
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft
File: -3sFh4NlHpP6MN2W1iZebi81JVQ.mft (raw, json)
Hash identifier: +4KeawG6kKP1G6QlK8IvO6bnYTh4FNrzezZScxxt2WU=
Subject key identifier: 7A:72:0F:80:35:B4:01:AE:A4:02:B6:6F:B7:63:8F:59:1D:C9:FB:8F
Authority key identifier: FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54
Certificate issuer: /CN=A916C473/serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft
Manifest number: C1
Signing time: Thu 23 Jul 2026 08:44:05 +0000
Manifest this update: Thu 23 Jul 2026 08:44:04 +0000
Manifest next update: Thu 30 Jul 2026 08:44:04 +0000
Files and hashes: 1: -3sFh4NlHpP6MN2W1iZebi81JVQ.crl (hash: yxN4exYDVJ86ojQXN+8j2sMippVWgxMcnv4vJiCKxsE=)
2: 2BB9711E5DE111F09B775D76C4F9AE02.roa (hash: U9tyCvMDlceVXMLQfDjCprercZZxtbmQBQkbmthwKe4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl
rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C473, serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554
Validity
Not Before: Jul 23 08:44:04 2026 GMT
Not After : Jul 30 08:44:04 2026 GMT
Subject: CN=6a61d455-c541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:ec:e6:78:90:f3:cd:6d:cf:26:7d:be:84:
df:01:e4:f4:96:51:2a:19:3e:ee:75:00:b7:24:27:
78:04:bf:9c:55:72:09:24:a1:68:41:a2:ee:53:47:
f1:fe:40:54:0e:bf:1d:81:8a:38:c4:d6:56:4f:ed:
53:15:ef:4d:a2:19:c9:22:45:4b:9b:29:15:f0:36:
81:71:3d:23:d2:d6:16:47:b0:50:c5:c5:b9:20:22:
19:e7:8d:4e:0e:a3:26:eb:5b:03:16:41:f5:9c:79:
1e:fe:3c:fc:59:16:9c:9a:e6:96:37:19:cd:d1:69:
b9:90:99:b9:48:73:58:d4:b3:0b:de:e6:2e:6c:3b:
dd:5f:54:52:88:7f:2d:8a:a1:7e:8f:c5:7d:7c:53:
ac:94:b8:38:f3:0c:f7:a2:6e:c7:44:d1:fb:3b:71:
8b:eb:ce:e6:e4:e1:ad:94:0d:12:31:8b:f4:be:d5:
c7:ac:a8:7c:ad:57:0a:15:61:4e:71:7f:dd:29:15:
95:ce:35:5b:f1:bd:5c:9d:00:44:d0:54:ff:db:a9:
aa:a5:85:4e:a2:69:6e:bf:23:85:71:5c:66:7c:98:
c1:af:22:da:59:05:a8:50:b3:39:51:f5:92:96:29:
46:26:87:39:71:70:40:d8:86:20:6a:03:f7:50:74:
a2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:72:0F:80:35:B4:01:AE:A4:02:B6:6F:B7:63:8F:59:1D:C9:FB:8F
X509v3 Authority Key Identifier:
keyid:FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:df:a1:d6:71:2e:6c:5c:ba:bd:1e:22:55:0d:8e:e1:4a:42:
27:8a:71:f0:49:62:1c:52:d5:08:38:51:54:79:c1:ec:16:e0:
e8:5e:05:cb:46:bb:89:09:52:e6:fd:a7:89:78:da:39:d2:69:
fa:bd:1e:b6:b8:1b:09:cd:8f:3e:a5:08:8b:fd:b8:3e:ce:df:
dd:7a:fb:d8:ec:98:65:cd:51:d7:da:23:94:2e:34:1c:74:ad:
fe:f2:4f:13:77:a8:88:fa:03:27:3f:36:be:30:57:78:10:44:
26:32:aa:a7:2a:92:f1:ea:32:04:23:dd:36:9b:47:1e:5a:e3:
64:d3:6b:31:8f:82:94:17:04:5a:99:84:f2:3f:75:34:95:00:
66:87:24:4e:e3:56:92:18:ac:3d:55:3e:b8:05:19:8e:ce:f6:
9e:32:a7:c6:27:d1:9f:58:9e:17:93:ec:f8:7c:eb:3f:f4:5c:
60:7e:d8:35:51:a2:2b:f1:97:71:8c:30:f3:be:91:6b:be:df:
2b:77:c0:60:23:96:ee:ff:f5:54:1b:93:3a:e0:d1:ba:c0:0c:
31:3a:75:8a:94:bb:d4:9b:eb:98:d1:23:5a:51:70:4b:1f:c2:
aa:d2:9c:f5:8a:54:ae:f2:1e:37:54:51:7e:e7:1f:f1:1b:7f:
51:35:29:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:38 2026 by rpki-client