
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
File: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft (raw, json)
Hash identifier: 9JheLVuUrGS+r8AGpyfVZFQSCKlTWdeJEBZSk271eZo=
Subject key identifier: 63:EE:DC:4B:42:F0:14:AD:9E:33:9A:EB:BC:48:47:44:59:AD:EB:FD
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial: 0150
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
Manifest number: 0138
Signing time: Thu 23 Jul 2026 07:31:33 +0000
Manifest this update: Thu 23 Jul 2026 07:31:32 +0000
Manifest next update: Thu 30 Jul 2026 07:31:32 +0000
Files and hashes: 1: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl (hash: LOPO0r0sBnzXz/tvgocgNXzG3qz9Gh8w3VFmVi/pTlY=)
2: 6DDF503008E611F1A622C6722C3D8C67.roa (hash: rDAKA9Yax4eCoXJX6ldW5NMo2xVyobP0qNrUYPYQF3s=)
3: 7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa (hash: 2okYUQLpXLjFASnkLnBoJ7EV0CsOknY2IZxTrGpUiiU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Validity
Not Before: Jul 23 07:31:32 2026 GMT
Not After : Jul 30 07:31:32 2026 GMT
Subject: CN=6a61c355-3815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:09:0f:ba:f7:1c:b3:9f:30:ae:e5:aa:c7:
10:7a:da:f1:fd:b6:f6:e9:27:c6:ba:06:03:63:64:
93:c2:a0:96:06:3b:d3:05:34:ba:69:86:2a:2e:45:
1c:a5:34:ec:88:ab:29:8b:a3:e5:29:03:6b:7c:b9:
d9:55:93:4c:9e:59:77:96:e1:29:b1:e0:9b:57:7a:
da:2c:4f:f5:b1:0d:9b:58:c3:b9:42:e1:ab:a0:21:
1a:51:d5:70:3a:e7:57:67:46:a6:b6:d1:e3:ec:a6:
99:93:9b:86:a6:f5:e6:3f:59:0b:55:c0:d2:f4:87:
8b:54:15:13:80:a1:3c:6a:05:dd:07:8a:13:4c:f8:
35:8a:99:fe:1f:5a:21:52:64:85:e4:7f:e8:d5:ac:
86:78:8f:fc:29:95:cc:82:ea:d3:62:7f:6f:9f:06:
5c:8b:3b:1d:ef:1e:52:55:ba:db:0d:f6:d0:bb:77:
7f:5e:54:65:30:e6:38:11:41:f9:0c:21:c2:c5:87:
11:b6:92:d3:b2:68:ed:72:f9:32:ec:58:1a:87:54:
63:6e:63:b1:1f:61:ce:91:90:ff:c6:8e:6b:9d:05:
ba:b4:d1:67:f1:3b:df:b5:32:19:a3:e6:ed:c4:f3:
48:51:9c:19:bb:06:70:0a:6a:97:77:b1:6d:e7:c3:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EE:DC:4B:42:F0:14:AD:9E:33:9A:EB:BC:48:47:44:59:AD:EB:FD
X509v3 Authority Key Identifier:
keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:04:ed:b6:d9:ec:fc:97:63:5d:8f:a8:e4:57:d0:b2:db:4f:
2e:54:9e:94:b1:11:68:2b:8a:09:35:37:bc:57:fb:bc:c1:6a:
f8:d1:79:bb:b4:70:e6:1e:bc:43:ad:94:ec:6c:eb:f9:7d:83:
d6:44:c3:99:fb:90:50:d3:8a:91:00:6c:b9:ac:a1:6e:66:dc:
01:b0:7a:92:df:78:91:c0:c3:80:16:36:22:3c:2e:8b:8d:f7:
3f:be:7b:86:38:1e:84:e8:b3:56:57:dd:a2:84:e4:2b:6c:86:
d5:15:ad:01:02:a3:cc:2e:ff:82:8a:5d:03:09:cf:67:c2:67:
91:06:55:87:57:96:2a:99:92:78:1a:35:ec:5e:e6:6f:f6:1d:
19:48:75:ca:29:e5:99:18:f3:4c:18:01:a9:73:93:11:1f:a3:
89:98:be:13:b4:53:f9:c8:75:fd:ab:21:e1:af:f0:72:11:cf:
73:08:3b:0d:b3:1d:4e:00:cb:6d:e6:4a:e2:10:e8:ba:8d:ff:
4c:69:5a:af:b4:fa:63:69:65:f4:37:42:33:c6:06:29:7c:f7:
dc:2a:be:16:62:ac:88:ff:b1:6b:a8:25:6a:ff:cd:a1:c4:5f:
b2:e0:d8:2a:a1:79:48:0c:66:09:75:4e:c8:73:00:d4:29:6c:
3e:a2:84:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:10:03 2026 by rpki-client