
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
File: A3uPBfSQLZ2otCTDk0CGXz2smyY.mft (raw, json)
Hash identifier: wbzVdL0QlLrRMk9R0lBohfq9WuRjynk5nTgmcGUL4i4=
Subject key identifier: AF:76:4D:66:C9:57:58:A9:21:BF:EE:DE:53:6A:50:59:BC:4B:80:57
Authority key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26
Certificate issuer: /CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26
Certificate serial: 1709
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
Manifest number: 16F1
Signing time: Wed 22 Jul 2026 16:46:39 +0000
Manifest this update: Wed 22 Jul 2026 16:46:39 +0000
Manifest next update: Wed 29 Jul 2026 16:46:39 +0000
Files and hashes: 1: A3uPBfSQLZ2otCTDk0CGXz2smyY.crl (hash: eFKKbHxFV2HSk8f1ebpmS7I3vgakaYw+IEhB8YldVbg=)
2: EFE8CDF6C8D111EE95249F25C4F9AE02.roa (hash: vxWTeDCOHWuEhOaJAF4VGFM0DqtGWr26nr5q8brIPcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl
rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5897 (0x1709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167D07, serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26
Validity
Not Before: Jul 22 16:46:39 2026 GMT
Not After : Jul 29 16:46:39 2026 GMT
Subject: CN=6a60f3ef-5771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:93:cf:24:d0:92:e0:94:b5:d1:f0:4c:a4:
9f:c2:8b:2f:bf:34:96:50:8d:54:b8:dc:f0:a3:82:
7c:60:e9:43:ef:ce:70:4c:b7:d2:68:68:bc:68:ae:
f7:6a:0d:54:90:0e:ad:67:41:3e:2d:eb:7e:a1:c8:
5c:b3:f3:f4:b5:98:88:7b:1a:03:fa:aa:17:bc:11:
44:e7:24:d7:2c:a0:52:70:b0:90:40:d0:5c:d4:81:
69:96:33:a7:dd:a3:0e:a3:c8:9e:80:fe:45:d3:0e:
ef:df:db:bf:43:1e:a6:9a:40:cc:61:72:74:14:65:
45:9d:67:76:63:56:7d:f6:7c:7a:02:b2:61:b4:98:
04:a7:eb:76:be:fb:13:06:37:dc:72:60:83:d3:c7:
d2:bf:35:27:de:0b:74:22:85:f5:74:a7:ad:02:ec:
97:04:b1:db:62:cf:77:f2:10:0c:a3:d1:2c:a3:f9:
e3:42:12:e6:f6:6b:26:01:60:14:a1:e0:b5:64:68:
6e:ba:01:ad:f1:a3:12:2e:ee:da:b0:db:a8:c6:c7:
3b:1d:68:bd:a1:72:fb:44:e5:16:0f:8f:5a:5d:f8:
3a:77:08:e3:cc:12:53:05:2f:67:0c:75:cf:5c:4a:
4c:af:8d:06:d1:65:6d:5f:e2:19:96:ee:fc:2e:05:
58:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:76:4D:66:C9:57:58:A9:21:BF:EE:DE:53:6A:50:59:BC:4B:80:57
X509v3 Authority Key Identifier:
keyid:03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:a0:6c:21:ab:07:bd:dc:ad:9d:0e:aa:5a:c3:4e:86:ac:a2:
e7:90:80:8c:2c:fc:24:13:dd:c2:f3:db:81:df:0e:5c:66:e5:
36:ff:70:2e:0a:74:c1:96:71:4c:a8:42:1f:d8:04:15:8b:87:
cf:b7:aa:25:f9:67:34:1b:af:43:8b:25:11:d8:09:74:34:aa:
33:60:35:ca:ac:be:6a:c7:69:1b:db:cf:6e:a3:ec:7f:74:26:
7a:a7:dc:1c:e7:fc:18:41:de:29:d5:65:37:b2:2b:f4:98:db:
b7:f4:2f:c5:b9:a9:bd:e1:59:af:c2:50:39:94:62:55:6f:9a:
22:f4:d5:dc:b3:64:9b:f2:34:27:da:08:b8:af:b5:21:51:55:
53:32:74:e6:cd:7e:f4:05:37:52:2f:fc:38:fb:59:0a:0f:f9:
ca:66:49:11:64:4c:11:9c:8e:37:18:a1:2d:73:c4:70:3f:e3:
b2:58:44:0d:77:6d:4c:c3:43:8d:aa:65:83:fe:12:1b:93:7c:
1e:44:55:52:c3:15:dc:95:a3:c8:b7:c3:e2:77:b2:49:be:4b:
98:31:2e:ad:45:00:39:7c:fb:f7:04:33:4c:ee:f1:1c:6d:96:
8c:80:c7:51:13:bc:1c:b1:77:19:e8:b1:ac:f6:0f:f8:ee:a3:
97:21:73:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:54:46 2026 by rpki-client