
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
File: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft (raw, json)
Hash identifier: KQPG5A1yPgxb8F154Z4n0rGYwNq4zafbSrp42FxduoY=
Subject key identifier: B5:BA:22:17:37:B7:E4:6E:51:DD:CF:08:68:75:72:76:03:9D:47:3A
Authority key identifier: DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6
Certificate issuer: /CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6
Certificate serial: 026C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
Manifest number: 0262
Signing time: Wed 23 Sep 2026 02:04:47 +0000
Manifest this update: Wed 23 Sep 2026 02:04:47 +0000
Manifest next update: Wed 30 Sep 2026 02:04:47 +0000
Files and hashes: 1: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl (hash: SoZ7K6NzNsG+VZIn/xJSliFKXqV9Pqq7jjAugl5XtkU=)
2: 6F882FB01D5211EE94C36C2FC4F9AE02.roa (hash: NXDoT4OlUYq2pn7T1c4gGP0I8F4wFZ9IHq9xnpLAKD8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl
rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 620 (0x26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F716F, serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6
Validity
Not Before: Sep 23 02:04:47 2026 GMT
Not After : Sep 30 02:04:47 2026 GMT
Subject: CN=6ab333bf-ff22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ae:4a:d4:ae:a0:c7:c3:c3:5d:ea:ba:91:e6:
a8:2a:ec:0f:aa:77:1d:32:3d:08:67:1a:0d:91:ad:
98:e8:df:fc:3e:58:18:80:79:a1:54:23:83:bc:bc:
a0:74:07:a7:89:48:f9:4a:5e:12:a3:b7:32:f8:d5:
19:f7:d2:fa:58:95:09:ec:ed:d4:50:5a:a6:67:ca:
ff:e3:c2:1e:bd:ee:81:06:8c:2b:8f:e9:da:9d:f3:
ff:b9:5e:cb:60:8e:61:8a:87:45:67:ee:1a:f7:65:
30:7a:8e:3a:34:65:2e:13:8e:f2:5c:a2:fc:c1:44:
6f:b2:cf:0e:89:11:9e:c4:8e:b2:e8:a3:17:63:12:
4c:04:2d:c7:10:92:50:01:29:79:20:2a:ca:ff:ae:
76:18:51:bc:65:60:10:8c:f3:2f:39:72:9f:c9:a9:
a9:61:65:33:0c:95:d0:80:2b:19:0f:c9:64:b8:66:
22:8f:d6:80:24:d4:40:79:27:00:4b:a7:62:28:b8:
a3:d3:ed:a1:0d:d9:7b:c4:b1:e9:d5:69:11:eb:1d:
38:5c:1f:41:ee:68:36:3b:cf:eb:ef:99:f1:a2:03:
56:53:17:59:f4:b4:c6:60:8f:e3:c1:42:bd:d5:62:
af:bc:e3:b4:c1:7b:37:1d:2e:51:f6:a3:f6:b6:22:
01:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BA:22:17:37:B7:E4:6E:51:DD:CF:08:68:75:72:76:03:9D:47:3A
X509v3 Authority Key Identifier:
keyid:DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3c:36:6f:0e:ba:47:d0:29:1f:8f:45:09:30:73:d2:4b:72:
b3:14:9a:3f:1c:73:b5:91:55:77:69:dd:d9:33:e3:6d:b6:1f:
93:84:7c:83:9f:1a:c1:20:51:dc:77:5c:66:2a:3d:a1:36:ee:
98:65:b9:a4:2e:b7:c3:f6:bd:16:70:f0:ad:9a:f3:8b:46:7f:
74:95:7d:3a:d1:5a:ef:ec:7b:2d:e0:89:fd:bf:e5:8b:47:cd:
bc:10:63:6c:30:93:24:dc:1e:4e:f8:32:c7:8a:33:4c:33:d5:
7e:ef:3e:42:e4:19:b8:f1:82:a1:fc:22:4a:71:94:6f:fe:a3:
f8:67:9a:61:0e:14:b9:df:5e:99:ad:2d:12:c0:1c:aa:66:06:
de:82:14:f6:3e:61:75:c5:24:04:2a:11:54:eb:4f:af:ca:2a:
89:61:d5:be:9f:32:d5:ef:76:f5:6d:89:0b:13:21:26:78:c7:
7e:1c:61:2b:2e:34:93:e8:0c:12:4d:2a:78:23:fe:c8:8e:e9:
16:d9:af:96:6a:e8:ee:6f:a5:7e:57:d8:c9:92:72:4e:7a:9e:
f8:4e:61:79:0b:95:ee:cb:2e:cd:14:21:37:69:3a:fb:e2:11:
ce:64:2b:27:dc:5a:d7:46:aa:2a:37:c3:7f:02:b4:d2:86:4c:
a8:7b:fe:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:53:08 2026 by rpki-client