
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft
File: SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft (raw, json)
Hash identifier: T/vorM+hgDEIXuwWhabpPi2ZT1sCY+G/uF3TqDRnYeE=
Subject key identifier: 86:F0:DF:2F:F1:E8:11:13:25:15:92:A7:5D:F3:6B:D9:66:17:FE:A8
Authority key identifier: 48:BD:D5:33:59:3B:20:7F:B7:22:9F:18:52:1A:25:8F:23:29:4F:F6
Certificate issuer: /CN=A9154C6E/serialNumber=48BDD533593B207FB7229F18521A258F23294FF6
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft
Manifest number: 35
Signing time: Mon 11 May 2026 08:49:43 +0000
Manifest this update: Mon 11 May 2026 08:49:42 +0000
Manifest next update: Mon 18 May 2026 08:49:42 +0000
Files and hashes: 1: SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl (hash: VJbrNaNA3UaaEgPXS1lICm6IazXcB4WkACoebI9vptc=)
2: 2F9BA582021311F19CF662E3456F56BC.roa (hash: u0IV4WpfZVo/gGclcgn/9zhDLwmJapXxrIYkkYa+G0A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl
rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154C6E, serialNumber=48BDD533593B207FB7229F18521A258F23294FF6
Validity
Not Before: May 11 08:49:42 2026 GMT
Not After : May 18 08:49:42 2026 GMT
Subject: CN=6a019826-ed6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:33:41:b6:27:76:90:0a:e2:9b:dc:f1:95:58:
d7:ac:66:d1:6a:3a:1d:20:e3:db:ad:c1:36:71:c2:
23:aa:a0:2e:07:4a:30:1b:5e:44:be:3d:57:59:e9:
42:e4:39:ab:53:c3:89:e0:13:94:58:5b:b7:ab:70:
f9:47:5e:d8:85:70:49:88:f5:25:bb:05:7f:1d:1e:
56:bd:da:1d:f0:03:a0:bf:5c:7f:5f:96:6f:ef:52:
16:b2:37:78:4c:aa:be:18:75:21:c6:b8:57:f4:b9:
3a:84:a6:e1:a5:45:87:e8:8c:e6:84:30:a7:5d:3f:
4c:d2:de:19:5d:f8:e3:6c:ad:99:8e:30:31:26:1c:
67:91:84:36:be:40:21:52:84:b9:b8:ca:3d:8d:8a:
11:6c:c7:78:1a:51:70:00:0b:0c:f5:7d:a5:97:16:
c9:b1:9f:54:14:04:65:35:39:48:1c:ca:88:43:3d:
a6:26:67:9f:63:a2:2e:97:5c:9a:bd:9a:83:73:e5:
32:8f:a3:5b:7e:d0:43:06:22:81:92:91:da:82:bc:
f2:88:bf:d8:85:f1:50:ad:38:ca:86:c6:c3:8a:d5:
54:35:99:7a:75:a6:72:f3:05:c5:d1:90:f7:df:9b:
e2:25:9c:8e:98:e2:86:c7:ef:59:ce:17:5a:b9:e5:
4a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F0:DF:2F:F1:E8:11:13:25:15:92:A7:5D:F3:6B:D9:66:17:FE:A8
X509v3 Authority Key Identifier:
keyid:48:BD:D5:33:59:3B:20:7F:B7:22:9F:18:52:1A:25:8F:23:29:4F:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:84:8c:da:d3:96:04:98:e9:86:c8:54:1f:df:86:9b:87:42:
