
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
File: B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json)
Hash identifier: A6lXwoYfB0k/nnpuLcW2fpAsgyjxOAKaL/o6/TS4dy8=
Subject key identifier: 86:E3:21:F3:BD:FF:E8:EE:E5:27:AC:12:A8:37:B3:DA:A0:57:4C:86
Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
Certificate issuer: /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
Manifest number: FC
Signing time: Wed 23 Sep 2026 06:05:09 +0000
Manifest this update: Wed 23 Sep 2026 06:05:09 +0000
Manifest next update: Wed 30 Sep 2026 06:05:09 +0000
Files and hashes: 1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: SlHsumiugdJdAo/Q2B99ErOkPBqlguv2xGymZvyDAuY=)
2: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (hash: S+CNDCXqBAPQY2/ZroCNVvDaAZiKggJqTG4IMa7VBfA=)
3: 13CC532280EC11F0A973810CC4F9AE02.roa (hash: JqgQRdLeaIMLexLk5Sg27CS93/2/7D3KXGP9opjlvo0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Validity
Not Before: Sep 23 06:05:09 2026 GMT
Not After : Sep 30 06:05:09 2026 GMT
Subject: CN=6ab36c15-d300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:af:bf:9d:5c:e5:fc:c8:4e:76:93:c5:85:e2:
de:fb:85:35:3b:16:85:00:74:54:ba:76:5c:34:07:
86:ef:0f:68:52:3e:80:6c:cb:12:06:24:c6:55:21:
5b:ce:50:cd:c8:2a:0c:c2:72:1f:d8:6c:dd:72:a5:
90:71:b6:e0:20:d6:02:75:14:c0:98:c6:2c:4a:80:
c3:92:31:59:d4:68:5e:73:24:d7:17:93:cd:fc:b8:
3b:e7:38:d8:6e:fa:a3:35:89:02:8a:c2:9b:fa:9e:
aa:b8:db:e2:e2:25:b5:22:ce:7a:9e:7c:ea:23:a2:
c8:3a:4e:67:82:98:50:1c:af:eb:04:97:a0:1d:1b:
04:c2:22:63:2f:d3:4c:a5:6d:91:54:a1:87:9a:a7:
ab:8c:b4:ce:e8:b0:28:92:69:5f:e3:c9:78:5e:09:
b1:de:17:c0:c3:88:87:c2:30:75:cf:fe:45:be:40:
9a:4b:3a:4c:bb:5d:47:c1:0f:12:6d:f0:69:1e:87:
c6:30:70:db:54:d3:d3:36:e0:c9:87:aa:29:25:10:
b3:64:c7:e5:32:85:7c:f6:3a:6a:4b:bf:dc:08:e4:
1c:71:d6:43:0f:96:5c:e4:55:b3:7c:2f:13:09:79:
a8:af:c6:9f:9f:ed:4f:2b:33:e9:f5:98:cc:27:39:
7b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E3:21:F3:BD:FF:E8:EE:E5:27:AC:12:A8:37:B3:DA:A0:57:4C:86
X509v3 Authority Key Identifier:
keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fd:0b:0b:96:d1:cb:b9:f5:f8:e8:19:72:c4:3f:75:09:cb:
53:c8:2a:7b:ee:b5:02:18:7b:3d:f9:01:2a:c2:df:5d:a3:30:
c2:d0:7a:2c:7c:32:85:22:60:ad:76:2c:51:9d:ab:9a:ba:4d:
f7:91:4d:de:5b:72:fc:0e:c7:ce:72:ea:73:6b:df:98:41:65:
29:4e:0d:81:b4:4c:46:c3:d7:53:6f:51:b3:fd:15:e1:6d:22:
39:6b:88:88:a8:77:b8:0a:80:da:71:3c:46:56:60:b2:61:f3:
f9:7f:4d:cf:eb:7a:9f:0f:fa:da:ab:f6:da:60:2e:aa:89:9f:
83:eb:89:4d:40:df:c7:9f:38:54:9c:9e:57:91:8f:a6:c3:4e:
1f:58:25:6e:f3:9e:4a:71:d9:55:6f:f8:a3:b4:55:0a:6b:b2:
7d:fd:af:e6:ae:e6:f8:5d:c2:6f:b8:05:f8:7b:45:42:9b:95:
b7:aa:12:f6:41:29:19:2f:2d:e1:d2:a5:8f:79:67:2c:49:29:
75:88:a7:bf:ac:62:b6:8d:8d:b5:5d:b1:cd:f9:d5:88:d1:b5:
98:ae:e0:7e:c4:1a:a7:70:6e:57:44:a8:27:22:e2:1e:18:73:
b5:30:a1:8b:b2:7a:63:e9:67:78:f9:64:8e:02:cb:7b:de:e6:
e2:cc:33:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:18:58 2026 by rpki-client