
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
File: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft (raw, json)
Hash identifier: 2MGfq3EM6RroyK67mL6z6U0z5sbEKqYH52nvphB0Enc=
Subject key identifier: AC:79:E4:62:CF:FE:90:BE:85:80:36:9A:54:E7:FF:4B:A1:96:45:62
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
Manifest number: 0158
Signing time: Wed 23 Sep 2026 05:17:48 +0000
Manifest this update: Wed 23 Sep 2026 05:17:47 +0000
Manifest next update: Wed 30 Sep 2026 05:17:47 +0000
Files and hashes: 1: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl (hash: 3NTilC9lgt7i1cGyRAcv19smawXSOoFWtYF0jpxycBU=)
2: 6DDF503008E611F1A622C6722C3D8C67.roa (hash: rDAKA9Yax4eCoXJX6ldW5NMo2xVyobP0qNrUYPYQF3s=)
3: 7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa (hash: 2okYUQLpXLjFASnkLnBoJ7EV0CsOknY2IZxTrGpUiiU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Validity
Not Before: Sep 23 05:17:47 2026 GMT
Not After : Sep 30 05:17:47 2026 GMT
Subject: CN=6ab360fc-3b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:18:33:f9:98:79:d4:70:82:a5:b8:8b:35:
d2:1a:c5:23:76:d0:06:c4:f5:6d:b5:ca:d8:d5:fd:
f8:b5:11:47:f8:eb:9c:1c:6b:a4:df:17:f1:f3:b9:
50:8b:97:ae:b6:c7:9d:38:4a:8b:b1:c3:34:29:ec:
d2:be:67:1c:28:c0:cf:6e:a3:48:bf:b1:c8:64:36:
47:22:73:14:dc:54:f3:e8:9e:15:7e:69:ab:07:d1:
b9:fa:38:05:7b:d7:6c:e2:29:2d:36:41:0d:e1:f0:
5d:36:8b:d0:fc:8f:b0:86:9f:6e:d1:11:1c:69:3c:
ab:4c:33:0d:5c:95:cb:98:de:1d:21:da:dd:0d:a8:
cd:fc:1a:45:7c:e0:d7:ce:13:a7:81:5c:bb:e4:e2:
31:03:c3:e3:4b:d7:ab:19:0e:be:b9:fa:86:d8:7b:
63:cb:df:28:dc:3d:eb:0d:a4:a7:21:c3:ec:02:21:
6e:e1:c3:92:b7:9e:1e:62:85:66:45:1f:97:cf:98:
a4:e4:5a:5f:b7:d2:13:64:fe:f4:c3:69:37:da:5a:
66:08:aa:c8:af:cd:4e:0b:0d:38:20:b8:ef:ac:ed:
ef:00:cc:c3:8d:59:ae:85:d8:cd:65:f9:e3:c3:eb:
15:ac:be:6e:3e:c3:f6:2a:2f:35:0d:c9:49:dd:73:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:79:E4:62:CF:FE:90:BE:85:80:36:9A:54:E7:FF:4B:A1:96:45:62
X509v3 Authority Key Identifier:
keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:28:34:7d:fb:6c:96:7e:19:4b:75:9a:71:a3:93:e6:97:1f:
80:4f:49:b1:b5:63:9a:36:f3:8d:f9:b2:03:17:9a:56:77:27:
26:81:b5:4e:51:63:64:9e:d6:3b:68:5c:8a:e9:d5:cf:e9:dc:
b0:ef:77:8e:28:9a:d0:51:e5:48:83:5a:09:67:7a:77:93:a9:
47:14:1c:51:67:99:6a:e5:a4:21:7e:07:bd:df:a3:63:27:8f:
61:78:ce:94:ef:57:b4:b5:4a:ca:90:88:04:f6:a0:c8:1a:75:
b5:aa:58:fa:9b:1a:b1:d8:4b:07:aa:a9:8d:94:84:a1:1b:c5:
67:8f:12:dc:b1:27:03:6e:50:32:c9:00:08:8d:46:54:8d:4f:
d0:f3:19:9e:e9:86:f8:3e:c9:ad:95:42:0a:08:9c:5d:0a:1f:
85:84:cd:1e:79:88:49:85:0a:36:75:8a:a5:7d:af:1c:c3:3e:
e6:79:10:53:ee:ad:dd:4e:aa:55:93:5c:ce:84:5d:e5:eb:4f:
9a:ab:56:0d:9f:5f:af:2a:22:7e:af:aa:f4:ac:cf:29:d4:c7:
99:a7:19:26:eb:46:1e:34:d1:ef:e9:62:21:34:25:25:34:6d:
d9:f6:3d:ad:9c:aa:b2:e5:5b:55:29:37:76:ef:5e:48:20:dd:
7c:6a:b8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:49:39 2026 by rpki-client