
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
File: u3QQVrccdV0D-5zyFKQSTKTzdgw.mft (raw, json)
Hash identifier: IVkm8j0Cm82gChQfemCgTJZnGJH52ksorg6s1GgC4xc=
Subject key identifier: 2B:C9:C1:62:54:58:F6:D4:FD:FF:76:B9:B2:42:18:63:55:75:7A:B9
Authority key identifier: BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C
Certificate issuer: /CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C
Certificate serial: 0D14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
Manifest number: 0D08
Signing time: Sat 26 Sep 2026 18:25:49 +0000
Manifest this update: Sat 26 Sep 2026 18:25:48 +0000
Manifest next update: Sat 03 Oct 2026 18:25:48 +0000
Files and hashes: 1: u3QQVrccdV0D-5zyFKQSTKTzdgw.crl (hash: IudhjoyebaxL2JiMJqy6al0SWY1fjeIiftNAdur4vvs=)
2: 5AD6AAFE0F1111EA932F3E45C4F9AE02.roa (hash: 1c7oqXTwOjBxpWnURCwd9ROwsARCXBKMI1YgV6KP1z4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl
rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3348 (0xd14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A0AA, serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C
Validity
Not Before: Sep 26 18:25:48 2026 GMT
Not After : Oct 3 18:25:48 2026 GMT
Subject: CN=6ab80e2d-07e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6e:a9:e8:4d:bb:9b:ed:f8:6c:42:9c:a5:1d:
15:72:cf:70:16:69:d7:b4:33:19:d7:e2:61:28:63:
49:e8:55:02:ba:d9:74:3e:b3:7f:49:1a:cb:b5:13:
8d:b8:0f:94:56:46:f1:fa:12:ca:d1:16:04:85:f0:
5d:dd:d8:f8:a7:5a:e4:22:10:90:42:2f:12:f8:d0:
aa:40:67:53:56:ea:06:c0:d8:c2:39:3d:8a:92:7d:
c0:84:0f:f6:4c:25:1b:b5:a8:6f:99:1d:eb:3d:94:
51:f6:c1:11:26:4a:73:17:c7:10:a1:90:33:1f:1e:
42:a7:66:a2:2d:89:a8:ad:49:98:dd:05:32:5f:e9:
81:4a:2f:05:de:b6:e0:04:41:3e:e9:60:76:3a:3c:
4a:06:eb:45:14:36:45:3c:1d:fa:f3:f4:b2:60:b0:
9b:2f:62:1a:ed:c6:be:69:73:05:cc:c6:5f:36:0d:
d4:42:ff:65:c2:e3:7c:1d:40:8f:76:3c:af:6b:0a:
6c:05:d7:b8:28:d1:d6:a8:eb:54:80:bb:32:e5:bc:
34:20:ed:59:cf:4f:c6:a5:4b:fd:6e:8b:ce:e6:a8:
a6:0e:aa:51:b0:3f:9e:31:9e:9c:52:f0:60:a8:7d:
e4:d9:75:b6:8a:2f:3e:46:d2:1b:92:7d:2c:85:de:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C9:C1:62:54:58:F6:D4:FD:FF:76:B9:B2:42:18:63:55:75:7A:B9
X509v3 Authority Key Identifier:
keyid:BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c6:7c:fc:ee:7f:67:12:5f:b7:36:58:9a:87:48:8a:e9:0e:
58:37:37:65:af:33:f2:1e:08:cf:a2:6e:03:d6:6a:ca:cf:79:
46:9d:02:eb:71:b4:c4:3f:70:8a:3b:eb:02:ba:b2:c0:cc:78:
c9:1c:7e:89:7e:85:d2:72:f2:85:70:b4:d4:d9:e5:7e:ab:a3:
0a:d8:e2:9c:b2:1e:72:d4:35:68:37:1d:a9:4f:fb:ea:8e:bb:
80:23:83:0e:73:f6:2b:ee:3d:30:2a:ae:67:e7:1d:2c:d1:a1:
c9:9d:bc:20:47:0c:f1:38:b4:5a:15:4b:44:3a:04:3d:67:38:
bb:12:30:da:68:00:07:20:25:62:49:7c:c9:a7:cb:a1:6a:75:
67:53:02:7f:f7:a6:d9:26:2a:c3:0a:67:16:10:c5:a7:de:45:
63:6d:04:ce:5d:5f:6f:7f:32:f8:57:f8:43:a6:52:4f:99:a0:
57:dd:08:2f:b7:01:e4:f0:d0:49:48:ac:13:30:fe:87:41:ce:
04:ce:81:d5:5b:e2:a6:e6:d1:5e:96:08:d0:2f:17:af:a2:11:
4e:5e:3f:3c:1d:dc:f0:2b:fa:2d:c4:48:10:87:d3:c6:50:bc:
42:67:fa:8a:0f:dc:7d:5c:dd:53:67:e7:77:eb:b0:a0:e5:c1:
c9:e4:3c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:29:53 2026 by rpki-client