fe:24:79:9a:09:a4:9f:2c:e6:7d:11:90:76:29:bb:10:b7:74:
de:18:f9:a7:65:13:ea:35:9e:3d:f3:96:94:af:cd:e8:81:95:
e4:a8:88:a4:5b:2c:80:4e:e5:44:69:92:9f:ee:3e:e2:eb:84:
02:dd:d2:77:0e:60:b2:da:a8:1e:fe:2b:46:50:22:df:ed:9b:
d5:1b:a9:04:cf:71:98:24:f8:5f:94:cc:6d:3d:ed:88:a1:dd:
54:cf:a9:40:b9:e3:33:78:3d:ce:30:6f:bf:d8:31:66:18:e7:
11:5d:c5:e5:ea:17:c7:e3:72:16:03:1f:e5:d7:07:2c:99:db:
2d:ba:51:a0:44:9a:49:de:57:ff:b8:27:06:7c:1d:6d:1f:f1:
33:08:61:e4:5a:1a:68:12:42:d2:6c:90:60:d7:0c:26:21:6f:
f2:2e:82:b3:5a:c8:71:b8:a0:a5:c0:14:66:3b:14:08:ae:1a:
55:1a:b7:ab:fd:d6:2f:f0:4d:8e:ad:9b:e1:ef:45:4f:66:40:
cf:05:29:3d:ef:db:9e:db:d9:99:ba:cb:ca:05:19:d5:63:ce:
88:d7:d5:ea:11:17:32:46:5c:12:94:05:3e:db:b5:f2:60:b7:
cb:fa:cb:e2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NEM2RTExMC8GA1UEBRMoNDhCREQ1MzM1OTNCMjA3RkI3MjI5RjE4NTIxQTI1OEYy
MzI5NEZGNjAeFw0yNjA1MTEwODQ5NDJaFw0yNjA1MTgwODQ5NDJaMBgxFjAUBgNV
BAMTDTZhMDE5ODI2LWVkNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfM0G2J3aQCuKb3PGVWNesZtFqOh0g49utwTZxwiOqoC4HSjAbXkS+PVdZ6ULk
OatTw4ngE5RYW7ercPlHXtiFcEmI9SW7BX8dHla92h3wA6C/XH9flm/vUhayN3hM
qr4YdSHGuFf0uTqEpuGlRYfojOaEMKddP0zS3hld+ONsrZmOMDEmHGeRhDa+QCFS
hLm4yj2NihFsx3gaUXAACwz1faWXFsmxn1QUBGU1OUgcyohDPaYmZ59joi6XXJq9
moNz5TKPo1t+0EMGIoGSkdqCvPKIv9iF8VCtOMqGxsOK1VQ1mXp1pnLzBcXRkPff
m+IlnI6Y4obH71nOF1q55UrlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhvDfL/Ho
ERMlFZKnXfNr2WYX/qgwHwYDVR0jBBgwFoAUSL3VM1k7IH+3Ip8YUholjyMpT/Yw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0QzZFLzA1RTQ2NTcyMDIx
MjExRjE5MEI4MjdCQTQ1NkY1NkJDL1NMM1ZNMWs3SUgtM0lwOFlVaG9sanlNcFRf
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvU0wzVk0xazdJSC0zSXA4WVVob2xqeU1wVF9ZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0
QzZFLzA1RTQ2NTcyMDIxMjExRjE5MEI4MjdCQTQ1NkY1NkJDL1NMM1ZNMWs3SUgt
M0lwOFlVaG9sanlNcFRfWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA9hIza05YEmOmGyFQf34abh0L+JHmaCaSfLOZ9EZB2KbsQt3TeGPmnZRPqNZ49
85aUr83ogZXkqIikWyyATuVEaZKf7j7i64QC3dJ3DmCy2qge/itGUCLf7ZvVG6kE
z3GYJPhflMxtPe2Iod1Uz6lAueMzeD3OMG+/2DFmGOcRXcXl6hfH43IWAx/l1wcs
mdstulGgRJpJ3lf/uCcGfB1tH/EzCGHkWhpoEkLSbJBg1wwmIW/yLoKzWshxuKCl
wBRmOxQIrhpVGrer/dYv8E2OrZvh70VPZkDPBSk979ue29mZusvKBRnVY86I19Xq
ERcyRlwSlAU+27XyYLfL+svi
-----END CERTIFICATE-----
Generated at Wed May 13 05:53:14 2026 by rpki-client