
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft
File: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft (raw, json)
Hash identifier: R9B6Pfw3dhnykDtvzLvYSZlugcJ8NYU44Jl7ENlWllg=
Subject key identifier: 27:CA:E2:46:D0:53:76:2F:4D:66:89:D8:90:F6:DA:A9:F8:9A:06:36
Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04
Certificate issuer: /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04
Certificate serial: 0870
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft
Manifest number: 0867
Signing time: Wed 22 Jul 2026 21:20:03 +0000
Manifest this update: Wed 22 Jul 2026 21:20:02 +0000
Manifest next update: Wed 29 Jul 2026 21:20:02 +0000
Files and hashes: 1: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl (hash: 27IOctjff7L0wQRHPiCGChJBvmAGWcmET+1cq4E+FGw=)
2: 2FF4108A0C3911EB828BDC25C4F9AE02.roa (hash: +1MurbXyF5va03lXfL/j9G2HKWwfacoafaUYrKj0wIM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl
rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2160 (0x870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164FD2, serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04
Validity
Not Before: Jul 22 21:20:02 2026 GMT
Not After : Jul 29 21:20:02 2026 GMT
Subject: CN=6a613403-baf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:d0:0d:e1:c4:40:bf:4f:6d:47:a7:34:0f:
cc:1d:47:08:d7:57:6d:65:82:d2:23:08:38:7e:cb:
84:ee:84:51:74:3b:36:d8:b7:a4:cd:91:9a:8f:12:
b2:a7:c3:7b:c7:d2:d5:c2:5f:c0:d3:5a:bb:29:af:
a3:95:a5:01:c0:c1:f5:27:3c:f9:b6:7a:dc:62:b8:
7f:c8:81:8e:2c:dd:44:92:4b:2d:b2:ad:e8:cc:62:
98:80:53:f5:2d:90:99:b7:ee:7e:a3:27:1c:da:57:
b9:36:09:37:c9:aa:ca:b6:91:c0:ec:57:ab:48:9b:
84:be:28:13:6b:87:37:c9:9e:73:b2:da:01:59:58:
c3:d1:68:9f:59:22:1c:02:d5:1d:21:3b:b2:23:68:
3e:85:d1:1c:85:2b:cc:3e:a8:b1:02:df:ac:86:70:
2e:9f:86:d1:17:92:97:a8:5c:fe:e0:ca:7c:51:27:
ab:b6:e5:8d:ed:13:76:e7:7a:3b:cc:38:5e:87:2a:
9c:a0:12:fd:15:93:23:fc:88:e3:d2:67:e9:4e:1a:
33:bf:5b:e8:1e:9c:86:27:ad:f8:0e:8e:5c:16:14:
12:83:34:8c:74:8f:ec:ee:a6:8e:bb:42:d2:06:7d:
2d:75:82:b9:ff:c7:c8:4c:b0:45:e8:8f:bf:c0:a7:
7d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CA:E2:46:D0:53:76:2F:4D:66:89:D8:90:F6:DA:A9:F8:9A:06:36
X509v3 Authority Key Identifier:
keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:58:fc:bd:32:21:5e:b7:db:31:07:2b:17:7d:54:ff:c6:ee:
52:2f:14:ea:0a:2b:c2:d7:f8:8a:cd:12:a6:11:0e:ef:2c:38:
86:89:ca:ab:54:f4:ff:11:af:f7:eb:58:df:77:64:59:e2:da:
de:c2:14:db:d3:57:24:6a:db:6a:a3:32:43:12:c4:ca:87:aa:
81:1d:7e:c5:a9:a0:f1:2b:b4:99:5a:c4:a5:70:6d:f6:c2:e8:
a4:6c:d3:6e:35:80:aa:4e:31:9c:9c:14:f5:2c:da:48:6d:20:
e5:84:c6:9f:d1:52:d2:15:8c:c0:bc:a0:6c:63:14:66:38:a8:
23:2d:f5:4d:e6:d1:08:65:4f:e7:4a:fe:60:7c:34:06:6b:13:
1a:0b:c2:0d:57:12:c7:5e:73:79:2c:f9:d9:e7:f6:8e:4f:f6:
98:1d:51:96:f5:a5:12:d7:11:91:75:5e:c2:91:22:e6:b9:7f:
c8:7e:c5:a8:1c:57:84:ab:52:67:d9:5a:90:46:bc:a8:48:1c:
be:6d:44:e9:ba:99:1a:97:f3:9c:79:b9:a4:41:29:48:24:a0:
fb:51:eb:a1:28:e1:98:31:f0:28:ca:ae:76:2f:3f:69:69:a5:
51:5b:ee:d2:7c:e2:c4:9c:9c:f4:9b:1b:fa:89:42:e4:11:76:
19:09:b3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:03:47 2026 by rpki-client