d:1a:
19:88:40:cc:3c:7f:1f:c2:00:c6:a1:a4:af:89:75:62:5f:8a:
75:59:50:d6:a6:c7:1f:23:fc:f6:15:18:b9:73:55:dc:c2:b9:
1d:10:27:d6:63:22:eb:d9:a0:e1:62:c8:81:96:b4:2a:10:ef:
26:85:7a:4d:39:6a:88:c8:b3:cb:e4:90:40:06:0b:e6:6c:e2:
ee:3b:38:28:60:b5:a9:d6:4a:51:bb:a5:42:59:6b:d8:eb:ed:
51:0a:09:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjRENTQxMTAvBgNVBAUTKEFGNzYxMjU3REUyQzlEQTVGMzNFNzFDNjQxOUUyNjdB
ODYyREZCNjIwHhcNMjYxMDAzMDYxNjQ3WhcNMjYxMDEwMDYxNjQ3WjAYMRYwFAYD
VQQDEw02YWMwOWRjZi03OWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkryqtHA63XBeR1cnTKBU0I3cNymS6b8VY4TaPvvTII4JO8QtFoxeyh96uSym
ZLCSFdeB3yy1xBTdiLDuQVecWyYCwdKPGy7i00bnUxWvW/hpsHkNV3C+Ix/aafvU
FsOtfRK3tf9qL5kSc+exKxvhqHLG2siFnAwqMOu/4ZE4yUZdeF9ytcjcGMxQT8OO
+4W+cTt0S8Zq+WkJZAZeuMNlz7Z5sOji0eIx2elddhJoSmooBqfkKKeuxjCPVS31
BSU5mT7viSXMviP0oQ0yc9DKwnJVPnQDBxV68jbC1iAnOZZkIVDxTp5k8UKIJUDo
xijIPBnX+Bsj8PwHLNAh2/94DQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAGyb4HF
9WTjBjjmPu+5w5D2n8b0MB8GA1UdIwQYMBaAFK92ElfeLJ2l8z5xxkGeJnqGLfti
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEQ1NC9EMjg3N0RCNkU5
RUIxMUVGQTQ1NDJCMThDNEY5QUUwMi9yM1lTVjk0c25hWHpQbkhHUVo0bWVvWXQt
MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3IzWVNWOTRzbmFYelBuSEdRWjRtZW9ZdC0ySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NEQ1NC9EMjg3N0RCNkU5RUIxMUVGQTQ1NDJCMThDNEY5QUUwMi9yM1lTVjk0c25h
WHpQbkhHUVo0bWVvWXQtMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzOcrDNkdEiKawGVzUE+qcDAydOr+Q1RHttEC13YJjU7lszDt2QCGYdms7rp3
6wyiWnrxj8BNdY11W1k05KqIycDbgo0BD6luznrN19RnYsUfGE37jzZtr16ErbPB
dQ8yF3cW4rHHHVQ8MHVqi4TuuapXlqzxCFNRMKn737CoHL9X4agwo23/H+NqOpWm
AxAsJM8xXQcsdH86vWscumjwAS0aGYhAzDx/H8IAxqGkr4l1Yl+KdVlQ1qbHHyP8
9hUYuXNV3MK5HRAn1mMi69mg4WLIgZa0KhDvJoV6TTlqiMizy+SQQAYL5mzi7js4
KGC1qdZKUbulQllr2OvtUQoJcA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:14:42 2026 by rpki-client