
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
File: A3iO4rrk2AXrzcpmGOLsGhilxOI.mft (raw, json)
Hash identifier: b+dG1lwNyHQnaMJWRpjKzO/BKrCUMAEg34pnFZV9Q9g=
Subject key identifier: F7:34:0D:24:6B:B4:61:DD:71:68:1A:63:E2:02:A0:69:01:32:09:2B
Authority key identifier: 03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2
Certificate issuer: /CN=A915FDD9/serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
Manifest number: 0126
Signing time: Thu 23 Jul 2026 07:33:11 +0000
Manifest this update: Thu 23 Jul 2026 07:33:11 +0000
Manifest next update: Thu 30 Jul 2026 07:33:11 +0000
Files and hashes: 1: A3iO4rrk2AXrzcpmGOLsGhilxOI.crl (hash: /D7ZHXlg+8d7Xdtg4NV0ECHiJM0EYO7g+32k3LBXOOo=)
2: 279A9510AB7811F09488DF65C4F9AE02.roa (hash: a66FJVblEQHdrFJ6maL/blKyTJ7uVgdnmuKz3wA+9Uc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl
rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDD9, serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2
Validity
Not Before: Jul 23 07:33:11 2026 GMT
Not After : Jul 30 07:33:11 2026 GMT
Subject: CN=6a61c3b7-249f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b8:62:c3:49:a6:ea:3b:eb:4c:e3:99:eb:ca:
34:4c:41:f0:95:52:58:6e:e6:76:bd:9a:e4:15:4a:
c1:fe:70:c2:fb:13:1e:58:e3:f9:42:f9:24:4f:1a:
27:3d:1d:d4:a1:07:4d:70:f1:78:d7:c0:f9:5b:ea:
b7:b5:30:9b:71:21:77:5f:94:b0:8d:a6:0a:c7:47:
97:89:ac:03:d4:78:f4:16:27:34:a6:d0:e9:e7:77:
a2:8e:c6:a6:ac:2e:e9:68:36:81:13:b1:8d:b8:ed:
fa:ba:bb:70:55:de:4f:91:ec:82:d5:84:31:81:fb:
a9:ba:56:71:df:25:a3:e9:66:3e:7c:c8:dd:38:a0:
d8:aa:fa:ad:b2:1f:d5:99:0b:fa:2d:b6:b6:ab:d3:
6e:2e:5a:e4:55:26:0b:27:1b:fd:b7:a7:29:e9:8d:
81:ca:27:7d:38:22:d9:92:0e:0a:a6:35:1e:f6:f1:
73:b1:9d:e9:80:87:56:ec:f3:4e:cd:69:70:ef:05:
59:a3:5e:d1:9e:38:23:c7:cf:67:7b:ec:8d:d0:fb:
ab:df:c8:fe:d8:fb:ef:6b:54:cd:48:07:fa:ce:d8:
a9:8a:e2:12:30:ab:a8:37:a2:65:8a:c9:7e:8d:c3:
1c:f8:07:e7:1d:15:61:81:27:8f:82:33:8a:f0:60:
64:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:34:0D:24:6B:B4:61:DD:71:68:1A:63:E2:02:A0:69:01:32:09:2B
X509v3 Authority Key Identifier:
keyid:03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ee:7b:9e:1c:78:b0:1f:98:1a:36:75:8c:02:7a:ce:f9:48:
91:9a:89:47:63:06:87:84:fa:77:25:0a:ca:51:f9:37:ff:85:
5b:ee:38:e2:c4:b8:4e:d8:9d:e5:07:97:52:18:19:ff:ac:f4:
a0:3d:a1:d3:3e:66:e7:0e:be:6d:c7:d0:bb:62:27:58:13:28:
ed:e1:bc:34:7e:fe:08:66:9e:c8:96:cb:a8:fb:2c:c6:f5:47:
30:83:16:4f:9a:c7:91:97:74:cb:fe:4e:8b:48:23:c2:33:c6:
8e:30:26:06:27:7b:ce:4c:0c:f6:80:0b:70:d8:1b:da:fe:c4:
0e:5a:61:07:12:5b:27:c3:71:cc:f6:fb:ec:ab:7a:e2:93:f7:
d5:bd:2e:fc:c0:c5:2b:08:9f:70:97:27:1e:df:ad:1e:c9:28:
d6:78:55:d1:c4:58:b8:61:cc:f1:f9:fb:05:4f:e3:1d:68:e0:
c1:36:28:b8:a1:77:60:28:71:85:b0:84:d8:58:76:7b:e9:50:
2e:da:b0:cb:fb:f0:08:42:8a:b6:e9:3c:58:88:c9:fc:5f:54:
64:2e:70:ea:5c:32:c3:d1:22:be:47:a0:8b:d0:38:22:59:8e:
fe:98:ee:f3:b8:94:cb:33:ec:46:49:de:23:6b:e3:70:40:cd:
14:2e:6d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:33:56 2026 by rpki-client