
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
File: U_b3klO824sdFxgs5PGdOf1JnfU.mft (raw, json)
Hash identifier: GK8gRW53k4sOXIjM7El5o8NGr7xOde2V57kA9rAxUUA=
Subject key identifier: B1:1A:03:8B:E6:6E:4D:4A:7C:AA:A9:8D:39:91:84:E2:0D:CD:06:31
Authority key identifier: 53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5
Certificate issuer: /CN=A9154340/serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
Certificate serial: 073C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
Manifest number: 0735
Signing time: Tue 22 Sep 2026 21:41:10 +0000
Manifest this update: Tue 22 Sep 2026 21:41:09 +0000
Manifest next update: Tue 29 Sep 2026 21:41:09 +0000
Files and hashes: 1: U_b3klO824sdFxgs5PGdOf1JnfU.crl (hash: SvXSNoWE/6Yq0C9xidU5Aa37I9Z0CYFkg38P45DLe14=)
2: 28D1785891E311EBA138E330C4F9AE02.roa (hash: P7BP6/E5VR32Uv8oMFIhpGR35nhbqoxIBUDOIRvP5g8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl
rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:41:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1852 (0x73c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154340, serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
Validity
Not Before: Sep 22 21:41:09 2026 GMT
Not After : Sep 29 21:41:09 2026 GMT
Subject: CN=6ab2f5f6-7e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fa:a6:24:85:d9:09:7d:70:62:08:f8:72:40:
87:c8:5e:1d:85:e6:84:99:13:3b:dc:8a:3e:25:16:
73:8f:83:44:ff:45:7f:5c:0c:30:f3:cd:92:17:f0:
01:51:53:fe:64:82:e4:fd:8d:fa:13:c9:73:c1:fb:
13:f4:1f:6d:03:d0:33:9b:8a:91:bf:1e:57:0c:2c:
b4:85:7d:a6:88:cc:7a:55:b5:ff:44:82:56:0b:2d:
77:08:a8:a6:d8:85:d9:dc:8b:06:19:2c:46:86:2b:
f5:11:06:7c:9f:2d:32:5b:26:21:61:0d:44:27:6a:
d5:55:6b:ce:3d:a5:41:32:81:2b:67:18:59:3f:dd:
e6:b0:e2:9f:40:ba:d0:5c:11:b0:0d:ab:bf:81:37:
e6:89:94:f5:b2:f7:99:94:1b:34:54:65:aa:ea:69:
55:3b:54:60:02:f8:a9:c3:fb:8d:d3:ac:e5:04:08:
da:5a:f4:2a:06:71:9a:f9:a9:ca:68:63:f1:88:14:
40:03:2a:42:d1:5c:8a:9b:1e:17:b2:19:03:09:bb:
a1:2c:08:13:fd:36:7a:67:a4:81:74:01:c9:46:77:
96:81:7a:14:61:c5:5f:17:ab:d3:d6:2a:bc:fb:a4:
c0:04:c8:e5:ee:b2:d5:9c:cb:a8:76:91:c7:1a:31:
67:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1A:03:8B:E6:6E:4D:4A:7C:AA:A9:8D:39:91:84:E2:0D:CD:06:31
X509v3 Authority Key Identifier:
keyid:53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:65:a6:b0:2b:6e:28:cd:db:08:17:99:e0:bf:21:7e:7a:58:
3b:fc:d4:6c:7e:9e:e8:f7:5e:c6:6f:01:c0:a5:94:47:71:c3:
a6:36:3e:90:d4:97:38:02:c5:7e:8b:5b:27:2c:55:0d:a5:21:
0d:f4:49:52:b7:8f:13:c6:f9:02:db:8c:0d:e3:72:f7:a0:0e:
6f:8a:71:08:53:a8:7d:77:fb:8e:cd:52:67:98:75:a7:21:46:
2d:e7:01:38:fa:20:51:97:01:58:5a:44:17:c7:13:29:1d:a4:
84:5c:a5:20:cd:62:c3:89:b9:50:2b:e6:04:cb:cc:af:47:e7:
fc:ef:6e:af:bd:79:4f:50:93:18:0c:d6:5f:ff:1d:cb:4a:18:
c3:2e:8c:c2:9f:11:5f:8a:fb:e9:6f:88:5c:6c:71:5c:a2:36:
c6:0e:c5:78:7d:a2:b8:11:36:19:4b:b9:e3:c1:80:d7:d4:bb:
91:29:11:ea:3a:c4:2a:a9:6c:6c:c5:69:1b:bf:df:7b:5f:e0:
96:39:3a:59:de:77:a8:5d:e0:2d:ee:5f:9a:86:98:d3:fe:ef:
d4:7d:77:6c:62:28:66:d0:26:ec:4f:ac:89:cd:83:12:78:af:
66:54:f1:06:f4:18:f7:0b:28:81:16:3f:8a:92:01:c1:e3:c4:
af:ad:78:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:22:40 2026 by rpki-client