
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
File: A3iO4rrk2AXrzcpmGOLsGhilxOI.mft (raw, json)
Hash identifier: Rh0PD81TBAZE1W5KNhWdyvnbPDkPB6IujqZtIQVnDN4=
Subject key identifier: 7A:A4:E1:22:2F:09:D9:D2:20:78:41:E8:C9:76:06:85:80:3E:F4:9C
Authority key identifier: 03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2
Certificate issuer: /CN=A915FDD9/serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2
Certificate serial: 0168
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
Manifest number: 0146
Signing time: Wed 23 Sep 2026 05:19:05 +0000
Manifest this update: Wed 23 Sep 2026 05:19:04 +0000
Manifest next update: Wed 30 Sep 2026 05:19:04 +0000
Files and hashes: 1: A3iO4rrk2AXrzcpmGOLsGhilxOI.crl (hash: ckIqZKIY1oP+bFcJ4rqqCyAyBrkD5UnlI3K97d28i5M=)
2: 279A9510AB7811F09488DF65C4F9AE02.roa (hash: a66FJVblEQHdrFJ6maL/blKyTJ7uVgdnmuKz3wA+9Uc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl
rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDD9, serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2
Validity
Not Before: Sep 23 05:19:04 2026 GMT
Not After : Sep 30 05:19:04 2026 GMT
Subject: CN=6ab36148-b023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cf:94:d0:66:03:9d:9a:ef:2e:81:f4:b8:11:
4f:80:3c:a9:42:0a:f0:ab:10:66:71:4d:78:73:09:
ab:64:f8:0f:cc:60:b7:f8:c9:ce:b9:d0:54:4f:9f:
d4:d3:54:46:97:5a:6b:6c:a8:35:7c:0c:04:ab:49:
ef:3a:0b:76:a1:69:d8:3c:e9:14:30:13:01:9d:36:
e6:8f:bd:09:6b:48:41:e3:46:bb:43:91:fe:51:0c:
82:ec:5d:f8:ec:e3:ea:0f:7a:a7:c3:1d:c7:61:02:
61:73:ec:ed:d0:e0:71:9f:aa:05:84:9f:34:60:30:
17:b7:3d:69:62:47:92:dc:bd:8e:96:e7:0e:db:4b:
e1:91:4b:d9:40:91:83:92:d9:9d:80:34:52:be:18:
6d:74:fe:31:eb:d9:53:b5:c2:ad:9f:93:a0:2a:7c:
9c:70:4d:5c:8b:2d:06:84:16:62:47:c9:fb:06:8d:
15:07:9f:bc:6e:c1:52:cf:63:3a:1c:6e:4c:4f:c5:
ab:82:e4:b3:29:cb:44:13:05:94:55:fc:5d:83:0f:
1b:bf:fd:80:95:0a:56:3d:69:18:b1:3e:6a:e4:b4:
50:41:65:2a:ec:60:d1:91:ae:f8:60:7e:0f:d3:c2:
89:e7:3f:39:5f:a1:e3:be:01:96:56:e8:44:74:c4:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A4:E1:22:2F:09:D9:D2:20:78:41:E8:C9:76:06:85:80:3E:F4:9C
X509v3 Authority Key Identifier:
keyid:03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:69:26:31:b5:34:99:e9:72:94:69:3b:11:bd:37:cb:7f:e8:
1c:a6:58:e8:d7:8d:c2:c2:d8:48:02:d7:43:a4:63:6f:a2:bc:
f5:ff:65:de:27:3e:0d:78:7a:b8:cf:62:39:c6:20:d7:9f:a2:
0f:16:6e:97:76:85:96:6d:92:0d:1a:ea:e5:38:c5:6f:82:43:
e6:f6:46:bb:ad:c3:e4:23:8a:1c:ed:f3:e6:90:53:20:b3:31:
ce:f7:5b:da:72:0b:11:0d:e8:b5:55:6e:75:b6:39:bb:61:98:
ba:ae:1e:39:c1:99:ca:34:1f:5d:70:ee:0c:4f:a9:03:5b:d3:
9c:d4:9c:6b:9e:41:c3:cf:78:d1:aa:01:1e:b0:41:e4:aa:44:
73:7c:d1:5f:fb:5e:0a:71:ad:45:a6:4d:16:3a:4a:b8:73:a9:
2e:23:44:19:f9:8e:0a:98:04:14:08:65:03:ec:b7:c6:85:64:
28:26:fd:69:54:ce:e3:52:f1:f1:e6:66:3a:ff:18:3b:88:9e:
75:b3:e2:ab:fd:c3:72:ed:f9:ce:f8:d3:b8:c0:6d:89:84:d2:
93:22:4e:25:21:d6:b8:9f:07:23:45:d1:96:5a:19:54:24:9d:
8d:2c:52:ba:76:ac:01:c4:66:91:eb:32:6e:82:4e:c3:e5:64:
89:32:77:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:08:10 2026 by rpki-client