
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
File: M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json)
Hash identifier: XyDXnKBTLdnsOgyvMyFc+fwmnGq1pnmBkyQa4AqigTo=
Subject key identifier: D7:CB:38:36:79:AC:8F:AC:99:6D:1E:67:30:B3:FA:0D:16:F9:E5:35
Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Certificate serial: 0514
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
Manifest number: 04F6
Signing time: Thu 24 Sep 2026 23:34:15 +0000
Manifest this update: Thu 24 Sep 2026 23:34:14 +0000
Manifest next update: Thu 01 Oct 2026 23:34:14 +0000
Files and hashes: 1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: YTMoGoAShVg/JRmtc3fbGJNB+jE1WB2qNXSXZGsbFmU=)
2: BC58A5C66DD311F09E550D38C4F9AE02.roa (hash: M/opGFmlb9jaN3RmTRwWVxME38lrA5KzlqcKDnyMekw=)
3: BBA03BF86DD311F09E550D38C4F9AE02.roa (hash: bzANKnbyeKHQq6L/luZgy8RCyHrFKy2/gJCau298tQs=)
4: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: mocm69lqZdjVVtWbDT8lrUYvlh6Uzdf4NnBQ902rsro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl
rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:34:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1300 (0x514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Validity
Not Before: Sep 24 23:34:14 2026 GMT
Not After : Oct 1 23:34:14 2026 GMT
Subject: CN=6ab5b377-3506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:f1:f3:32:d9:36:78:12:41:51:07:85:ad:
26:c2:f3:ae:18:a9:af:d5:f0:c3:03:5f:2a:7f:1c:
f3:45:b6:5d:d7:9d:b9:f1:85:08:3f:f4:c5:bc:3f:
6d:fd:2f:84:70:6d:07:be:24:23:57:06:cf:f7:0b:
ab:a7:a3:5c:9b:0b:5a:c1:23:c2:89:a1:2c:ec:38:
29:0c:37:fe:ce:1f:b5:8d:a4:ca:96:e6:6d:4a:1a:
c3:b0:1e:61:e1:13:8c:49:fc:db:ef:3b:87:46:3e:
af:6f:d6:47:9c:52:93:80:b7:61:a0:21:2a:b5:46:
a1:a0:8e:ab:eb:c1:05:9e:29:f4:22:51:48:4c:dc:
79:1a:a4:45:05:c9:b7:57:08:bc:a0:c7:a3:01:8a:
ac:e7:1c:c4:9d:09:ad:69:74:ea:96:a7:79:46:e7:
72:74:d6:20:70:9e:d0:b8:24:4d:be:b1:08:98:47:
d4:f8:5c:86:81:60:a4:2d:6f:6d:e7:61:cc:b7:6d:
90:01:c5:87:75:3f:67:1e:06:49:56:ea:b6:8f:f7:
25:1b:50:0e:f9:2c:4f:5d:ba:e6:08:12:31:b0:d1:
52:95:a0:55:83:87:fa:94:5d:f5:95:5a:5b:03:62:
ed:b3:f8:77:67:18:8f:12:e7:56:e9:77:ad:08:a2:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CB:38:36:79:AC:8F:AC:99:6D:1E:67:30:B3:FA:0D:16:F9:E5:35
X509v3 Authority Key Identifier:
keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:3c:44:77:eb:3d:79:b3:21:ba:86:aa:f4:3f:30:33:0f:a2:
43:21:61:30:13:df:10:e6:9e:13:ef:33:29:9a:44:c3:79:a3:
d8:60:5d:22:08:62:df:6e:3b:58:db:c6:a0:d1:55:16:3f:92:
4f:96:ed:98:4c:82:27:68:cd:a3:a6:1e:0f:c6:7c:ab:6e:b6:
03:5f:9c:29:1e:40:70:7b:e3:8b:09:16:1b:66:88:b4:65:f0:
24:6f:cb:ba:c8:ae:13:21:33:ce:ca:b0:71:53:68:36:25:35:
8c:ae:84:87:f7:30:75:32:56:f5:f1:48:19:32:8a:84:4f:b0:
4b:87:b6:f9:b1:5e:f3:74:f9:8f:5d:77:33:31:e8:7f:4c:50:
53:6a:06:56:80:7a:03:af:10:a4:76:76:22:0f:95:ff:50:34:
8a:97:40:81:28:55:9e:3b:05:37:13:14:b6:be:9c:21:ab:b9:
54:a8:63:c4:c7:53:6c:12:e1:89:81:83:f3:85:ce:2f:38:57:
d4:90:dc:0d:ec:f2:34:e8:21:f4:88:96:bf:ac:8d:ca:cd:a4:
f6:fa:06:a2:50:a3:96:4b:28:2d:44:79:0a:35:5f:41:e0:cb:
ec:54:ab:94:e4:38:1c:dc:11:c7:30:62:47:1c:1b:f7:30:c8:
42:7f:f0:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI1NTYxMTAvBgNVBAUTKDMzNzhERUUyQjNBMUE4RDNFRDFBRjRFNDVFMjI1RDAw
OTlDRjcwMTEwHhcNMjYwOTI0MjMzNDE0WhcNMjYxMDAxMjMzNDE0WjAYMRYwFAYD
VQQDEw02YWI1YjM3Ny0zNTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnjzx8zLZNngSQVEHha0mwvOuGKmv1fDDA18qfxzzRbZd15258YUIP/TFvD9t
/S+EcG0HviQjVwbP9wurp6NcmwtawSPCiaEs7DgpDDf+zh+1jaTKluZtShrDsB5h
4ROMSfzb7zuHRj6vb9ZHnFKTgLdhoCEqtUahoI6r68EFnin0IlFITNx5GqRFBcm3
Vwi8oMejAYqs5xzEnQmtaXTqlqd5RudydNYgcJ7QuCRNvrEImEfU+FyGgWCkLW9t
52HMt22QAcWHdT9nHgZJVuq2j/clG1AO+SxPXbrmCBIxsNFSlaBVg4f6lF31lVpb
A2Lts/h3ZxiPEudW6XetCKLqNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNfLODZ5
rI+smW0eZzCz+g0W+eU1MB8GA1UdIwQYMBaAFDN43uKzoajT7Rr05F4iXQCZz3AR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU1Ni8xMDQ1MkFGQTdE
QzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFOUHRHdlRrWGlKZEFKblBj
QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL00zamU0ck9ocU5QdEd2VGtYaUpkQUpuUGNCRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjU1Ni8xMDQ1MkFGQTdEQzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFO
UHRHdlRrWGlKZEFKblBjQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhzxEd+s9ebMhuoaq9D8wMw+iQyFhMBPfEOaeE+8zKZpEw3mj2GBdIghi3247
WNvGoNFVFj+ST5btmEyCJ2jNo6YeD8Z8q262A1+cKR5AcHvjiwkWG2aItGXwJG/L
usiuEyEzzsqwcVNoNiU1jK6Eh/cwdTJW9fFIGTKKhE+wS4e2+bFe83T5j113MzHo
f0xQU2oGVoB6A68QpHZ2Ig+V/1A0ipdAgShVnjsFNxMUtr6cIau5VKhjxMdTbBLh
iYGD84XOLzhX1JDcDezyNOgh9IiWv6yNys2k9voGolCjlksoLUR5CjVfQeDL7FSr
lOQ4HNwRxzBiRxwb9zDIQn/wTQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:57:33 2026 by rpki-client