
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json)
Hash identifier: r6DDyBgoXaGfX6p/IgCyqeHfCnXIfY9XeRq9hCYB5yo=
Subject key identifier: 7C:A1:A8:C8:A1:E0:38:B0:76:54:05:38:38:F2:73:F9:0F:B1:A4:0D
Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55
Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955
Certificate serial: 01DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
Manifest number: 01D1
Signing time: Sat 03 Oct 2026 04:20:15 +0000
Manifest this update: Sat 03 Oct 2026 04:20:14 +0000
Manifest next update: Sat 10 Oct 2026 04:20:14 +0000
Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: 92J+qiO0XuS4T6g1c47rdJcOPPYYj3y/eLSpn6kCnkc=)
2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: 6f62DrCIqXQzH0Me6UWUB3Obo/TfW+7iKkRiIr7raYQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl
rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 04:20:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955
Validity
Not Before: Oct 3 04:20:14 2026 GMT
Not After : Oct 10 04:20:14 2026 GMT
Subject: CN=6ac0827f-ecb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:35:df:44:5d:e3:fd:cf:91:98:3f:e8:3a:
06:b5:83:9f:ae:b3:2f:f5:31:17:ef:9b:e8:00:65:
9a:a3:9b:13:97:ce:cb:a2:72:84:56:cc:c9:3f:c6:
28:70:3d:3f:1e:b9:0e:09:08:b4:a9:3f:df:77:5f:
31:d4:09:4a:0b:8e:c5:b2:6a:b7:87:ef:b9:5c:63:
ea:a7:88:e5:91:2a:65:5e:cd:83:50:7e:89:d5:08:
b9:41:27:91:9f:d5:bf:78:6c:24:9f:c5:2f:be:27:
f5:5b:0b:9c:ec:d1:23:04:d2:a7:54:7c:46:ab:da:
9a:96:6b:65:9b:6b:ec:2f:d3:cf:26:12:3f:59:4c:
50:f9:c2:bc:a0:a1:34:dc:4a:2a:e8:fc:22:49:99:
ba:0c:19:17:be:d2:9f:a9:a8:55:d1:34:47:76:9d:
b3:45:3e:f6:59:17:75:b4:46:36:4c:24:e0:29:d4:
f9:ab:d2:56:68:25:14:f2:8e:5f:53:73:92:2d:fd:
9f:51:75:ea:78:a5:8a:ef:eb:93:1d:8e:75:3d:b3:
cc:a5:3a:66:9f:67:ce:4f:4d:99:b9:55:2d:8e:94:
31:a1:65:12:ed:df:8f:22:cc:b3:bf:9a:b7:54:f8:
57:b4:c9:81:c7:f6:7d:30:2e:86:44:a2:89:68:ea:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A1:A8:C8:A1:E0:38:B0:76:54:05:38:38:F2:73:F9:0F:B1:A4:0D
X509v3 Authority Key Identifier:
keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:83:dc:69:8b:c7:55:66:f6:17:3a:a2:09:b6:b0:ef:57:b3:
55:79:ec:1d:81:f0:54:fe:f3:da:a9:5a:3b:c9:cf:89:3e:24:
69:e2:7d:42:62:b7:cf:33:96:7e:4e:e1:fb:e7:69:8b:63:18:
98:f8:ca:6c:95:1a:b2:ae:5c:db:c4:e0:f1:16:f8:54:9b:c7:
df:47:31:ae:5a:33:50:a3:59:ce:01:b5:24:c2:ad:eb:23:46:
c6:dc:c3:ff:fc:41:89:fe:57:a0:81:c3:f8:4a:59:78:b1:93:
bb:41:e0:90:7e:bc:da:5a:2e:2c:77:33:cd:53:55:e1:77:45:
21:97:1f:f8:d7:9f:b8:9f:5c:d1:1d:f4:4a:d1:63:e4:6f:fc:
4d:c1:d6:46:e1:08:08:1c:09:09:60:b7:23:93:ce:98:02:dc:
5e:ab:61:9a:3d:4a:9d:8a:46:ad:8e:ee:7b:08:8c:d9:cb:ef:
38:2f:0c:2e:31:74:2f:0e:28:93:c0:bb:b2:a2:d6:64:d3:71:
c9:d8:ed:8d:63:50:1a:d3:f2:29:02:75:4e:47:c0:dc:4e:5e:
46:f4:73:ae:f9:c7:8c:ad:5b:0c:e2:5f:9c:6f:e2:19:e0:2e:
69:ca:f5:be:6c:c7:f4:2c:bd:7e:d9:55:c7:7c:f1:8d:b0:ea:
14:01:88:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzNBMjcxMTAvBgNVBAUTKERDQUQ2NDQ3MDVDRjE4QzI3RDdGQzIwMTczODVEMjNF
RTcyMDM5NTUwHhcNMjYxMDAzMDQyMDE0WhcNMjYxMDEwMDQyMDE0WjAYMRYwFAYD
VQQDEw02YWMwODI3Zi1lY2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxyg130Rd4/3PkZg/6DoGtYOfrrMv9TEX75voAGWao5sTl87LonKEVszJP8Yo
cD0/HrkOCQi0qT/fd18x1AlKC47Fsmq3h++5XGPqp4jlkSplXs2DUH6J1Qi5QSeR
n9W/eGwkn8Uvvif1Wwuc7NEjBNKnVHxGq9qalmtlm2vsL9PPJhI/WUxQ+cK8oKE0
3Eoq6PwiSZm6DBkXvtKfqahV0TRHdp2zRT72WRd1tEY2TCTgKdT5q9JWaCUU8o5f
U3OSLf2fUXXqeKWK7+uTHY51PbPMpTpmn2fOT02ZuVUtjpQxoWUS7d+PIsyzv5q3
VPhXtMmBx/Z9MC6GRKKJaOozyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHyhqMih
4DiwdlQFODjyc/kPsaQNMB8GA1UdIwQYMBaAFNytZEcFzxjCfX/CAXOF0j7nIDlV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0EyNy9FMjY2NDZFNEY3
MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdNSjlmOElCYzRYU1B1Y2dP
VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNLMWtSd1hQR01KOWY4SUJjNFhTUHVjZ09WVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
M0EyNy9FMjY2NDZFNEY3MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdN
SjlmOElCYzRYU1B1Y2dPVlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAoPcaYvHVWb2FzqiCbaw71ezVXnsHYHwVP7z2qlaO8nPiT4kaeJ9QmK3zzOW
fk7h++dpi2MYmPjKbJUasq5c28Tg8Rb4VJvH30cxrlozUKNZzgG1JMKt6yNGxtzD
//xBif5XoIHD+EpZeLGTu0HgkH682louLHczzVNV4XdFIZcf+NefuJ9c0R30StFj
5G/8TcHWRuEICBwJCWC3I5POmALcXqthmj1KnYpGrY7uewiM2cvvOC8MLjF0Lw4o
k8C7sqLWZNNxydjtjWNQGtPyKQJ1TkfA3E5eRvRzrvnHjK1bDOJfnG/iGeAuacr1
vmzH9Cy9ftlVx3zxjbDqFAGI/w==
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:29:08 2026 by rpki-client