
$ rpki-client -vvf rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/3mNivqTO3X139q98BomMu4dkxH8.mft
File: 3mNivqTO3X139q98BomMu4dkxH8.mft (raw, json)
Hash identifier: e2LBk9nDcRdR/4szbuY8CEHwsJIrAtouof1pE1g+hAw=
Subject key identifier: E2:E7:6C:7E:F9:72:9A:6E:1B:33:20:42:E2:8C:3D:DE:49:AB:7F:1F
Authority key identifier: DE:63:62:BE:A4:CE:DD:7D:77:F6:AF:7C:06:89:8C:BB:87:64:C4:7F
Certificate issuer: /CN=A917171E/serialNumber=DE6362BEA4CEDD7D77F6AF7C06898CBB8764C47F
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mNivqTO3X139q98BomMu4dkxH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/3mNivqTO3X139q98BomMu4dkxH8.mft
Manifest number: 0D
Signing time: Wed 13 May 2026 09:15:23 +0000
Manifest this update: Wed 13 May 2026 09:15:23 +0000
Manifest next update: Wed 20 May 2026 09:15:23 +0000
Files and hashes: 1: 3mNivqTO3X139q98BomMu4dkxH8.crl (hash: OipJQDWHiceOG01SO6HKDaod/5cdAyVdCJVuxnbPRYE=)
2: A215F7263E2B11F19BB8FE1BB7833773.roa (hash: CG+Fkm8MRpZF2H0mCDcsrtByDJI5HEiQSaXQPyB65U0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/3mNivqTO3X139q98BomMu4dkxH8.crl
rsync://rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/3mNivqTO3X139q98BomMu4dkxH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mNivqTO3X139q98BomMu4dkxH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 09:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917171E, serialNumber=DE6362BEA4CEDD7D77F6AF7C06898CBB8764C47F
Validity
Not Before: May 13 09:15:23 2026 GMT
Not After : May 20 09:15:23 2026 GMT
Subject: CN=6a04412b-6bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:64:5d:74:0d:26:e0:a4:81:88:20:59:c1:
32:62:88:f9:ae:3c:df:bc:03:4d:ec:09:30:d1:3a:
d7:7a:f9:ac:d6:81:97:3c:7b:92:98:f8:6b:78:e2:
12:8d:55:d7:ff:15:ad:ff:96:14:68:b6:23:40:fc:
3a:5f:4c:74:4d:da:48:2c:2c:cd:3c:d2:39:f6:e4:
46:f8:c7:77:e3:fd:81:14:10:5f:99:ff:c1:c9:b3:
a4:45:27:3d:b7:3d:df:b5:95:f7:77:9c:bf:4f:26:
0c:66:b5:dc:07:22:bb:95:a7:1e:73:0b:9d:5f:82:
76:78:34:d4:34:82:06:08:f9:0f:c6:8f:a8:f3:1f:
0a:56:0e:e4:96:9f:f6:08:c0:0a:ff:4e:4b:e0:f5:
4a:10:51:32:0e:32:3f:3b:38:9c:20:8f:a1:1c:a0:
63:2e:d0:40:07:d8:cd:c7:2e:2a:28:b0:40:31:19:
90:e0:07:ac:5b:de:46:e2:03:43:c2:6c:89:bc:a3:
c2:45:4f:28:76:d3:76:86:a8:73:17:fb:8c:d8:eb:
e7:c4:f1:9a:e9:3c:2c:63:0e:6f:70:94:ec:3d:8c:
38:ab:13:ed:d0:9f:b0:2e:56:83:b1:0d:87:f0:f9:
bc:5b:81:92:52:0a:32:75:55:b6:ee:b7:8f:1f:7a:
07:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E7:6C:7E:F9:72:9A:6E:1B:33:20:42:E2:8C:3D:DE:49:AB:7F:1F
X509v3 Authority Key Identifier:
keyid:DE:63:62:BE:A4:CE:DD:7D:77:F6:AF:7C:06:89:8C:BB:87:64:C4:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/3mNivqTO3X139q98BomMu4dkxH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mNivqTO3X139q98BomMu4dkxH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/3mNivqTO3X139q98BomMu4dkxH8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:a4:80:e4:79:eb:a7:c0:ea:6e:b8:b0:f8:46:41:0e:e4:25:
b0:4c:98:8c:f1:ed:fa:f6:e2:f3:5f:05:88:94:c7:f7:cc:21:
50:4e:69:76:f4:44:5d:ca:0a:cb:24:aa:6c:de:be:f6:27:74:
a5:31:13:21:fe:b6:ea:74:25:c7:93:05:5c:44:7a:f2:b4:f2:
c0:c8:79:4c:10:27:89:29:5a:98:e1:74:f6:64:f0:3f:79:da:
9d:3f:aa:d7:40:1a:0f:bd:74:bf:4a:66:87:06:f1:4c:1a:04:
fa:ba:d3:ad:0f:22:53:87:26:b4:c5:0f:a9:41:a3:d2:b9:ea:
66:d2:7a:43:5f:52:9d:a5:c9:04:f6:c6:2b:16:b9:c4:81:d7:
a7:6b:15:58:08:5a:0e:4a:a9:2c:ca:c7:33:e8:6f:1f:0b:10:
58:7d:ff:87:3b:52:77:50:26:55:fe:b7:72:5b:08:1a:eb:4e:
b2:05:cb:f3:4d:da:7a:94:10:26:36:de:f1:df:45:42:ed:83:
5b:49:d5:6f:30:5e:71:6f:20:1e:3c:80:d0:76:61:7a:df:c2:
1e:78:5b:76:2e:23:c1:3f:1e:29:b0:67:2f:b7:e2:9d:bd:30:
c0:16:6d:a7:ca:c5:00:14:7c:9a:7e:dd:6d:8b:29:0c:91:cd:
5e:5a:e3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:00:20 2026 by rpki-client